Adobe Acrobat Reader Input Validation Error Vulnerability (CNVD-2024-12461)

Adobe Acrobat Reader is a PDF viewer from the American company Audobee Adobe. The software is used to print, sign and annotate PDF. An input validation error vulnerability exists in Adobe Acrobat Reader. An attacker could exploit this vulnerability to compromise an affected system...

IBM MQ 输入验证错误漏洞

IBM MQ IBM WebSphere MQ is a messaging middleware product from International Business Machines IBM. The product is mainly for the service-oriented architecture SOA to provide a reliable and proven messaging backbone. An input validation error vulnerability exists in IBM MQ that stems from incorre...

IBM QRadar Suite 安全漏洞

IBM QRadar Suite is an integrated security information and event management SIEM solution from International Business Machines IBM that monitors and analyzes network activity in an organization to detect potential security threats. A certificate validation error vulnerability exists in IBM QRadar...

Memory corruption

MicroDicom DICOM Viewer versions 2023.3 Build 9342 and prior contain a lack of proper validation of user-supplied data, which could result in memory corruption within the application...

Apache Ambari 输入验证错误漏洞

Apache Ambari is an application from the Apache USA Foundation. Provides software developed to configure, manage and monitor Apache Hadoop clusters to simplify Hadoop management. Apache Ambari suffers from a cross-site scripting vulnerability that can be exploited by an attacker to obtain a...

Adobe InDesign 输入验证错误漏洞

Adobe InDesign is a set of layout and editing applications from the American company Audobee Adobe. Adobe InDesign suffers from an input validation error vulnerability that can be exploited by an attacker to cause a denial of service...

Apache James MIME4J Input Validation Error Vulnerability

Apache James MIME4J is a library of the American Apache Apache Foundation. It can be used to parse e-mail message streams in pure rfc822 and MIME formats and construct tree representations of e-mail messages. An input validation error vulnerability exists in Apache James MIME4J 0.8.9 and earlier...

wolfSSL Input Validation Error Vulnerability

wolfSSL CyaSSL is the United States wolfSSL company for embedded systems developers to use a small, portable embedded SSL programming library. An input validation error vulnerability exists in WolfSSL versions prior to 5.6.6, which stems from a failure to check if a message crosses a key boundary...

Apache James Input Validation Error Vulnerability

Apache James is an open source Smtp and Pop3 mail transfer agent and Nntp news server from the Apache Foundation written entirely in Java. An input validation error vulnerability exists in Apache James versions prior to 3.8.1 and prior to 3.7.5, which stems from a difference in line separator...

AnythingLLM Input Validation Error Vulnerability

AnythingLLM is a document chatbot that meets business requirements. AnythingLLM suffers from an input validation error vulnerability that stems from improper cleaning of user input resulting in path traversal. An attacker could use this vulnerability to recursively delete arbitrary folders on a...

Apache James MIME4J 输入验证错误漏洞

Apache James MIME4J is a library of the American Apache Apache Foundation. It can be used to parse e-mail message streams in pure rfc822 and MIME formats and construct tree representations of e-mail messages. An input validation error vulnerability exists in Apache James MIME4J 0.8.9 and earlier...

llama.cpp Input Validation Error Vulnerability

llama.cpp is a multimodal model by Georgi Gerganov Personal Developer. An input validation error vulnerability exists in llama.cpp, which stems from a specially crafted .gguf file that could lead to code execution...

IBM Storage Ceph Input Validation Error Vulnerability

IBM Storage Ceph is an IBM-powered, open source software-defined storage platform from International Business Machines IBM that provides scalable object, block, and file storage in a single system. IBM Storage Ceph suffers from an input validation error vulnerability that stems from the possibili...

Biosig Project libbiosig Input Validation Error Vulnerability

BioSig Project Biosig Project libbiosig is an open source software library for biomedical signal processing from BioSig Project. It has features for biosignal analysis. An input validation error vulnerability exists in Biosig Project libbiosig version 2.5.0, which stems from an integer overflow...

Adobe Acrobat Reader 输入验证错误漏洞

Adobe Acrobat Reader is the United States of America Audobee Adobe, a PDF viewer. An input validation error vulnerability exists in Adobe Acrobat and Reader, which can be exploited by an attacker to cause a denial of service...

CVE-2024-24782 HIMA: Origin Validation Error in multiple products

An unauthenticated attacker can send a ping request from one network to another through an error in the origin verification even though the ports are separated by VLAN...

PT-2024-5238 · Irfanview · Irfanview

Name of the Vulnerable Software and Affected Versions: IrfanView affected versions not specified Description: The issue is related to a remote code execution vulnerability in the parsing of WSQ files in IrfanView. This vulnerability allows remote attackers to execute arbitrary code on affected...

kube-controller-manager Input Validation Error Vulnerability

kube-controller-manager is a kube-controller-manager component configuration API for Kubernetes open source. A security vulnerability exists in kube-controller-manager. An attacker exploited the vulnerability to cause a denial of service on the system...

Vyper Input Validation Error Vulnerability

Vyper is the Pythonic smart contract language for EVM. An input validation error vulnerability exists in Vyper 0.3.10 and earlier versions, which stems from a type checker that allows the use of signed integers as the index of an array, potentially resulting in a denial of service...

Mastodon Vulnerability Allows Hackers to Hijack Any Decentralized Account

The decentralized social network Mastodon has disclosed a critical security flaw that enables malicious actors to impersonate and take over any account. "Due to insufficient origin validation in all Mastodon, attackers can impersonate and take over any remote account," the maintainers said in a...