Design/Logic Flaw

XnView Classic before 2.51.3 on Windows has a Write Access Violation at xnview.exe+0x3ADBD0...

Design/Logic Flaw

XnView Classic before 2.51.3 on Windows has a Write Access Violation at xnview.exe+0x3125D6...

CVE-2023-52173

XnView Classic on Windows is affected by a Write Access Violation in xnview.exe+0x3ADBD0 affecting versions prior to 2.51.3. The vulnerability is due to a fault in handling memory access, with potential impact on confidentiality, integrity, and availability as reflected in reported CVSS metrics (...

CVE-2023-52174

XnView Classic before 2.51.3 on Windows has a Write Access Violation at xnview.exe+0x3125D6...

XnView Classic Security Vulnerability

XnView Classic is a suite of image viewing software. The software can be used to view, convert, organize and edit graphic and video files. A security vulnerability exists in XnView Classic prior to version 2.51.3, which originates from a write access conflict in xnview.exe+0x3125D6...

XnView Classic Security Vulnerability

XnView Classic is a suite of image viewing software. The software can be used to view, convert, organize and edit graphic and video files. A security vulnerability exists in XnView Classic prior to version 2.51.3, which originates from a write access conflict in xnview.exe+0x3ADBD0...

CVE-2023-52174: Out-of-bounds Write

XnView Classic before 2.51.3 on Windows has a Write Access Violation at xnview.exe+0x3125D6...

CVE-2023-52173

XnView Classic before 2.51.3 on Windows has a Write Access Violation at xnview.exe+0x3ADBD0...

CVE-2023-52173

XnView Classic before 2.51.3 on Windows has a Write Access Violation at xnview.exe+0x3ADBD0...

CVE-2023-52173: Out-of-bounds Write

XnView Classic before 2.51.3 on Windows has a Write Access Violation at xnview.exe+0x3ADBD0...

PT-2023-31934 · Xnview · Xnview Classic

Name of the Vulnerable Software and Affected Versions: XnView Classic versions prior to 2.51.3 Description: The issue is related to a Write Access Violation at xnview.exe+0x3125D6 in XnView Classic on Windows. Recommendations: For versions prior to 2.51.3, update to version 2.51.3 or later to...

PT-2023-31933 · Xnview · Xnview Classic

Name of the Vulnerable Software and Affected Versions: XnView Classic versions prior to 2.51.3 Description: The issue is related to a Write Access Violation at xnview.exe+0x3ADBD0 in XnView Classic on Windows. Recommendations: For versions prior to 2.51.3, update to version 2.51.3 or later to...

GHSA-8F57-WCMG-4JMH Apache Airflow vulnerable to Exposure of Resource to Wrong Sphere

Apache Airflow, in versions prior to 2.8.0, contains a security vulnerability that allows an authenticated user with limited access to some DAGs, to craft a request that could give the user write access to various DAG resources for DAGs that the user had no access to, thus, enabling the user to...

Security feature bypass

Apache Airflow, in versions prior to 2.8.0, contains a security vulnerability that allows an authenticated user with limited access to some DAGs, to craft a request that could give the user write access to various DAG resources for DAGs that the user had no access to, thus, enabling the user to...

CVE-2023-48291: Exposure of Resource to Wrong Sphere

Apache Airflow, in versions prior to 2.8.0, contains a security vulnerability that allows an authenticated user with limited access to some DAGs, to craft a request that could give the user write access to various DAG resources for DAGs that the user had no access to, thus, enabling the user to...

PT-2023-8378 · Apache · Apache Airflow

Name of the Vulnerable Software and Affected Versions: Apache Airflow versions prior to 2.8.0 Description: The issue allows an authenticated user with limited access to some DAGs to craft a request that could give the user write access to various DAG resources for DAGs that the user had no access...

Apache Airflow 安全漏洞

Apache Airflow is the United States Apache Apache Foundation's set of open source platform for creating, managing and monitoring workflow. The platform is scalable and dynamic monitoring and other characteristics. A security bypass vulnerability exists in Apache Airflow versions prior to 2.8.0,...

GLSA-202312-02 : Minecraft Server: Remote Code Execution

The remote host is affected by the vulnerability described in GLSA-202312-02 Minecraft Server: Remote Code Execution - JMSAppender in Log4j 1.2 is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration. The attacker can provide TopicBindingNa...

PT-2023-31313

Name of the Vulnerable Software and Affected Versions Apache Superset versions prior to 2.1.3 Apache Superset versions 3.0.0 through 3.0.1 Description An authenticated Gamma user has the ability to create a dashboard and add charts to it, this user would automatically become one of the owners of...

Apache Superset 安全漏洞

Apache Superset is a data visualization and data exploration platform from the Apache USA Foundation. Apache Superset suffers from an elevation of privilege vulnerability that can be exploited by an attacker to gain write access to all gauges in a dashboard via the Add Gauge function of Create...