SUSE CVE-2022-39955

The OWASP ModSecurity Core Rule Set CRS is affected by a partial rule set bypass by submitting a specially crafted HTTP Content-Type header field that indicates multiple character encoding schemes. A vulnerable back-end can potentially be exploited by declaring multiple Content-Type "charset" nam...

[slackware-security] php

New php packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/php-7.4.33-i586-3slack15.0.txz: Rebuilt. This update fixes security issues: Core: Passwordverify always return true with some hash. Core:...

Adobe FrameMaker 输入验证错误漏洞

Adobe Framemaker is a set of page layout software for writing and editing large or complex documents including structured documents from Adobe. Adobe FrameMaker has an input validation error vulnerability that could be exploited by an attacker to execute arbitrary code in the context of the curre...

Adobe Photoshop 输入验证错误漏洞

Adobe Photoshop is a set of image processing software from the American company Audobee Adobe. The software is mainly used for processing pictures. Adobe Photoshop suffers from an input validation error vulnerability that originates from improper user input validation and can be exploited by an...

Adobe After Effects 输入验证错误漏洞

Adobe After Effects is a suite of visual effects and motion graphics software from Adobe. Adobe After Effects is vulnerable to an input validation error, which could be exploited to execute arbitrary code in the context of the current user...

Adobe Bridge 缓冲区错误漏洞

Adobe Bridge is a file viewer from Adobe, Inc. An out-of-bounds write vulnerability exists in Adobe Bridge, which can be exploited to execute arbitrary code in the context of the current user...

Adobe Bridge 输入验证错误漏洞

Adobe Bridge is a file viewer from Adobe, Inc. Adobe Bridge is vulnerable to an input validation error that could be exploited to execute arbitrary code in the context of the current user...

Adobe Bridge 缓冲区错误漏洞

Adobe Bridge is a file viewer from Adobe, Inc. An out-of-bounds write vulnerability exists in Adobe Bridge, which can be exploited to execute arbitrary code in the context of the current user...

Adobe Animate 缓冲区错误漏洞

Adobe Animate is a set of Flash animation software from Adobe. Adobe Animate is vulnerable to a heap buffer overflow vulnerability that could be exploited to execute arbitrary code in the context of the current user...

Adobe Animate 缓冲区错误漏洞

Adobe Animate is a Flash animation software from Adobe. Adobe Animate is vulnerable to a stack buffer overflow vulnerability that could be exploited to execute arbitrary code in the context of the current user...

Adobe Animate 资源管理错误漏洞

Adobe Animate is a set of Flash animation software from the American company Audobee Adobe. Adobe Animate suffers from a memory misreference vulnerability that originates from a mix-up in the program's instructions responsible for freeing memory. An attacker could exploit this vulnerability to...

Adobe Bridge 缓冲区错误漏洞

Adobe Bridge is a file viewer from Adobe, Inc. An out-of-bounds write vulnerability exists in Adobe Bridge, which can be exploited to execute arbitrary code in the context of the current user...

CVE-2023-22237

After Affects versions 23.1 and earlier, 22.6.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

Siemens Solid Edge 缓冲区错误漏洞

Siemens Solid Edge is a 3D CAD software from Siemens, a German company. Siemens Solid Edge is vulnerable to an out-of-bounds write vulnerability that could be exploited to execute code in the context of the current process...

Siemens Solid Edge 缓冲区错误漏洞

Siemens Solid Edge is a 3D CAD software from Siemens, a German company. Siemens Solid Edge is vulnerable to an out-of-bounds read vulnerability that could be exploited to execute code in the context of the current process...

Siemens JT Open Toolkit 缓冲区错误漏洞

JT Open Toolkit is an application programming interface API for software developers who support JT, a publicly released data format developed by Siemens Digital Industry Software and widely used for communication, visualization, digital modeling, and various other purposes.Siemens JT Open and JT...

Git 代码问题漏洞

Git is a free, open source distributed version control system. A security vulnerability exists in versions of Git prior to 2.39.2, which stems from the ability to inadvertently run an executable file in the current directory...

Siemens Solid Edge 缓冲区错误漏洞

Siemens Solid Edge is a 3D CAD software from Siemens Germany. The software can be used for part design, assembly design, sheet metal design, welding design and other industries. A memory corruption vulnerability exists in Siemens Solid Edge. An attacker can exploit the vulnerability by parsing a...

Tecnomatix Plant Simulation 缓冲区错误漏洞

Siemens Tecnomatix Plant Simulation is an object-oriented, graphical, integrated modeling and simulation tool. An out-of-bounds write vulnerability exists in Siemens Tecnomatix Plant Simulation. An attacker can exploit this vulnerability to execute code in the context of the current process...

Siemens Solid Edge Out-of-Bounds Writing Vulnerability (CNVD-2023-09117)

Siemens Solid Edge is a 3D CAD software from Siemens, a German company. An out-of-bounds write vulnerability exists in Siemens Solid Edge due to the Datakit CrossCadWarex64.dll used in the affected product, which contains out-of-bounds writes beyond the end of the allocated buffer when parsing...