24490 matches found
CVE-2023-45612
In JetBrains Ktor before 2.3.5 default configuration of ContentNegotiation with XML format was vulnerable to XXE...
Important: Red Hat Security Advisory: libvpx security update
An update for libvpx is now available for Red Hat Enterprise Linux 9.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...
CVE-2023-45612
CVE-2023-45612 affects JetBrains Ktor with the ContentNegotiation XML format enabled in versions before 2.3.5. The root cause is an insecure default XML configuration that allows external entity processing, enabling XXE. Exploitation can lead to file disclosure (e.g., reading server files) and SS...
PT-2023-9765 · Linux +2 · Linux Kernel +2
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a format-overflow warning in the f2fs component of the Linux kernel. The warning occurs when using the gcc compiler with the W=1 option. The problem is in the...
The vulnerability of the readSeparateTilesIntoBuffer() function in the LibTIFF library, which allows a hacker to cause a service failure
The vulnerability of the readSeparateTilesIntoBuffer function in the LibTIFF library is related to integer overflow during the processing of TIFF format files. Exploiting this vulnerability could allow an attacker to cause service failures...
PT-2023-5901 · Kofax · Kofax Power Pdf
Name of the Vulnerable Software and Affected Versions: Kofax Power PDF affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a maliciou...
Zope Information Disclosure Vulnerability (GHSA-8xv7-89vj-q48c)
Zope is prone to an information disclosure vulnerability through Python SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:zope:zope...
UBUNTU-CVE-2023-3576
A memory leak flaw was found in Libtiff's tiffcrop utility. This issue occurs when tiffcrop operates on a TIFF image file, allowing an attacker to pass a crafted TIFF image file to tiffcrop utility, which causes this memory leak issue, resulting an application crash, eventually leading to a denia...
LibTIFF Security Vulnerability
LibTIFF is a library for reading and writing TIFF Tagged Image File Format files. The library contains some command line tools for working with TIFF files. A security vulnerability exists in LibTIFF that stems from a memory leak when tiffcrop operates on TIFF image files, causing the application ...
The vulnerability of the Gstreamer multimedia framework, related to integer overflow, allows an attacker to execute arbitrary code.
The vulnerability of the Gstreamer multimedia framework is related to a potential integer overflow. Exploiting this vulnerability could allow an attacker to execute arbitrary code using specially crafted MXF files...
libvpx: Multiple Vulnerabilities
Background libvpx is the VP8 codec SDK used to encode and decode video streams, typically within a WebM format media file. Description Multiple vulnerabilities have been discovered in libvpx. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE...
NULL Pointer Dereference
Overview Affected versions of this package are vulnerable to NULL Pointer Dereference via the stbiconvertformat function. An attacker can cause a denial of service by using a crafted pic file. Remediation There is no fixed version for stb. References - PoC Credit: peccc...
CLSA-2023-1696351864 Fix CVE(s): CVE-2020-19726, CVE-2020-19724, CVE-2020-21490, CVE-2020-35342
SECURITY UPDATE: uninitialized-heap vulnerability in function tic4xprintcond in file opcodes/tic4x-dis.c - debian/patches/CVE-2020-35342.patch: Init all of condtable - CVE-2020-35342 SECURITY UPDATE: a memory consumption issue in getdata function in binutils/nm.c -...
CLSA-2023-1696351606 Fix CVE(s): CVE-2020-19724, CVE-2020-19726, CVE-2020-21490, CVE-2020-35342
SECURITY UPDATE: uninitialized-heap vulnerability in function tic4xprintcond in file opcodes/tic4x-dis.c - debian/patches/CVE-2020-35342.patch: Init all of condtable - CVE-2020-35342 SECURITY UPDATE: a memory consumption issue in getdata function in binutils/nm.c -...
The vulnerability of the MXF File Parser component in the Gstreamer multimedia framework allows a hacker to execute arbitrary code.
The vulnerability of the MXF File Parser component in the Gstreamer multimedia framework is related to integer overflow. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by loading a specially crafted MFX video file...
stb code issue vulnerability
stb is a single-file public domain library for C/C ++. A code issue vulnerability exists in stb version 2.28, which stems from a null pointer dereference issue in the function stbiconvertformat. An attacker could exploit this vulnerability to cause a Denial of Service DoS via a specially crafted...
Fedora: Security Advisory for libwebp (FEDORA-2023-2a0668fe43)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
PT-2023-28275 · Unknown · Pdf-Xchange Editor
Name of the Vulnerable Software and Affected Versions: PDF-XChange Editor affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations. It requires user interaction, such as visiting a malicious page or opening a...
The vulnerability of the encoding function in the VP8 format of the libvpx library used by Google Chrome allows attackers to execute arbitrary code.
The vulnerability of the encoding function in the VP8 format of the libvpx library used by Google Chrome browser is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code when a user opens a specially crafted web page...
