PT-2022-21889 · Autodesk · Autodesk Dwg

Name of the Vulnerable Software and Affected Versions: Autodesk DWG affected versions not specified Description: A maliciously crafted Dwg2Spd file, when processed through the Autodesk DWG application, could lead to a memory corruption issue due to a write access violation. This issue, in...

PT-2022-25370 · Chamilo · Chamilo

Name of the Vulnerable Software and Affected Versions: Chamilo version 1.11 Description: A zip slip vulnerability in the file upload function allows attackers to execute arbitrary code via a crafted Zip file. Recommendations: For Chamilo version 1.11, update to a version that fixes the zip slip...

PYSEC-2022-43101

The d8s-strings for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-hypothesis package. The affected version is 0.1.0...

PT-2022-37380 · Pypi · D8S-Pdfs +1

Name of the Vulnerable Software and Affected Versions: d8s-pdfs version 0.1.0 Description: The d8s-pdfs for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-networking package. Recommendations: For version 0.1.0...

CVE-2022-28852

Adobe InDesign versions 16.4.2 and earlier and 17.3 and earlier are affected by by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious fil...

Ansys SpaceClaim 缓冲区错误漏洞

Ansys SpaceClaim is a solid modeling CAD software from Ansys Corporation. A buffer error vulnerability exists in Ansys SpaceClaim 2022 R1, which stems from a specific flaw in the parsing of JT files that lacks proper validation of user-supplied data, which could result in reading beyond the end o...

PT-2022-5063 · Adobe · Indesign

Name of the Vulnerable Software and Affected Versions: Adobe InDesign versions 16.4.2 and earlier Adobe InDesign versions 17.3 and earlier Description: The issue is related to an out-of-bounds write vulnerability in memory. Exploitation of this issue could allow an attacker to execute arbitrary...

PT-2022-5075 · Adobe · Photoshop

Name of the Vulnerable Software and Affected Versions: Adobe Photoshop versions 22.5.8 and earlier Adobe Photoshop versions 23.4.2 and earlier Description: The issue is related to a Heap-based Buffer Overflow vulnerability in Adobe Photoshop, which can be exploited by opening a malicious SVG file...

PT-2022-24763 · Siemens · Parasolid +1

Name of the Vulnerable Software and Affected Versions: Parasolid versions prior to V33.1.262 Parasolid versions prior to V34.0.252 Parasolid versions prior to V34.1.242 Parasolid versions prior to V35.0.161 Simcenter Femap versions prior to V2022.1.3 Simcenter Femap versions prior to V2022.2.2...

PT-2022-24775 · Siemens · Parasolid +1

Name of the Vulnerable Software and Affected Versions: Parasolid versions prior to V33.1.263 Parasolid V34.0 versions prior to V34.0.252 Parasolid V34.1 versions prior to V34.1.242 Parasolid V35.0 versions prior to V35.0.164 Simcenter Femap V2022.1 versions prior to V2022.1.3 Simcenter Femap...

PT-2022-24776 · Siemens · Parasolid +1

Name of the Vulnerable Software and Affected Versions: Parasolid versions prior to V33.1.263 Parasolid V34.0 versions prior to V34.0.252 Parasolid V34.1 versions prior to V34.1.242 Parasolid V35.0 versions prior to V35.0.164 Simcenter Femap V2022.1 versions prior to V2022.1.3 Simcenter Femap...

CVE-2014-9984: nscd in the GNU C Library (aka glibc or libc6) before version 2.20 does not correctly compute the size of an internal buffer

Security Advisory ID : BSA-2022-607 Component : GNU C Library Revision : 1.1 nscd in the GNU C Library aka glibc or libc6 before version 2.20 does not correctly compute the size of an internal buffer when processing netgroup requests, possibly leading to an nscd daemon crash or code execution as...

PT-2022-5208 · Adobe · Photoshop

Name of the Vulnerable Software and Affected Versions: Adobe Photoshop versions 22.5.8 and earlier Adobe Photoshop versions 23.4.2 and earlier Description: The issue is related to an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an...

PT-2022-24779 · Siemens · Parasolid +1

Name of the Vulnerable Software and Affected Versions: Parasolid versions prior to V33.1.263 Parasolid V34.0 versions prior to V34.0.252 Parasolid V34.1 versions prior to V34.1.242 Parasolid V35.0 versions prior to V35.0.164 Simcenter Femap V2022.1 versions prior to V2022.1.3 Simcenter Femap...

PT-2022-24769 · Siemens · Parasolid +1

Name of the Vulnerable Software and Affected Versions: Parasolid versions prior to V33.1.263 Parasolid V34.0 versions prior to V34.0.252 Parasolid V34.1 versions prior to V34.1.242 Parasolid V35.0 versions prior to V35.0.164 Simcenter Femap V2022.1 versions prior to V2022.1.3 Simcenter Femap...

CVE-2022-36039 Out-of-bounds write when parsing DEX files in Rizin

Rizin is a UNIX-like reverse engineering framework and command-line toolset. Versions 0.4.0 and prior are vulnerable to out-of-bounds write when parsing DEX files. A user opening a malicious DEX file could be affected by this vulnerability, allowing an attacker to execute code on the user's...

CVE-2022-2738

The version of podman as released for Red Hat Enterprise Linux 7 Extras via RHSA-2022:2190 advisory included an incorrect version of podman missing the fix for CVE-2020-8945, which was previously fixed via RHSA-2020:2117. This issue could possibly be used to crash or cause potential code executio...

Mozilla: Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2, and Firefox ESR 91.13

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes the issue of members on the Mozilla Fuzzing Team reporting memory safety bugs present in Firefox 103, Firefox ESR 102.1, and Firefox ESR 91.12. Some of these bugs showed evidence of memory corruption, and we presume...

SonicWall SMA100 Post-Auth Heap-based Buffer Overflow Vulnerability

A Heap-based Buffer Overflow vulnerability in the SonicWall SMA100 appliance allows a remote authenticated attacker to cause Denial of Service DoS on the appliance or potentially lead to code execution. This vulnerability impacts 10.2.1.5-34sv and earlier versions.IMPORTANT: SMA 1000 series...

The vulnerability of the System Management Mode (SMM) implementation in HP notebook BIOS microprogramming systems allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the System Management Mode SMM implementation in HP notebook BIOS microprogramming systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to execute arbitrary code or cause system failures...