Design/Logic Flaw

An issue was discovered in open-falcon dashboard version 0.2.0, allows remote attackers to gain, modify, and delete sensitive information via crafted POST request to register interface...

Design/Logic Flaw

CSV Injection vulnerability in ChurchCRM version 4.2.0, allows remote attackers to execute arbitrary code via crafted CSV file...

Design/Logic Flaw

An issue was discovered in OFPBundleCtrlMsg in parser.py in Faucet SDN Ryu version 4.34, allows remote attackers to cause a denial of service DoS infinite loop...

Design/Logic Flaw

An issue was discovered in freedesktop poppler version 20.12.1, allows remote attackers to cause a denial of service DoS via crafted .pdf file to FoFiType1C::cvtGlyph function...

Design/Logic Flaw

An issue was discovered in OFPQueueGetConfigReply in parser.py in Faucet SDN Ryu version 4.34, allows remote attackers to cause a denial of service DoS infinite loop...

Design/Logic Flaw

Download of Code Without Integrity Check vulnerability in Genians Genian NAC V4.0, Genians Genian NAC V5.0, Genians Genian NAC Suite V5.0, Genians Genian ZTNA allows Malicious Software Update.This issue affects Genian NAC V4.0: from V4.0.0 through V4.0.155; Genian NAC V5.0: from V5.0.0 through...

Design/Logic Flaw

Incorrect default permissions in some IntelR Advanced Link Analyzer Standard Edition software installers before version 22.1 .1 may allow an authenticated user to potentially enable escalation of privilege via local access...

Design/Logic Flaw

Uncontrolled search path for the IntelR AI Hackathon software before version 2.0.0 may allow an unauthenticated user to potentially enable escalation of privilege via network access...

Design/Logic Flaw

Incorrect default permissions in some IntelR SDP Tool software before version 1.4 build 5 may allow an authenticated user to potentially enable escalation of privilege via local access...

Design/Logic Flaw

Incorrect default permissions in the IntelR ITS sofware before version 3.1 may allow authenticated user to potentially enable escalation of privilege via local access...

Design/Logic Flaw

Incorrect default permissions in some IntelR RealSenseTM SDKs in version 2.53.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

Design/Logic Flaw

Unchecked return value in some IntelR RealSenseTM ID software for IntelR RealSenseTM 450 FA in version 0.25.0 may allow a priviledged user to potentially enable denial of service via local access...

XXL-JOB Cross-Site Request Forgery Vulnerability

XXL-JOB is a distributed task scheduling platform based on java language from XU Xueli XXL-JOB community. A security vulnerability exists in XXL-JOB version 2.2.0, which originates from a cross-site request forgery CSRF vulnerability in xxl-job-admin/user/add. The vulnerability can be exploited b...

Adobe Dimension Heap Buffer Overflow Vulnerability (CNVD-2023-65166)

Adobe Dimension is a 3D design tool that is very easy for designers to use while providing high quality visuals. To create realistic objects, Adobe Dimension uses materials defined in the NVidia Material Design Language. A heap buffer overflow vulnerability exists in Adobe Dimension. The...

Adobe Dimension Post-Release Reuse Vulnerability

Adobe Dimension is a 3D design tool that is very easy for designers to use while providing high quality visuals. To create realistic objects, Adobe Dimension uses materials defined in the NVidia Material Design Language. Adobe Dimension has a post-release reuse vulnerability in version 3.4.9 and...

Adobe Dimension Out-of-Bounds Read Vulnerability (CNVD-2023-64506)

Adobe Dimension is a 3D design tool that is very easy for designers to use while providing high quality visuals. To create realistic objects, Adobe Dimension uses materials defined in the NVidia Material Design Language. An out-of-bounds read vulnerability exists in Adobe Dimension. The...

The vulnerability of Cobalt Ashlar-Vellum’s software for parametric automated design and 3D modeling lies in the ability to write data beyond the buffer memory limit, allowing an attacker to execute arbitrary code.

The vulnerability of the Cobalt Ashlar-Vellum software for parametric automated design and 3D modeling lies in the storage of data beyond the buffer limits in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

SAP PowerDesigner Code Injection Vulnerability

SAP PowerDesigner is a database design software from SAP Germany. SAP PowerDesigner suffers from a code injection vulnerability that originates when an attacker with local access to the system places a malicious library that can be executed by the application. No details of the vulnerability are...

Design/Logic Flaw

DSM 2022.2 SU2 and all prior versions allows a local low privileged account to execute arbitrary OS commands as the DSM software installation user...

Design/Logic Flaw

An attacker can send a specially crafted message to the Wavelink Avalanche Manager, which could result in service disruption or arbitrary code execution. Thanks to a Researcher at Tenable for finding and reporting. Fixed in version 6.4.1...