CVE-2023-32757

CVE-2023-32757 affects e-Excellence U-Office Force, where the file uploading function does not restrict dangerous file types. The root cause is unrestricted file type handling, enabling an unauthenticated, remote attacker to upload arbitrary files and potentially perform arbitrary commands or dis...

CVE-2023-32757 e-Excellence U-Office Force - Arbitrary File Upload

e-Excellence U-Office Force file uploading function does not restrict upload of file with dangerous type. An unauthenticated remote attacker without logging the service can exploit this vulnerability to upload arbitrary files to perform arbitrary command or disrupt service...

CVE-2023-32756 e-Excellence U-Office Force - Path Traversal

e-Excellence U-Office Force has a path traversal vulnerability within its file uploading and downloading functions. An unauthenticated remote attacker can exploit this vulnerability to read arbitrary system files, but can’t control system or disrupt service...

e-Excellence U-Office Force 代码问题漏洞

e-Excellence U-Office Force is an e-Office platform from China's First Class Technology e-Excellence. A code issue vulnerability exists in e-Excellence U-Office Force, which originates from an unrestricted upload of a dangerous type of file, and can be exploited by an unauthenticated, remote...

PT-2023-24005 · Unknown · E-Excellence U-Office Force

Name of the Vulnerable Software and Affected Versions: e-Excellence U-Office Force affected versions not specified Description: The file uploading function in e-Excellence U-Office Force does not restrict the upload of files with dangerous types. An unauthenticated remote attacker can exploit thi...

The vulnerability of the Linux operating system’s PCMCIA kernel driver allows a hacker to cause a service failure or exert other adverse effects.

The vulnerability of the Linux operating system’s PCMCIA kernel driver is related to the race condition between the functions cmmopen and cm4000detach in the drivers/char/pcmcia/cm4040cs.c file. This race condition causes the previously freed memory to be used again. An attacker can exploit this...

UBUNTU-CVE-2023-38665

Null pointer dereference in ieeewritefile in nasm 2.16rc0 allows attackers to cause a denial of service crash...

The vulnerability of the OpenImageIO image processing library, related to the occurrence of operations outside the buffer in memory, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the OpenImageIO image processing library lies in the escape of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and even cause service failures through the use...

The vulnerability of the Ceph-crash.service component of the Ceph storage system allows a attacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Ceph-crash.service component of the Ceph storage system is related to the assignment of users to inappropriate groups. Exploiting this vulnerability can allow attackers to access confidential data, compromise its integrity, and cause service failures...

The vulnerability of the dumpppp function in the pppdump/pppdump.c component of the Point-to-Point Ppp protocol allows a hacker to gain access to confidential data, compromise its integrity, and cause service failure.

The vulnerability of the dumpppp function in the pppdump/pppdump.c component of the Point-to-Point Ppp protocol is related to the issue of the operation’s output going beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to gain access to confidential...

The vulnerability of the close() function in the iffoutput component of the OpenImageIO image processing library allows a perpetrator to access confidential data, compromise its integrity, and cause service failure.

The vulnerability of the close function in the iffoutput image processing library in OpenImageIO is related to the output of operations that go beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its...

The vulnerability of the utf_ptr2char function in the mbyte.c text editor Vim allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the utfptr2char function in the mbyte.c text editor Vim is related to the execution of an operation outside the buffer’s boundaries in memory. Exploiting this vulnerability could allow an attacker to access confidential data, compromise its integrity, and even cause service...

The vulnerability of the XTerm terminal emulator arises from the lack of measures taken to sanitize input data. This allows attackers to gain access to confidential information, compromise its integrity, and cause service failures.

The vulnerability of the XTerm terminal emulator is related to the lack of measures taken to sanitize input data. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability in the Firefox web browser, related to type conversion errors, allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability in the Firefox web browser is related to type conversion errors. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...

The vulnerability of the Gstreamer multimedia framework, related to integer overflows, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Gstreamer multimedia framework is related to a potential integer overflow. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and even cause service failures through a specially created file...

The vulnerability of the OpenImageIO image processing library, related to buffer overflows in the stack, allows attackers to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the OpenImageIO image processing library is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and even cause service interruptions through the use of a specially created...

The vulnerability of the Zabbix universal monitoring system, related to incorrect authorization, allows a intruder to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Zabbix universal monitoring system is related to the improper implementation of IP address checking. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data, compromise its integrity, and even cause service failures...

The vulnerability in the Firefox web browser, related to writing beyond the buffer, allows attackers to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability in the Firefox web browser is related to writing beyond the buffer limit. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service interruptions...

The vulnerability in the Firefox web browser, related to writing beyond the buffer, allows attackers to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability in the Firefox web browser is related to writing beyond the buffer limit. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service interruptions...

The vulnerability in web browsers Firefox ESR, Firefox, and the email client Thunderbird involves the concealment of important security information. This allows attackers to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerabilities in web browsers Firefox ESR, Firefox, and the email client Thunderbird involve the concealment of important security-related information. Exploiting these vulnerabilities can allow a malicious actor to gain access to confidential data, compromise its integrity, and cause servi...