printix-CVE-2022-29554

CVE-2022-29554 简单发布 | 打印友好 Kofax Printix 的 "Printix Secure Cloud Print Management"（版本 1.3.1156.0 及以下）中的 PrintixService.exe 存在 "API 输入处理不当" 或 "暴露危险方法或函数" 漏洞，允许本地或远程攻击者通过利用本地 PrintixProxy 类调用错误信息（localhost/e/?error=INVALIDCREDENTIAL&errorMessage=kioskModeValue）来攻击任何运行在 KioskMode 的企业安装实例。当攻击者将此漏洞与...

EUVD-2018-0783

Malware in sbrugna...

USN-5239-1: HttpClient vulnerability

It was discovered that HttpClient mishandled certain input. An attacker could use this vulnerability to cause a crash or possibly execute arbitrary code...

USN-5184-1: libmysofa vulnerability

It was discovered that libmysofa mishandled certain input. An attacker could use this vulnerability to cause a denial of service crash...

USN-5172-1: uriparser vulnerabilities

It was discovered that uriparser mishandled certain input. An attacker could use this vulnerability to cause uriparser to crash or possibly execute arbitrary code. CVE-2018-19198, CVE-2018-19199, CVE-2018-19200 It was discovered that uriparser incorrectly handled certain URIs. An attacker could u...

USN-5157-1 postorius vulnerability

It was discovered that Postorius mishandled specially crafted input. An attacker could use this vulnerability that obtain sensitive information...

CVE-2021-33582

Cyrus IMAP before 3.4.2 allows remote attackers to cause a denial of service multiple-minute daemon hang via input that is mishandled during hash-table interaction. Because there are many insertions into a single bucket, strcmp becomes slow. This is fixed in 3.4.2, 3.2.8, and 3.0.16...

USN-4875-1: OpenSMTPD vulnerabilities

It was discovered that OpenSMTPD incorrectly verified the sender's or receiver's e-mail addresses under certain conditions. An attacker could possibly use this vulnerability to execute arbitrary commands as root. CVE-2020-7247 It was discovered that OpenSMTPD did not properly handle hardlinks und...

USN-4827-1 libcrypto++ vulnerability

It was discovered that Crypto++ mishandled certain input. An attacker could use this vulnerability to leak potentially sensitive information...

USN-4816-1: game-music-emu vulnerability

It was discovered that game-music-emu mishandled certain crafted input. A remote attacker could use this vulnerability to cause game-music-emu to crash...

Ubuntu 18.04 LTS : Yubico PIV Tool vulnerabilities (USN-4276-1)

The remote Ubuntu 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4276-1 advisory. It was discovered that libykpiv, a supporting library of the Yubico PIV Tool and YubiKey PIV Manager, mishandled specially crafted input. An attacker wit...

Design/Logic Flaw

SimpleMDE 1.11.2 has XSS via an onerror attribute of a crafted IMG element, or via certain input with and characters, which is mishandled during construction of an A element...