SUSE CVE-2017-17866

pdf/pdf-write.c in Artifex MuPDF before 1.12.0 mishandles certain length changes when a repair operation occurs during a clean operation, which allows remote attackers to cause a denial of service buffer overflow and application crash or possibly have unspecified other impact via a crafted PDF...

SUSE CVE-2022-26488

In Python before 3.10.3 on Windows, local users can gain privileges because the search path is inadequately secured. The installer may allow a local attacker to add user-writable directories to the system search path. To exploit, an administrator must have installed Python for all users and enabl...

CVE-2023-25396

Privilege escalation in the MSI repair functionality in Caphyon Advanced Installer 20.0 and below allows attackers to access and manipulate system files...

CVE-2023-25396

Privilege escalation in the MSI repair functionality in Caphyon Advanced Installer 20.0 and below allows attackers to access and manipulate system files...

Privilege escalation

Privilege escalation in the MSI repair functionality in Caphyon Advanced Installer 20.0 and below allows attackers to access and manipulate system files...

CVE-2023-25396

Privilege escalation in the MSI repair functionality in Caphyon Advanced Installer 20.0 and below allows attackers to access and manipulate system files...

CVE-2023-25396

CVE-2023-25396 affects Caphyon Advanced Installer (MSI repair functionality) with privilege escalation in versions 20.0 and below. The root cause is an elevation of privilege via the MSI repair feature, allowing an attacker to access and manipulate system files. Relevant sources consistently desc...

GSD-2023-1000377 btrfs: handle case when repair happens with dev-replace

btrfs: handle case when repair happens with dev-replace This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.19 by commit...

xingwall 授权问题漏洞

xingwall is an application by Karsten Silkenbäumer, an individual developer, about member login. An authorization issue vulnerability exists in xingwall. An attacker exploited the vulnerability to cause session repair...

PT-2025-54009

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.0.10-2 Description The Linux kernel contained a flaw within the btrfs subsystem related to handling device replacement during repair operations. Specifically, a bug report indicated a kernel panic BUG ON...

oklahomacityfencerepair.net Cross Site Scripting vulnerability OBB-3100139

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-3881

CVE-2022-3881 concerns the WordPress WPTools plugin, affected versions before 3.43. The issue is improper authorization and CSRF in an AJAX action, allowing any authenticated user (e.g., a subscriber) to install and activate arbitrary plugins from wordpress.org. Root cause: missing CSRF/authoriza...

The vulnerability of the RealVNC remote access software relates to insecure management of privileges, allowing a hacker to elevate their own privileges.

The vulnerability of the RealVNC remote access software is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges by using the MSI installer Repair feature...

[SECURITY] Fedora 37 Update: admesh-0.98.5-1.fc37

ADMesh is a program for diagnosing and/or repairing commonly encountered problems with STL STereo Lithography data files. It can remove degenerate and unconnected facets, connect nearby facets, fill holes by adding facets, and repair facet normals. Simple transformations such as scaling,...

[SECURITY] Fedora 36 Update: admesh-0.98.5-1.fc36

ADMesh is a program for diagnosing and/or repairing commonly encountered problems with STL STereo Lithography data files. It can remove degenerate and unconnected facets, connect nearby facets, fill holes by adding facets, and repair facet normals. Simple transformations such as scaling,...

Zenario CMS 授权问题漏洞

Zenario CMS is a Zenario open source application . Provides a web-based content management system. An authorization issue vulnerability exists in Zenario CMS version 9.3.57595. An attacker exploited the vulnerability to cause session repair...

repair-solutions.nl Cross Site Scripting vulnerability OBB-3073607

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Woodpecker Home Repair App Has Logic Flaw Vulnerability

Woodpecker Home Repair App is a formal and professional door-to-door home repair service software. Woodpecker Home Repair APP has a logic flaw vulnerability that can be exploited by an attacker to cause server-side SMS resource exhaustion, SMS bomb attack on any cell phone number...

CVE-2020-12744

The MSI installer in Verint Desktop Resources 15.2 allows an unprivileged local user to elevate their privileges during install or repair...

PT-2022-8391 · Verint · Verint Desktop Resources

Name of the Vulnerable Software and Affected Versions: Verint Desktop Resources version 15.2 Description: The issue allows an unprivileged local user to elevate their privileges during the installation or repair process of the software. Recommendations: For Verint Desktop Resources version 15.2,...