3792 matches found
CVE-2022-41306
CVE-2022-41306 describes memory corruption in Autodesk DesignReview.exe triggered by consuming a maliciously crafted PCT file. The vulnerability can lead to code execution in the context of the current process and is associated with a high impact (C, I, A) and local attack vector with user intera...
PT-2022-25805 · Unknown · Subassemblycomposer.Exe
Name of the Vulnerable Software and Affected Versions: SubassemblyComposer.exe affected versions not specified Description: A maliciously crafted PKT file consumed through the SubassemblyComposer.exe application could lead to memory corruption by write access violation. This issue, in conjunction...
Denial Of Service (DoS)
vim/vim is vulnerable to denial of service. The vulnerability exists due to a null pointer dereference because of a write access violation which allows an attacker to cause an application crash...
CVE-2022-40756: Incorrect Permission Assignment for Critical Resource
If folder security is misconfigured for Actian Zen PSQL BEFORE Patch Update 1 for Zen 15 SP1 v15.11.005, Patch Update 4 for Zen 15 v15.01.017, or Patch Update 5 for Zen 14 SP2 v14.21.022, it can allow an attacker with file read/write access to remove specific security files in order to reset the...
Bifrost 授权问题漏洞
Bifrost is a middleware package that synchronizes MySQL MariaDB binary log data to other types of databases.Bifrost 1.8.6-release and earlier versions are vulnerable to authorization issues, which stem from its vulnerability to authentication bypass when using HTTP basic authentication, which can...
parse-server's session object properties can be updated by foreign user if object ID is known
Impact A foreign user can write to the session object of another user if the session object ID is known. For example, a foreign user can assign the session object to their own user by writing to the user field and then read any custom fields of that session object. Note that assigning a session t...
CVE-2020-23556
IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000007e28...
CVE-2020-23551
IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000007e30...
CVE-2020-23555
IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000007e6e...
CVE-2020-23553
IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000007d33...
CVE-2020-23551
IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000007e30...
CVE-2020-23553
IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000007d33...
CVE-2020-23554
IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000007e20...
CVE-2020-23556
IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000007e28...
CVE-2020-23559
IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ShowPlugInSaveOptionsW+0x0000000000007d7f...
Design/Logic Flaw
IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000007d33...
CVE-2020-23560
IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ShowPlugInSaveOptionsW+0x000000000001bcab...
CVE-2020-23559
CVE-2020-23559 affects IrfanView 4.54. The vulnerability is a user‑mode write access violation that starts at FORMATS!ShowPlugInSaveOptions_W+0x7d7f. The CVSS baseline from NVD assigns a high impact (C/H/I/A) with LOCAL attack vector, no user interaction required, and low privileges needed, but n...
CVE-2020-23555
CVE-2020-23555 affects IrfanView 4.54. The vulnerability is a user-mode write access violation in the formats plug-in, starting at FORMATS!GetPlugInInfo+0x7e6e. Attack vector is LOCAL with LOW complexity and no user interaction required; the base metrics indicate HIGH impact to confidentiality, i...