1503 matches found
CVE-2021-31707
Permissions vulnerability found in KiteCMS allows a remote attacker to execute arbitrary code via the upload file type...
PUB-A-269657452
In TBD of TBD, there is a possible out of bounds write due to a buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...
PUB-A-269657006
In TBD of TBD, there is a possible out of bounds write due to a buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2022-43613
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Corel CorelDRAW Graphics Suite 23.5.0.506. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...
CVE-2022-36974
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Avalanche 6.3.2.3490. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the Web File...
CVE-2022-43617
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Corel CorelDRAW Graphics Suite 23.5.0.506. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...
CVE-2022-28304
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.034. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...
Design/Logic Flaw
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authentication is not required to exploit this vulnerability. The specific flaw exists within the parseentries function. The issue results from the lack of proper error handling when parsin...
CVE-2023-25898 ZDI-CAN-19521: Adobe Dimension USD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
Adobe Dimension versions 3.4.7 and earlier is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
CVE-2022-42447 Cross-origin resource sharing vulnerability affects HCL Compass
HCL Compass is vulnerable to Cross-Origin Resource Sharing CORS. This vulnerability can allow an unprivileged remote attacker to trick a legitimate user into accessing a special resource and executing a malicious request...
PT-2023-20922 · Lightcms · Lightcms
Name of the Vulnerable Software and Affected Versions: LightCMS version 1.3.7 Description: The issue is related to a remote code execution RCE vulnerability. It is specifically exploitable via the image:make function. Recommendations: For LightCMS version 1.3.7, as a temporary workaround, conside...
Medium: sysstat
Issue Overview: sysstat is a set of system performance tools for the Linux operating system. On 32 bit systems, in versions 9.1.16 and newer but prior to 12.7.1, allocatestructures contains a sizet overflow in sacommon.c. The allocatestructures function insufficiently checks bounds before...
CVE-2023-27060
LightCMS v1.3.7 was discovered to contain a remote code execution RCE vulnerability via the image:make function...
CVE-2023-26073
creationtimestamp| type| source ---|---|--- 2023-03-13 17:23:23+00:00| seen| https://t.me/cibsecurity/59896 2023-03-16 18:07:00+00:00| seen| https://googleprojectzero.blogspot.com/2023/03/multiple-internet-to-baseband-remote-rce.html 2023-03-16 22:39:30+00:00| published-proof-of-concept|...
MGASA-2023-0074 Updated binwalk packages fix security vulnerability
Remote code execution using crafted PFS filesystem. CVE-2022-4510...
PT-2023-1679 · Aruba · Arubaos
Name of the Vulnerable Software and Affected Versions: ArubaOS versions affected versions not specified Description: The issue is related to buffer overflow vulnerabilities in multiple underlying operating system processes. These vulnerabilities could lead to unauthenticated remote code execution...
MGASA-2023-0060 Updated python-jupyterlab packages fix security vulnerability
Remote code execution, but requires user action to open a notebook. CVE-2021-32797, and other bug fixes...
SA40021 - GHOST glibc gethostbyname() buffer overflow (CVE-2015-0235)
Edit: 4th of March 2024 - This isn't an active SA and any new edits are part of an article maintenance project. A buffer overflow vulnerability has been discovered in the glibc library. This issue is known as CVE-2015-0235 and is commonly referred to as "GHOST". The issue was found in the...