Zoom Memory Copy DoS

The vulnerability of Zoom video conferencing software relates to the copying of input data into buffers without checking their size. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

PT-2023-6955

Name of the Vulnerable Software and Affected Versions CrushFTP versions prior to 10.5.1 Description The issue is related to errors in handling input data in the Object Attribute Handler component of the CrushFTP cross-platform FTP server. Exploitation of this issue may allow a remote attacker to...

Ghostscript devn_pcx_write_rle Heap Buffer Overflow DoS

The vulnerability of the devnpcxwriterle function in the base/gdevdevn.c file of the Ghostscript document processing software is related to the copying of buffers without checking the input data. Exploiting this vulnerability could allow an attacker to cause a service failure using a specially...

Dell Alienware Command Center Privilege Escalation

The vulnerability of Dell Alienware Command Center relates to insufficient validation of input data. Exploiting this vulnerability can allow attackers to enhance their privileges...

ROS-20231109-01

Go programming language vulnerability is related to insecure external control of critical state data state when processing the setuid and setgid attributes. Exploitation of the vulnerability could allow an attacker, acting remotely, escalate their privileges and gain access to read, modify, or...

PT-2023-15061 · Unknown · Gopi Ramasamy Email

Name of the Vulnerable Software and Affected Versions: Gopi Ramasamy Email posts to subscribers versions n/a through 6.2 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection...

CVE-2023-47104

tinyfiledialogs aka tiny file dialogs before 3.15.0 allows shell metacharacters such as a backquote or a dollar sign in titles, messages, and other input data. NOTE: this issue exists because of an incomplete fix for CVE-2020-36767, which only considered single and double quote characters...

CVE-2023-47104

tinyfiledialogs aka tiny file dialogs before 3.15.0 allows shell metacharacters such as a backquote or a dollar sign in titles, messages, and other input data. NOTE: this issue exists because of an incomplete fix for CVE-2020-36767, which only considered single and double quote characters...

CVE-2023-47104

tinyfiledialogs aka tiny file dialogs before 3.15.0 allows shell metacharacters such as a backquote or a dollar sign in titles, messages, and other input data. NOTE: this issue exists because of an incomplete fix for CVE-2020-36767, which only considered single and double quote characters...

CVE-2020-36767

tinyfiledialogs aka tiny file dialogs before 3.8.0 allows shell metacharacters in titles, messages, and other input data...

Input validation

tinyfiledialogs aka tiny file dialogs before 3.8.0 allows shell metacharacters in titles, messages, and other input data...

Design/Logic Flaw

tinyfiledialogs aka tiny file dialogs before 3.15.0 allows shell metacharacters such as a backquote or a dollar sign in titles, messages, and other input data. NOTE: this issue exists because of an incomplete fix for CVE-2020-36767, which only considered single and double quote characters...

PT-2023-30311 · Unknown · Tinyfiledialogs

Name of the Vulnerable Software and Affected Versions: tinyfiledialogs versions prior to 3.15.0 Description: The issue allows shell metacharacters, such as a backquote or a dollar sign, in titles, messages, and other input data. This problem exists due to an incomplete fix for a previous issue,...

CVE-2020-36767

tinyfiledialogs aka tiny file dialogs before 3.8.0 allows shell metacharacters in titles, messages, and other input data...

PT-2023-11904 · Unknown · Tinyfiledialogs

Name of the Vulnerable Software and Affected Versions: tinyfiledialogs versions prior to 3.8.0 Description: The issue allows shell metacharacters in titles, messages, and other input data. Recommendations: For versions prior to 3.8.0, update to version 3.8.0 or later to resolve the issue...

Oracle Database Recovery Manager DoS

The vulnerability of the Oracle Database Recovery Manager component of the Oracle Database Server management system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service interruptions...

IBM DB2 DoS

The vulnerability of the IBM DB2 database management system and the IBM DB2 Connect Server automatic redirection server is related to errors in processing input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

IBM DB2 DoS

The vulnerability of the IBM DB2 database management system and the IBM DB2 Connect Server automatic redirection server is related to errors in processing input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

IBM DB2 DoS

The vulnerability of the IBM DB2 database management system and the IBM DB2 Connect Server automatic redirection server is related to errors in processing input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

IBM DB2 DoS

The vulnerability of the IBM DB2 database management system and the IBM DB2 Connect Server automatic redirection server is related to errors in processing input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...