3309 matches found
多款F5产品 缓冲区错误漏洞
F5 BIG-IP and others are products of F5 Corporation, U.S.A. F5 BIG-IP is an application delivery platform that integrates network traffic management, application security management, load balancing, and other features.F5 BIG-IQ is a software-based cloud management solution.F5 F5OS-A is an operati...
PT-2022-22967 · Sourcecodester · Sourcecodester Canteen Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Canteen Management System version 1.0 Description: A critical issue has been discovered, affecting the login.php file. The business argument is vulnerable to SQL injection, which can be exploited remotely. Recommendations: For...
PT-2022-5418 · Adobe · Dimension
Name of the Vulnerable Software and Affected Versions: Adobe Dimension version 3.4.5 Description: The issue is related to a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. This vulnerability is associated with the analysis of SKP file...
CVE-2022-41191
Due to lack of proper memory management, when a victim opens a manipulated Jupiter Tesselation .jt, JTReader.x3d file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based...
SUSE-SU-2022:3487-1 Security update for ImageMagick
This update for ImageMagick fixes the following issues: - CVE-2022-3213: Fixed heap buffer overflow when processing a malformed TIFF file bsc1203450...
Remote code execution
Flatpress v1.2.1 was discovered to contain a remote code execution RCE vulnerability in the Upload File function...
Vim getvcol function Heap Buffer Overflow Info Disclosure
The vulnerability of the getvcol function in the src/charset.c file of the Vim text editor is related to the escape character being interpreted beyond its intended scope when using /%V. Exploiting this vulnerability allows an attacker to gain access to confidential data...
CVE-2022-27492
An integer underflow in WhatsApp could have caused remote code execution when receiving a crafted video file...
Arbitrary Code Execution
Overview Affected versions of this package are vulnerable to Arbitrary Code Execution via the extract and files methods of the RPM::File. Exploiting this vulnerability is possible when using RPM::Filefiles and RPM::Fileextract methods with a malicious payload compressor field in the RPM...
Stack overflow
DISPUTED md2roff 1.9 has a stack-based buffer overflow via a Markdown file, a different vulnerability than CVE-2022-34913. NOTE: the vendor's position is that the product is not intended for untrusted input...
MGASA-2022-0337 Updated libtiff packages fix security vulnerability
libtiff's tiffcrop utility has a uint32t underflow that can lead to out of bounds read and write. An attacker who supplies a crafted file to tiffcrop likely via tricking a user to run tiffcrop on it with certain parameters could cause a crash or in some cases, further exploitation. CVE-2022-2867...
CVE-2022-38430 Adobe Photoshop MP4 File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
Adobe Photoshop versions 22.5.8 and earlier and 23.4.2 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the...
PT-2022-25444 · Ansys · Ansys Spaceclaim
Name of the Vulnerable Software and Affected Versions: Ansys SpaceClaim version 2022 R1 Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a malicious file. The fla...
PT-2022-25438 · Ansys · Ansys Spaceclaim
Name of the Vulnerable Software and Affected Versions: Ansys SpaceClaim version 2022 R1 Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a malicious file. The fla...
CVE-2022-2979
Opening a specially crafted file could cause the affected product to fail to release its memory reference potentially resulting in arbitrary code execution...
PT-2022-17789 · WordPress · All-In-One Video Gallery
Name of the Vulnerable Software and Affected Versions: All-in-One Video Gallery plugin for WordPress versions up to, and including 2.6.0 Description: The issue allows unauthenticated users to download sensitive files hosted on the affected server and forge requests to the server via the dl...
PT-2022-22148 · Dell · Dell Powerscale Onefs
Name of the Vulnerable Software and Affected Versions: Dell PowerScale OneFS versions 9.0.0 up to and including 9.1.0.20 Dell PowerScale OneFS version 9.2.1.13 Dell PowerScale OneFS version 9.3.0.6 Dell PowerScale OneFS version 9.4.0.3 Description: The issue concerns the insertion of sensitive...
Garage Management System 安全漏洞
SourceCodester Garage Management System Cms-Website is a garage management system by mayurik personal developer. It helps you to manage all your vehicles, cars and motorcycles. A security vulnerability exists in Garage Management System v1.0, which stems from an access control issue in the...
