Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a failure to properly handle the EVENTFILEFLFREED flag when working with format files...

The vulnerability of the Kofax PowerPDF software, which is used for creating, converting, editing, and publishing PDF files, stems from the copying of buffers without checking the size of the input data. This allows an attacker to execute arbitrary code.

The vulnerability of the Kofax PowerPDF software for creating, converting, editing, and publishing PDF files lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to execute arbitrary code using a specially crafted PDF fi...

CVE-2023-49125

A vulnerability has been identified in Parasolid V35.0 All versions V35.0.263, Parasolid V35.1 All versions V35.1.252, Parasolid V36.0 All versions V36.0.198, Solid Edge SE2023 All versions V223.0 Update 11, Solid Edge SE2024 All versions V224.0 Update 3. The affected applications contain an out ...

The vulnerability of Siemens Solid Edge’s design and simulation tools relates to access to an uninitialized pointer, allowing a malicious actor to execute arbitrary code.

The vulnerability of Siemens Solid Edge’s design and simulation tools relates to access to an uninitialized pointer during the processing of PAR format files. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the 3D Builder software for designing and preparing objects for 3D printing lies in the possibility of an operation exceeding the buffer boundaries in memory, allowing a hacker to execute arbitrary code.

The vulnerability of the 3D Builder software for designing and preparing objects for 3D printing is related to the execution of operations beyond the buffer boundaries in memory when processing WRL and PLY format files. Exploiting this vulnerability allows an attacker to execute arbitrary code by...

GIFLIB Denial of Service Vulnerability

GIFLIB is a library for reading and editing gif images. A denial of service vulnerability exists in GIFLIB version 5.1.4, which originates from a gif2rgb memory leak in util/gif2rgb.c, and can be exploited by a remote attacker to trigger an out-of-memory exception or a denial of service via a gif...

Apple多款产品缓冲区错误漏洞

Apple tvOS and others are products of Apple Inc. in the U.S. Apple tvOS is an operating system for smart TVs.Apple iPadOS is an operating system for iPad tablets.Apple macOS Big Sur is a mobile app app. A buffer error vulnerability exists in several Apple products that stems from a boundary...

CVE-2021-34945

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

CVE-2021-34921

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

Foxit PDF Reader Post-release Reuse Vulnerability (CNVD-2021-79771)

Foxit PDF Reader formerly known as Foxit Reader is a set of software used to read PDF format files, developed by Foxit Software Fujian. The vulnerability stems from not verifying the existence of the object before performing operations on it. An attacker could exploit this vulnerability to execut...

Foxit PDF Reader Post-release Reuse Vulnerability (CNVD-2021-64090)

Foxit PDF Reader formerly known as Foxit Reader is a set of software used to read PDF format files, developed by Foxit Software Fujian. The vulnerability stems from not verifying the existence of the object before performing operations on it. An attacker could exploit this vulnerability to execut...

Foxit PDF Reader Post-release Reuse Vulnerability (CNVD-2021-64096)

Foxit PDF Reader formerly known as Foxit Reader is a set of software used to read PDF format files, developed by Foxit Software Fujian. The vulnerability stems from not verifying the existence of the object before performing operations on it. An attacker could exploit this vulnerability to execut...

CVE-2020-7872

DaviewIndy v8.98.7.0 and earlier versions have a Integer overflow vulnerability, triggered when the user opens a malformed format file that is mishandled by DaviewIndy. Attackers could exploit this and arbitrary code execution...

Solid Edge SE 缓冲区错误漏洞

Siemens Solid Edge is a 3D CAD software from Siemens, Germany. The software can be used for part design, assembly design, sheet metal design, welding design and other industries. An out-of-bounds write vulnerability exists in Siemens Solid Edge. The vulnerability is due to a lack of proper...

Ubuntu 16.04 LTS : OpenJPEG vulnerabilities (USN-4880-1)

The remote Ubuntu 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4880-1 advisory. It was discovered that OpenJPEG incorrectly handled certain image data. An attacker could use this issue to cause OpenJPEG to crash, leading to a denial ...

CVE-2021-27590

When a user opens manipulated Tag Image File Format .TIFF format files received from untrusted sources in SAP 3D Visual Enterprise Viewer version 9, the application crashes and becomes temporarily unavailable to the user until restart of the application...

Low: Red Hat Security Advisory: libpng security update

An update for libpng is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...

Huawei EulerOS: Security Advisory for libvorbis (EulerOS-SA-2020-1772)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-4316-1: GD Graphics Library vulnerabilities

It was discovered that GD Graphics Library incorrectly handled cloning an image. An attacker could possibly use this issue to cause GD Graphics Library to crash, resulting in a denial of service. CVE-2018-14553 It was discovered that GD Graphics Library incorrectly handled loading images from X...

CVE-2019-19797

An out-of-bounds write flaw was found in transfig in the way the fig2dev program handled the processing of Fig format files. Specifically, the flaw affects the translation process of Fig codes into the box graphics language. This flaw allows for potential exploitation by crashing the fig2dev...