Bento4 Denial of Service Vulnerability (CNVD-2022-74158)

Bento4 is an open source C library for reading and writing MP4 files. Bento4 v1.6.0.0 contains a denial of service vulnerability that stems from a segmentation error in the /x8664/multiarch/strlen-avx2.S component, which could be exploited by an attacker to cause a denial of service...

GHSA-6GRP-75PQ-C8CJ SaltStack has insecure /tmp file handling in salt/modules/chef.py

modules/chef.py in SaltStack before 2014.7.4 does not properly handle files in /tmp...

SaltStack has insecure /tmp file handling in salt/modules/chef.py

modules/chef.py in SaltStack before 2014.7.4 does not properly handle files in /tmp...

CVE-2022-29622

An arbitrary file upload vulnerability in formidable v3.1.4 allows attackers to execute arbitrary code via a crafted filename. NOTE: some third parties dispute this issue because the product has common use cases in which uploading arbitrary files is the desired behavior. Also, there are...

Denial Of Service (DoS)

spring-beans is vulnerable to denial of service. . The vulnerability exists in CachedIntrospectionResults.java because applications that handle file not properly validate which allows to attacker crash the application...

kernel: fget: check that the fd still exists after getting a ref to it

A read-after-free memory flaw was found in the Linux kernel's garbage collection for Unix domain socket file handlers in the way users call close and fget simultaneously and can potentially trigger a race condition. This flaw allows a local user to crash the system or escalate their privileges on...

Sinatra路径遍历漏洞

Sinatra is a DSL for easily creating web applications in Ruby. A path traversal vulnerability exists in Sinatra versions prior to 2.2.0, which stems from not verifying that the extension path matches publicdir when serving static files...

USN-5398-1 libsdl1.2, libsdl2 vulnerability

It was discovered that SDL Simple DirectMedia Layer incorrectly handled certain files. An attacker could possibly use this issue to cause a denial of service, or possibly execute arbitrary code...

[SECURITY] [DSA 5123-1] xz-utils security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5123-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso April 18, 2022 https://www.debian.org/security/faq -...

CVE-2020-13495

Pixar OpenUSD 20.05 is affected. A specially crafted malformed binary USD file can trigger an out-of-bounds memory access in how file offsets are handled, potentially leading to disclosure of sensitive information. Exploitation details appear via PoCs in a referenced advisory; the attack requires...

The vulnerability of the psf_log_printf() function in the libsndfile library, which is used for reading and writing audio files, allows a hacker to execute arbitrary code on the target system.

The vulnerability of the psflogprintf function in the libsndfile library, which is used for reading and writing audio files, is related to a numerical overflow vulnerability. Exploiting this vulnerability could allow an attacker to execute arbitrary code on the target system...

The vulnerability of the Jszip zip file processing library, related to improper code generation, allows a hacker to cause a service failure.

The vulnerability of the Jszip zip file processing library is related to incorrect handling of file names. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

USN-5352-1 libtasn1-6 vulnerability

It was discovered that Libtasn1 incorrectly handled certain files. An attacker could possibly use this issue to cause a denial of service...

CVE-2022-26960

connector.minimal.php in std42 elFinder through 2.1.60 is affected by path traversal. This allows unauthenticated remote attackers to read, write, and browse files outside the configured document root. This is due to improper handling of absolute file paths...

CVE-2021-42724

Adobe Bridge version 11.1.1 and earlier is affected by a memory corruption vulnerability due to insecure handling of a malicious file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability...

CVE-2021-42527

Adobe Premiere Elements 20210809.daily.2242976 and earlier is affected by a memory corruption vulnerability due to insecure handling of a malicious file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerabilit...

CVE-2021-40786

Adobe Premiere Elements 20210809.daily.2242976 and earlier is affected by a memory corruption vulnerability due to insecure handling of a malicious file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerabilit...

CVE-2021-42526

Adobe Premiere Elements 20210809.daily.2242976 and earlier is affected by a memory corruption vulnerability due to insecure handling of a malicious file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerabilit...

CVE-2021-40787

Adobe Premiere Elements 20210809.daily.2242976 and earlier is affected by a memory corruption vulnerability due to insecure handling of a malicious file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerabilit...

CVE-2021-40779

Adobe Media Encoder version 15.4.1 and earlier is affected by a memory corruption vulnerability due to insecure handling of a malicious file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability...