Mattermost Resource Management Error Vulnerability (CNVD-2024-24422)

Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. Mattermost suffers from a resource management error vulnerability that stems from an inability to limit the number of active sessions, which can be exploited by an authenticated attacker to crash the...

Mbed TLS 安全漏洞

Mbed TLS is an open source, portable, easy to use, readable and flexible SSL library. A security vulnerability exists in Mbed TLS versions 3.3.0 through 3.5.2 prior to 3.6.0, which stems from the presence of a buffer error vulnerability. An attacker could exploit this vulnerability to cause...

PHOENIX CONTACT CHARX SEC Buffer Error Vulnerability

The PHOENIX CONTACT CHARX SEC is a series of AC charge controllers from PHOENIX CONTACT, Germany. An input validation error vulnerability exists in Phoenix Contact CHARX SEC-3000 versions prior to v1.5.1, which stems from incorrect input validation and could allow an unauthenticated, remote...

IBM SPSS Statistics Resource Management Error Vulnerability

IBM SPSS Statistics is a software package from International Business Machines IBM. It is used for interactive or batch statistical analysis. A resource management error vulnerability exists in IBM SPSS Statistics, which can be exploited by an attacker to create multiple files, exhaust file handl...

IBM QRadar WinCollect Agent Resource Management Error Vulnerability

IBM QRadar WinCollect Agent is an agent program from International Business Machines IBM for collecting and sending Windows event logs. A resource management error vulnerability exists in IBM QRadar WinCollect Agent that stems from vulnerability to server-side request forgery attacks. No detailed...

MicroDicom DICOM Viewer Buffer Error Vulnerability

MicroDicom DICOM Viewer is a lightweight and easy-to-use application from MicroDicom Inc. for processing and viewing medical images in DICOM format. A buffer error vulnerability exists in MicroDicom DICOM Viewer 2023.3 Build 9342 and prior versions, which stems from a lack of proper validation of...

Adobe InDesign 缓冲区错误漏洞

Adobe InDesign is a set of layout and editing applications from the American company Audobee Adobe. Adobe InDesign suffers from a null pointer dereference vulnerability that can be exploited by an attacker to cause a denial of service...

Adobe Substance 3D Painter Buffer Error Vulnerability (CNVD-2024-09896)

Adobe Substance 3D Painter is a 3D texturing application from the American company Audobee Adobe. A buffer error vulnerability previously existed in Adobe Substance 3D Painter version 9.1.1, which stemmed from the presence of an out-of-bounds read that could lead to a sensitive memory leak. An...

Biosig Project libbiosig Number Error Vulnerability

BioSig Project Biosig Project libbiosig is an open source software library for biomedical signal processing from BioSig Project. It has biosignal analysis capabilities. A numeric error vulnerability exists in Biosig Project libbiosig version 2.5.0 due to an integer underflow vulnerability in the...

Adobe Substance 3D Painter Buffer Error Vulnerability

Adobe Substance 3D Painter is a 3D texturing application from Audobee Adobe USA. A buffer error vulnerability previously existed in Adobe Substance 3D Painter version 9.1.1, which stemmed from the effects of the presence of an out-of-bounds read vulnerability that could lead to a sensitive memory...

Filseclab Twister Antivirus Buffer Error Vulnerability

Filseclab Twister Antivirus is an intelligent antivirus from Fair Filseclab. A buffer error vulnerability exists in Filseclab Twister Antivirus version v8.17, which stems from vulnerability to out-of-bounds reads...

Canon Multiple Products Buffer Error Vulnerability

Canon Color imageCLASS is a series of printers from Canon Japan. A security vulnerability exists in several Canon products. The vulnerability can be exploited by an attacker to execute arbitrary code. The following products and versions are affected: Satera LBP670C Series, Satera MF750C Series...

Canon Multiple Products Buffer Error Vulnerability

Canon Color imageCLASS is a series of printers from Canon Japan. A security vulnerability exists in several Canon products. The vulnerability can be exploited by an attacker to execute arbitrary code. The following products and versions are affected: Satera LBP670C Series, Satera MF750C Series...

Discourse Resource Management Error Vulnerability

Discourse is an open source community discussion platform. The platform includes features such as community, email and chat rooms. A resource management error vulnerability exists in Discourse, which stems from an unimposed size limit on client-side editable fields, and can be exploited by an...

IObit Malware Fighter Resource Management Error Vulnerability

IOBit Malware Fighter is a suite of antivirus software for Windows-based platforms from IOBit. The program features anti-malware and virus protection. A resource management error vulnerability exists in IObit Malware Fighter version v11.0.0.1274, which originates from a denial of service by...

Hathway Router CM5100 Buffer Error Vulnerability

Hathway Router is a router from Hathway India. The Hathway Router CM5100 suffers from a buffer error vulnerability that stems from multiple vulnerabilities in the router that could allow a remote attacker to perform a stored cross-site scripting XSS attack, obtain sensitive information, or cause ...

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, an American company. A numeric error vulnerability exists in versions prior to Google Chrome 120.0.6099.216, which stems from insufficient data validation. An attacker can exploit the vulnerability to install malicious extensions via specially crafted...

GTKWave 缓冲区错误漏洞

GTKWave is a full-featured, GTK+-based waveform viewer from GTKWave. A code execution vulnerability exists in GTKWave version 3.3.118, which can be exploited by an attacker to potentially cause arbitrary code execution via a specially crafted fst file...

PaddlePaddle Number Error Vulnerability

PaddlePaddle is an independent R&D deep learning platform open-sourced by China's PaddlePaddle. PaddlePaddle 2.6.0 version of the previous security vulnerability, the vulnerability stems from the possibility of runtime crashes and denial of service...

PaddlePaddle Number Error Vulnerability

PaddlePaddle is an independent R&D deep learning platform open-sourced by China's PaddlePaddle. PaddlePaddle 2.6.0 version of the previous security vulnerability, the vulnerability stems from the possibility of runtime crashes and denial of service...