Parse Server Privilege Escalation

The vulnerability of the GitHub CI workflow server for syntax analysis in Parse Server is related to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information and enhance their privileges...

YAML Uncontrolled Recursion DoS

The vulnerability of the YAML syntax analysis library is related to uncontrolled recursion. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

Linux ftruncate Buffer Overflow DoS

The vulnerability of the ftruncate function in the Linux operating system’s kernel is related to errors in the processing of input data during syntax analysis of code. Exploiting this vulnerability can allow an attacker to cause a service failure...

Opigno Learning path CMS Drupal Module Code Execution

The vulnerability of the Opigno Learning path CMS system’s Drupal component is related to errors in data processing during syntax analysis of code. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Opigno Drupal Code Execution

The vulnerability of Opigno’s Drupal CMS system is related to errors in data processing during syntax analysis of code. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

XWiki Platform Code Execution

The vulnerability of the “org.xwiki.platform:xwiki-platform-web-war” component of the XWiki platform involves errors in data processing during syntax analysis of code. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

Nozomi Guardian Radius DoS

The vulnerability of the Radius syntax analysis function in the Nozomi Guardian tool for detecting and tracking network activities is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

Delta Industrial Automation DOPSoft Buffer Overflow

The vulnerability of the Delta Industrial Automation DOPSoft software for designing human-machine interfaces is related to buffer overflows in the stack during syntax analysis of the wLogTitlesPrevValueLen field. Exploitation of this vulnerability could allow a malicious actor to execute arbitrar...

Delta Industrial Automation DOPSoft Buffer Overflow

The vulnerability of the Delta Industrial Automation DOPSoft software for designing human-machine interfaces is related to buffer overflows in the stack during syntax analysis of the wTitleTextLen field. Exploitation of this vulnerability could allow a malicious actor to execute arbitrary code...

Go //line Code Execution

The vulnerability of the “//line” directive in the Go programming language is related to errors in data processing during syntax analysis of code. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

WebKitGTK WebKit Code Execution

The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit is related to errors in processing input data during syntax analysis of the code. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

Pentaho Business Analytics Server Code Execution

The vulnerability of Hitachi Vantara Pentaho Business Analytics Server lies in errors in the processing of input data during syntax analysis of code. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

Pentaho Business Analytics Server Code Execution

The vulnerability of Hitachi Vantara Pentaho Business Analytics Server lies in errors in the processing of input data during syntax analysis of code. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

PT-2023-2237

Name of the Vulnerable Software and Affected Versions Hitachi Vantara Pentaho Business Analytics Server versions prior to 9.4.0.1 and 9.3.0.2, including 8.3.x Description The issue is related to errors in input data processing during code syntax analysis. Exploitation of this issue may allow a...

Adobe Bridge Buffer Overflow Unauthorized Access

The vulnerability of the Adobe Bridge file manager is related to reading beyond the buffer boundary in memory during syntax analysis of embedded fonts. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created malicious fi...

docmgmt.dll Code Execution

The vulnerability of the dynamically linked library docmgmt.dll, which is part of Siemens Solid Edge’s design and simulation tools, relates to the possibility of writing beyond the buffer boundaries in memory during syntax analysis of PAR, ASM, and DFT files. Exploiting this vulnerability can all...

CorelDRAW Graphics Suite Buffer Overflow

The vulnerability of the CorelDRAW Graphics Suite formerly CorelDRAW graphic editor relates to the execution of operations beyond the buffer boundaries in memory during the syntax analysis of PCX files. Exploiting this vulnerability can allow attackers to execute arbitrary code using a specially...

Moodle Code Execution

The vulnerability in the virtual training environment Moodle is related to incorrect validation of input data during syntax analysis of PostScript files. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Mono_Loader.dll DoS

The vulnerability of the MonoLoader.dll library, which is used by 3D JT and JT2Go visualization tools, as well as the Teamcenter Visualization lifecycle management system, is related to a numerical overflow issue during syntax analysis of TG4 files. Exploiting this vulnerability can allow attacke...

EXI syntax analysis DoS

The vulnerability of the EXI file syntax analysis implementation in vehicle communication devices connected to the OpenV2G network is related to the issue where the operation goes beyond the buffer boundaries in memory during the verification of the length of X509 certificates’ serial numbers...