807 matches found
PDF-XChange Editor Type Obfuscation Vulnerability
PDF-XChange Editor is a PDF-XChange company running on Microsoft Windows systems in the PDF file viewer software. A type confusion vulnerability exists in PDF-XChange Editor, which can be exploited by an attacker to execute arbitrary code...
PDF-XChange Editor Out-of-Bounds Read Vulnerability (CNVD-2024-33582)
PDF-XChange Editor is a PDF-XChange company running on Microsoft Windows systems in the PDF file viewer software. PDF-XChange Editor suffers from an out-of-bounds read vulnerability that can be exploited by an attacker to execute arbitrary code...
PDF-XChange Editor Memory Misreference Vulnerability
PDF-XChange Editor is a PDF-XChange company running on Microsoft Windows systems in the PDF file viewer software. A memory misreference vulnerability exists in PDF-XChange Editor, which can be exploited by an attacker to execute arbitrary code...
PDF-XChange Editor Memory Corruption Vulnerability (CNVD-2024-33590)
PDF-XChange Editor is a PDF-XChange company running on Microsoft Windows systems in the PDF file viewer software. A memory corruption vulnerability exists in PDF-XChange Editor, which can be exploited by an attacker to execute arbitrary code...
PDF-XChange Editor Untrusted Pointer Dereference Vulnerability (CNVD-2024-33584)
PDF-XChange Editor is a PDF-XChange company running on Microsoft Windows systems in the PDF file viewer software. PDF-XChange Editor suffers from an untrusted pointer dereference vulnerability that can be exploited by an attacker to execute arbitrary code...
PDF-XChange Editor Remote Code Execution Vulnerability (CNVD-2024-33513)
PDF-XChange Editor is a PDF-XChange company running on Microsoft Windows systems in the PDF file viewer software. A remote code execution vulnerability exists in PDF-XChange Editor, which can be exploited by an attacker to execute arbitrary code...
PDF-XChange Editor stack buffer overflow vulnerability (CNVD-2024-33502)
PDF-XChange Editor is a PDF-XChange company running on Microsoft Windows systems in the PDF file viewer software. PDF-XChange Editor suffers from a stack buffer overflow vulnerability that can be exploited by an attacker to execute arbitrary code...
PDF-XChange Editor Heap Buffer Overflow Vulnerability (CNVD-2024-33586)
PDF-XChange Editor is a PDF-XChange company running on Microsoft Windows systems in the PDF file viewer software. PDF-XChange Editor suffers from a heap buffer overflow vulnerability that can be exploited by an attacker to execute arbitrary code...
PDF-XChange Editor Memory Corruption Vulnerability (CNVD-2024-33522)
PDF-XChange Editor is a PDF-XChange company running on Microsoft Windows systems in the PDF file viewer software. A memory corruption vulnerability exists in PDF-XChange Editor, which can be exploited by an attacker to execute arbitrary code...
PDF-XChange Editor Remote Code Execution Vulnerability (CNVD-2024-33511)
PDF-XChange Editor is a PDF-XChange company running on Microsoft Windows systems in the PDF file viewer software. A remote code execution vulnerability exists in PDF-XChange Editor, which can be exploited by an attacker to execute arbitrary code...
PDF-XChange Editor Remote Code Execution Vulnerability (CNVD-2024-33514)
PDF-XChange Editor is a PDF-XChange company running on Microsoft Windows systems in the PDF file viewer software. A remote code execution vulnerability exists in PDF-XChange Editor, which can be exploited by an attacker to execute remote code...
CVE-2024-40644 gitoxide's gix-path can use a fake program files location
gitoxide An idiomatic, lean, fast & safe pure Rust implementation of Git. gix-path can be tricked into running another git.exe placed in an untrusted location by a limited user account on Windows systems. Windows permits limited user accounts without administrative privileges to create new...
The vulnerability of the Remote Desktop Licensing Service for Windows operating systems allows a perpetrator to execute arbitrary code.
The vulnerability of the Remote Desktop Licensing Service for Windows operating systems is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
Microsoft Message Queuing Security Vulnerability
Microsoft Message Queuing is used to implement solutions for asynchronous and synchronous scenarios that require high performance. A security vulnerability exists in Microsoft Message Queuing. An attacker could exploit this vulnerability to obtain sensitive information. The following products and...
MSI Installer Flaw Enables Privilege Escalation on Windows Systems
...
Path Traversal
lollms is vulnerable to Path Traversal. The vulnerability is due to insufficient sanitization of user-supplied input in the sanitizepathfromendpoint and sanitizepath functions within lollmscore\lollms\security.py, enabling arbitrary file reading, particularly on Windows systems...
CVE-2024-4315
parisneo/lollms version 9.5 is vulnerable to Local File Inclusion LFI attacks due to insufficient path sanitization. The sanitizepathfromendpoint function fails to properly sanitize Windows-style paths backward slash , allowing attackers to perform directory traversal attacks on Windows systems...
CVE-2024-4315 LFI Vulnerability due to Lack of Path Sanitization in parisneo/lollms
parisneo/lollms version 9.5 is vulnerable to Local File Inclusion LFI attacks due to insufficient path sanitization. The sanitizepathfromendpoint function fails to properly sanitize Windows-style paths backward slash , allowing attackers to perform directory traversal attacks on Windows systems...
Siemens network software vulnerabilities related to memory-walking, which allow attackers to cause service failures.
The vulnerability of Siemens network software is related to reading beyond the memory boundary. Exploiting this vulnerability can allow an attacker to trigger a Basic Kernel Failure BSOD in Windows systems...