2571 matches found
XnView Classic Security Vulnerability
XnView Classic is a suite of image viewing software. The software can be used to view, convert, organize and edit graphic and video files. A security vulnerability exists in XnView Classic prior to version 2.51.3, which originates from a write access conflict in xnview.exe+0x3ADBD0...
CVE-2023-52173
XnView Classic before 2.51.3 on Windows has a Write Access Violation at xnview.exe+0x3ADBD0...
CVE-2023-52173
XnView Classic before 2.51.3 on Windows has a Write Access Violation at xnview.exe+0x3ADBD0...
CVE-2023-52173
XnView Classic on Windows is affected by a Write Access Violation in xnview.exe+0x3ADBD0 affecting versions prior to 2.51.3. The vulnerability is due to a fault in handling memory access, with potential impact on confidentiality, integrity, and availability as reflected in reported CVSS metrics (...
PT-2023-31934 · Xnview · Xnview Classic
Name of the Vulnerable Software and Affected Versions: XnView Classic versions prior to 2.51.3 Description: The issue is related to a Write Access Violation at xnview.exe+0x3125D6 in XnView Classic on Windows. Recommendations: For versions prior to 2.51.3, update to version 2.51.3 or later to...
PT-2023-31933 · Xnview · Xnview Classic
Name of the Vulnerable Software and Affected Versions: XnView Classic versions prior to 2.51.3 Description: The issue is related to a Write Access Violation at xnview.exe+0x3ADBD0 in XnView Classic on Windows. Recommendations: For versions prior to 2.51.3, update to version 2.51.3 or later to...
GHSA-8F57-WCMG-4JMH Apache Airflow vulnerable to Exposure of Resource to Wrong Sphere
Apache Airflow, in versions prior to 2.8.0, contains a security vulnerability that allows an authenticated user with limited access to some DAGs, to craft a request that could give the user write access to various DAG resources for DAGs that the user had no access to, thus, enabling the user to...
Security feature bypass
Apache Airflow, in versions prior to 2.8.0, contains a security vulnerability that allows an authenticated user with limited access to some DAGs, to craft a request that could give the user write access to various DAG resources for DAGs that the user had no access to, thus, enabling the user to...
PT-2023-8378 · Apache · Apache Airflow
Name of the Vulnerable Software and Affected Versions: Apache Airflow versions prior to 2.8.0 Description: The issue allows an authenticated user with limited access to some DAGs to craft a request that could give the user write access to various DAG resources for DAGs that the user had no access...
Apache Airflow 安全漏洞
Apache Airflow is the United States Apache Apache Foundation's set of open source platform for creating, managing and monitoring workflow. The platform is scalable and dynamic monitoring and other characteristics. A security bypass vulnerability exists in Apache Airflow versions prior to 2.8.0,...
GLSA-202312-02 : Minecraft Server: Remote Code Execution
The remote host is affected by the vulnerability described in GLSA-202312-02 Minecraft Server: Remote Code Execution - JMSAppender in Log4j 1.2 is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration. The attacker can provide TopicBindingNa...
PT-2023-31313
Name of the Vulnerable Software and Affected Versions Apache Superset versions prior to 2.1.3 Apache Superset versions 3.0.0 through 3.0.1 Description An authenticated Gamma user has the ability to create a dashboard and add charts to it, this user would automatically become one of the owners of...
Apache Superset 安全漏洞
Apache Superset is a data visualization and data exploration platform from the Apache USA Foundation. Apache Superset suffers from an elevation of privilege vulnerability that can be exploited by an attacker to gain write access to all gauges in a dashboard via the Add Gauge function of Create...
zookeeper: Authorization Bypass in Apache ZooKeeper
A flaw was found in Apache ZooKeeper. Authorization bypass through user-controlled key is available iff SASL Quorum Peer authentication is enabled in ZooKeeper via quorum.auth.enableSasl=true configuration. A malicious user could bypass the authentication controller by using a non-existing instan...
PT-2023-30902 · Microsoft · Azure Rtos Threadx
Name of the Vulnerable Software and Affected Versions: Azure RTOS ThreadX versions prior to 6.3.0 Description: Azure RTOS ThreadX is an advanced real-time operating system RTOS designed specifically for deeply embedded applications. An attacker can cause arbitrary read and write due to a...
CVE-2023-44402 ASAR Integrity bypass via filetype confusion in electron
Electron is an open source framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. This only impacts apps that have the embeddedAsarIntegrityValidation and onlyLoadAppFromAsar fuses enabled. Apps without these fuses enabled are not impacted. This issue is specifi...
CVE-2023-45252
DLL Hijacking vulnerability in Huddly HuddlyCameraService before version 8.0.7, not including version 7.99, due to the installation of the service in a directory that grants write privileges to standard users, allows attackers to manipulate files, execute arbitrary code, and escalate privileges...
ASUS RT-AC87U Security Vulnerability
The ASUS RT-AC87U is a wireless router from Asus China. A security vulnerability exists in the ASUS RT-AC87U that stems from the presence of an Access Control Error vulnerability. The vulnerability can be exploited by an attacker to connect to the target device via tftp to read or write files...
OpenCart 安全漏洞
OpenCart is an open source e-commerce system from the OpenCart team in Hong Kong, China. The system provides product reviews, product ratings, product additions and other modules. OpenCart suffers from an authorization issue vulnerability that arises from allowing a back-end user with...