102 matches found
DEBIAN-CVE-2021-40394
An out-of-bounds write vulnerability exists in the RS-274X aperture macro variables handling functionality of Gerbv 2.7.0 and dev commit b5f1eacd and the forked version of Gerbv commit 71493260. A specially-crafted gerber file can lead to code execution. An attacker can provide a malicious file t...
CVE-2021-40393
An out-of-bounds write vulnerability exists in the RS-274X aperture macro variables handling functionality of Gerbv 2.7.0 and dev commit b5f1eacd and the forked version of Gerbv commit 71493260. A specially-crafted gerber file can lead to code execution. An attacker can provide a malicious file t...
DEBIAN-CVE-2021-40393
An out-of-bounds write vulnerability exists in the RS-274X aperture macro variables handling functionality of Gerbv 2.7.0 and dev commit b5f1eacd and the forked version of Gerbv commit 71493260. A specially-crafted gerber file can lead to code execution. An attacker can provide a malicious file t...
Cross site scripting
An out-of-bounds write vulnerability exists in the RS-274X aperture macro variables handling functionality of Gerbv 2.7.0 and dev commit b5f1eacd and the forked version of Gerbv commit 71493260. A specially-crafted gerber file can lead to code execution. An attacker can provide a malicious file t...
UBUNTU-CVE-2021-40394
An out-of-bounds write vulnerability exists in the RS-274X aperture macro variables handling functionality of Gerbv 2.7.0 and dev commit b5f1eacd and the forked version of Gerbv commit 71493260. A specially-crafted gerber file can lead to code execution. An attacker can provide a malicious file t...
CVE-2021-40394
An out-of-bounds write vulnerability exists in the RS-274X aperture macro variables handling functionality of Gerbv 2.7.0 and dev commit b5f1eacd and the forked version of Gerbv commit 71493260. A specially-crafted gerber file can lead to code execution. An attacker can provide a malicious file t...
UBUNTU-CVE-2021-40393
An out-of-bounds write vulnerability exists in the RS-274X aperture macro variables handling functionality of Gerbv 2.7.0 and dev commit b5f1eacd and the forked version of Gerbv commit 71493260. A specially-crafted gerber file can lead to code execution. An attacker can provide a malicious file t...
CVE-2021-40393
An out-of-bounds write vulnerability exists in the RS-274X aperture macro variables handling functionality of Gerbv 2.7.0 and dev commit b5f1eacd and the forked version of Gerbv commit 71493260. A specially-crafted gerber file can lead to code execution. An attacker can provide a malicious file t...
CVE-2021-40393
An out-of-bounds write vulnerability exists in the RS-274X aperture macro variables handling functionality of Gerbv 2.7.0 and dev commit b5f1eacd and the forked version of Gerbv commit 71493260. A specially-crafted gerber file can lead to code execution. An attacker can provide a malicious file t...
CVE-2021-40394
Gerbv versions 2.7.0 and its development forks are affected by CVE-2021-40394 due to an out-of-bounds write in RS-274X aperture macro variables handling and an integer overflow in the outline primitive. A specially crafted Gerber file could lead to code execution. Debian’s DLA-3593-1 (and related...
PT-2021-5666 · Gerbv +3 · Gerbv +3
Name of the Vulnerable Software and Affected Versions: Gerbv versions 2.7.0 and dev commit b5f1eacd Gerbv forked version commit 71493260 Description: An out-of-bounds write issue exists in the RS-274X aperture macro variables handling functionality. A specially-crafted gerber file can lead to cod...
PT-2021-5667 · Gerbv +3 · Gerbv +3
Name of the Vulnerable Software and Affected Versions: Gerbv versions 2.7.0 and dev commit b5f1eacd Gerbv forked version commit 71493260 Description: An out-of-bounds write issue exists in the RS-274X aperture macro variables handling functionality. This can be triggered by a specially-crafted...
sbcity.org XSS vulnerability
Vulnerable URL: http://www.sbcity.org/cityhall/publicworks/engineeringdivision/ApertureCards.asp?drawingnumber=1"...
CVE-2014-7385
The Aperture Mobile Media aka com.appaperturemobilemedia.layout application 1.404 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
Information disclosure
The Aperture Mobile Media aka com.appaperturemobilemedia.layout application 1.404 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-7385
The CVE-2014-7385 entry concerns the Aperture Mobile Media Android app (package com.app_aperturemobilemedia.layout), version 1.404, which does not verify X.509 certificates when connecting to SSL servers. Root cause: SSL certificate verification is bypassed, enabling a man‑in‑the‑middle attacker ...
CVE-2014-7385
The Aperture Mobile Media aka com.appaperturemobilemedia.layout application 1.404 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
WordPress Aperture Theme - Remote Code Execution
There are a bug in this theme, that allows any website visitor to run and see the output of any shortcode. This gives unauthenticated visitors the same power to execute code on the server as regular publishers have. Solution Update the theme...
Important: Red Hat Security Advisory: kernel security and bug fix update
Updated kernel packages that fix various security issues and several bugs are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any Linux...
Apple Aperture/iPhoto DNG图形处理栈溢出漏洞
BUGTRAQ ID: 28363 CVECAN ID: CVE-2008-0987 Aperture和iPhoto都是流行的数码照片编辑处理软件。 Aperture和iPhoto没有正确地处理DNG（Adobe数码底片）图形文件，如果用户受骗打开了畸形的图形文件的话，就可能触发栈溢出，导致执行任意指令。 Apple iPhoto 7.1.2 Apple Aperture 2 Apple ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...