54 matches found
The vulnerability relates to the implementation of syntactic analysis for CR3-files in the plugin for viewing RAW images. This allows an attacker to execute arbitrary code.
The vulnerability of the CR3-file syntax analysis implementation for viewing RAW images is related to errors in data type conversion. Exploiting this vulnerability could allow an attacker to execute arbitrary code using a specially created malicious web page or a specially created malicious file...
The vulnerability of the syntax analysis function for domain name records in the Simotics Connect 400 software and hardware suite allows a perpetrator to cause service interruptions.
The vulnerability of the syntax analysis function for DNS domain names in the Simotics Connect 400 software/hardware suite is related to reading data beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
Vulnerability of syntactic analysis and event loading in SVG code of Firefox web browser and Thunderbird email client, allowing attackers to perform cross-site scripting attacks (XSS).
The vulnerability of syntax analysis and event loading in SVG code of Firefox web browsers and Thunderbird email clients is related to the lack of integrity checks. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...
The vulnerability of the sqlite3WindowRewrite() function in the SQLite database management system, related to insufficient handling of exception states, allows a attacker to compromise data integrity.
The vulnerability of the sqlite3WindowRewrite function in the SQLite database management system is related to improper handling of certain syntax analyzers. Exploiting this vulnerability could allow an attacker to compromise data integrity...
The vulnerability of Thunderbird email client, as well as browsers Firefox and Firefox ESR, is related to improper syntactic analysis of page content or interpretation of data entered by users. This vulnerability allows attackers to execute arbitrary code.
The vulnerability of the Thunderbird email client, as well as browsers Firefox and Firefox ESR, is related to incorrect syntax analysis of page content or improper interpretation of data entered by users. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...
The vulnerability of syntactic analysis in HTTP/1 and the HTTP accelerator Varnish allows attackers to induce a service failure.
The vulnerability of syntactic analysis in HTTP/1 and HTTP accelerator Varnish exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...
The vulnerability of the syntax analysis function of the PowerDNS server allows a attacker to cause a service failure.
The vulnerability of the DNS server’s syntax analysis function in PowerDNS is related to the lack of an authentication mechanism. Exploiting this vulnerability could allow a malicious actor to cause a service failure when searching for NS/A/AAAA records on the server...
The vulnerability of Microsoft XML (MSXML) syntax analysis in the Windows operating system allows a hacker to execute arbitrary code.
The vulnerability of Microsoft XML MSXML operating system-based systems lies in errors related to restricting XML references to external objects. Exploiting this vulnerability allows a malicious actor to execute arbitrary code via a specially created web page from a remote location...
The vulnerability of the syntax analysis procedure for Python interpreter certificates allows attackers to trigger a service failure.
The vulnerability of the syntax analysis procedure for Python interpreter certificates is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service failures...
The vulnerabilities of the components GroovySandbox.java and SecureGroovyScript.java of the Jenkins Script Security plugin allow a perpetrator to execute arbitrary code.
The vulnerabilities of the GroovySandbox.java component src/main/java/org/jenkinsci/plugins/scriptsecurity/sandbox/groovy/GroovySandbox.java and SecureGroovyScript.java component src/main/java/org/jenkinsci/plugins/scriptsecurity/sandbox/groovy/SecureGroovyScript.java of the Jenkins Script Securi...
The vulnerability of the pom.xml components and CpsGroovyShell.java plugin of the Jenkins Pipeline allows a hacker to execute arbitrary code.
The vulnerability of the pom.xml components and CpsGroovyShell.java src/main/java/org/jenkinsci/plugins/workflow/cps/CpsGroovyShell.java of the Jenkins Pipeline plugin is related to errors in processing input data during syntax analysis of the code. Exploiting this vulnerability can allow a...
Vulnerability of the components AbstractDslScriptLoader.groovy, JobDslWhitelist.groovy, and SandboxDslScriptLoader.groovy, a Jenkins Job DSL plugin, allowing a malicious actor to execute arbitrary code
The vulnerabilities of components AbstractDslScriptLoader.groovy core/src/main/groovy/javaposse/jobdsl/dsl/AbstractDslScriptLoader.groovy, JobDslWhitelist.groovy job-dsl-plugin/build.gradle, job-dsl-plugin/src/main/groovy/javaposse/jobdsl/plugin/JobDslWhitelist.groovy, and...
The vulnerability of the fly-admin-ntp package for managing NTP time services on the Astra Linux operating system allows a perpetrator to cause a service failure.
The vulnerability of the fly-admin-ntp package for managing NTP time services on the Astra Linux operating system is related to incorrect syntax analysis and processing of the configuration file. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the syntax analysis module of PCX files and the PDF editing programs like Adobe Acrobat, Adobe Acrobat Document Cloud, as well as PDF viewing programs like Foxit Reader, Adobe Reader Document Cloud, and Adobe Reader allows attackers to execute arbitrary code.
The vulnerability of the syntax analysis module of PCX files and the PDF editing programs such as Adobe Acrobat, Adobe Acrobat Document Cloud, as well as PDF viewing programs like Foxit Reader and Adobe Reader Document Cloud/Adobe Reader arises from an operation that goes beyond the buffer...