printix-CVE-2022-29552

CVE-2022-29552 간단한 릴리스 | 인쇄 친화적 Kofax Printix의 "Printix Secure Cloud Print Management" 버전 1.3.1156.0 이하에서 PrintixService.exe에 존재하는 "권한 있는 API의 부적절한 사용Incorrect Use of Privileged APIs" 취약점으로 인해 로컬 또는 원격 공격자가 LocalMachine\Software\Printix\ 레지스트리 내의 모든 값을 변경할 수 있습니다. 이는 CVE-2022-25089에 대한 불완전한 수정이었습...

printix-CVE-2022-29553

CVE-2022-29553 간편 릴리스 | 인쇄 친화적 Kofax Printix의 "Printix Secure Cloud Print Management" 버전 1.3.1156.0 이하에서 PrintixService.exe에 존재하는 "노출된 위험한 메서드 또는 함수" 또는 "하드코딩된 보안 관련 상수 사용" 취약점으로 인해 로컬 또는 원격 공격자가 "ProgramDir" 레지스트리 값을 덮어쓰고 악성 PrintixServiceTask.xml 파일이 포함된 디렉터리를 가리키도록 할 수 있습니다. 이를 통해 공격자는 권한을 시스템...

SUSE CVE-2026-0846

A vulnerability in the filestring function of the nltk.util module in nltk version 3.9.2 allows arbitrary file read due to improper validation of input paths. The function directly opens files specified by user input without sanitization, enabling attackers to access sensitive system files by...

[SECURITY] Fedora 42 Update: nginx-mod-fancyindex-0.5.2-13.fc42

The Fancy Index module makes possible the generation of file listings, like the built-in autoindex module does, but adding a touch of style. This is possible because the module allows a certain degree of customization of the generated content: Custom headers. Either local or stored remotely. Cust...

CVE-2024-13741: Server-Side Request Forgery (SSRF)

The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to Limited Server-Side Request Forgery in all versions up to, and including, 5.9.4.2 via the pmuploadimage function. This makes it possible for authenticated attackers, with Subscriber-level access and abov...

SUSE CVE-2005-3863

Stack-based buffer overflow in kkstrtext.h in ktools library 0.3 and earlier, as used in products such as 1 centericq, 2 orpheus, 3 motor, and 4 groan, allows local users or remote attackers to execute arbitrary code via a long parameter to the VGETSTRING macro...

CVE-2017-8464

Windows Shell in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows local users or remote attackers to execute arbitrary code via a crafted .LNK fil...

Oracle Linux 5 : tog-pegasus (ELSA-2008-1001)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2008-1001 advisory. 2.7.0-2.0.1.el52.1 - Added pegasus-enterprise.patch to allow detection of enterprise-release 2.7.0-2.el52.1 - Fix local-or-remote-auth patch and enhanc...

security flaw

Buffer overflow in the ReadFontAlias function in XFree86 4.1.0 to 4.3.0, when using the CopyISOLatin1Lowered function, allows local or remote authenticated users to execute arbitrary code via a malformed entry in the font alias font.alias file, a different vulnerability than CVE-2004-0083 and...

CVE-2001-0850: Undefined Security Weakness

A configuration error in the libdb1 package in OpenLinux 3.1 uses insecure versions of the snprintf and vsnprintf functions, which could allow local or remote users to exploit those functions with a buffer overflow...