The vulnerability of the software for creating metadata, processing, and exchanging standard sets within the Adobe XMP-Toolkit-SDK lies in the insufficient validation of input data. This allows a perpetrator to execute arbitrary code.

The vulnerability of the software for creating metadata, processing, and exchanging standard sets within the Adobe XMP-Toolkit-SDK is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code in the context of the current user,...

CVE-2021-43279

An out-of-bounds write vulnerability exists in the U3D file reading procedure in Open Design Alliance PRC SDK before 2022.10. Crafted data in a U3D file can trigger a write past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute...

Cloudflare OctoRPKI 路径遍历漏洞

Cloudflare OctoRPKI is an RPKI toolkit for the Cloudflare platform from cloudflare USA. Cloudflare OctoRPKI suffers from a path traversal vulnerability that could allow an attacker to remotely execute code on the host...

Intel oneAPI Rendering Toolkit 安全漏洞

Intel OneApi Rendering Toolkits is a rendering toolkit from Intel Corporation, USA. Accelerates these types of workloads with a set of rendering and ray tracing libraries to create high-performance, high-fidelity visual experiences. A security vulnerability exists in Intel oneAPI Rendering Toolki...

The vulnerability of the software for creating metadata, processing, and exchanging data according to the Adobe XMP-Toolkit-SDK standards is related to buffer overflows in the “bag” component. This allows attackers to execute arbitrary code.

The vulnerability of the software for creating metadata, processing, and exchanging data according to the Adobe XMP-Toolkit-SDK is related to buffer overflows in the “bucket” mechanism. Exploiting this vulnerability allows an attacker to execute arbitrary code in the context of the current user,...

Intel Crypto Api Toolkit 安全漏洞

Intel Crypto Api Toolkit is a cryptographic Api toolkit from Intel Corporation USA. The interface for securely running key generation and encryption operations enhances the security of data and key protection applications. A security vulnerability exists in Intel Crypto Api Toolkit that stems fro...

Intel Distribution of OpenVINO(TM) Toolkit 资源管理错误漏洞

The Intel Distribution of OpenVINOTM Toolkit is an application and solution for developing applications and solutions that use deep learning intelligence from Intel USA. The toolkit is based on Convolutional Neural Networks CNNs and scales workloads across Intel® hardware, including gas pedals, a...

The vulnerability of the software for creating metadata, processing, and exchanging data according to the Adobe XMP-Toolkit-SDK standards is related to buffer overflows in the “bag” component. This allows attackers to execute arbitrary code.

The vulnerability of the software for creating metadata, processing, and exchanging data according to the Adobe XMP-Toolkit-SDK is related to buffer overflows in the “bucket” mechanism. Exploiting this vulnerability allows an attacker to execute arbitrary code in the context of the current user,...

The vulnerability of the software for creating metadata, processing, and exchanging data according to the Adobe XMP-Toolkit-SDK standards, related to reading beyond the buffer in memory, allows attackers to disclose protected information.

The vulnerability of the software for creating metadata, processing, and exchanging data according to the Adobe XMP-Toolkit-SDK is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose protected information...

The vulnerability of the software for creating metadata, processing, and exchanging data according to the Adobe XMP-Toolkit-SDK standards is related to insufficient validation of input data. This allows a perpetrator to execute arbitrary code.

The vulnerability of the software for creating metadata, processing, and exchanging data according to the Adobe XMP-Toolkit-SDK is related to insufficient verification of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current use...

The vulnerability of the software for creating metadata, processing, and exchanging data according to the Adobe XMP-Toolkit-SDK standards is related to buffer overflow errors in dynamic memory. This vulnerability allows attackers to cause system failures.

The vulnerability of the Adobe XMP-Toolkit-SDK lies in buffer overflow errors in dynamic memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

Moderate: openssl security and bug fix update

OpenSSL is a toolkit that implements the Secure Sockets Layer SSL and Transport Layer Security TLS protocols, as well as a full-strength general-purpose cryptography library. Security Fixes: openssl: integer overflow in CipherUpdate CVE-2021-23840 openssl: NULL pointer dereference in...

qt5 security, bug fix, and enhancement update

An update is available for sip, qgnomeplatform, python-qt5, adwaita-qt. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Qt is a software toolkit for developing...

ALSA-2021:4172 Moderate: qt5 security, bug fix, and enhancement update

Qt is a software toolkit for developing applications. The following packages have been upgraded to a later upstream version: adwaita-qt 1.2.1, python-qt5 5.15.0, qgnomeplatform 0.7.1, qt5 5.15.2, qt5-qt3d 5.15.2, qt5-qtbase 5.15.2, qt5-qtconnectivity 5.15.2, qt5-qtdeclarative 5.15.2, qt5-qtdoc...

Intel® SoC Watch 2021 Advisory

Summary: A potential security vulnerability in the Intel® SoC Watch driver may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2023-30763 Description: Heap-based overflow in IntelR SoC Watch based...

Intel® Distribution of OpenVINO™ Toolkit Advisory

Summary: A potential security vulnerability in the Intel® Distribution of OpenVINO™ Toolkit may allow denial of service. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details CVEID: CVE-2021-33073 Description: Uncontrolled resource consumption in the...

Intel® oneAPI Rendering Toolkit Advisory

Summary: A potential security vulnerability in the Intel® oneAPI Rendering Toolkit may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2021-33071 Description: Incorrect default permissions in the...

Intel® VTune™ Profiler Advisory

Summary: A potential security vulnerability in the Intel® VTune™ Profiler may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2021-33062 Description: Incorrect default permissions in the software...

Schneider Electric C-Bus Toolkit 路径遍历漏洞

Schneider Electric C-Bus Toolkit is an application from Schneider Electric, France. It is used to run, configure and debug C-Bus installations on a personal computer. The Schneider Electric C-Bus Toolkit suffers from a path traversal vulnerability that stems from a network system or product faili...

Schneider Electric C-Bus Toolkit CONFIG SAVE Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Schneider Electric C-Bus Toolkit. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...