18510 matches found
Medium: freerdp
Issue Overview: FreeRDP is a set of free and open source remote desktop protocol library and clients. In affected versions an integer overflow in freerdpbitmapplanarcontextreset leads to heap-buffer overflow. This affects FreeRDP based clients. FreeRDP based server implementations and proxy are n...
Adobe Acrobat Reader 资源管理错误漏洞
Adobe Acrobat Reader is a PDF viewer from the American company Audobee Adobe. The software is used to print, sign and annotate PDF. Adobe Acrobat Reader has a security vulnerability that can be exploited by an attacker to cause arbitrary code execution in the context of the current user...
SolarWinds Access Rights Manager JsonSerializationBinder Deserialization of Untrusted Data Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of SolarWinds Access Rights Manager. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...
Adobe Acrobat Reader 输入验证错误漏洞
Adobe Acrobat Reader is a PDF viewer from the American company Audobee Adobe. The software is used to print, sign and annotate PDF. A security vulnerability exists in Adobe Acrobat Reader, which can be exploited by an attacker to cause arbitrary code to be executed in the context of the current...
Adobe Acrobat Reader 缓冲区错误漏洞
Adobe Acrobat Reader is a PDF viewer from the American company Audobee Adobe. The software is used to print, sign and annotate PDF. Adobe Acrobat Reader has a security vulnerability that can be exploited by an attacker to cause arbitrary code execution in the context of the current user...
Adobe Acrobat Reader 访问控制错误漏洞
Adobe Acrobat Reader is a PDF viewer from the American company Audobee Adobe. The software is used to print, sign and annotate PDF. Adobe Acrobat Reader has a security vulnerability that can be exploited by an attacker to cause arbitrary code execution in the context of the current user...
GHSA-VQC4-MPJ8-JXCH Grafana Race condition allowing privilege escalation
Today we are releasing Grafana 9.2.4. Alongside other bug fixes, this patch release includes critical security fixes for CVE-2022-39328. Release 9.2.4, latest patch, also containing security fix: - Download Grafana 9.2.4 Appropriate patches have been applied to Grafana Cloud and as always, we...
CVE-2021-22280
Improper DLL loading algorithms in B&R Automation Studio versions =4.0 and 4.12 may allow an authenticated local attacker to execute code in the context of the product...
Intel CST Software Advisory - Lenovo Support US
No description provided...
CVE-2024-32065
A vulnerability has been identified in Simcenter Femap All versions V2406. The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted IGS files. This could allow an attacker to execute code in the context of the current process...
CVE-2024-32059
A vulnerability has been identified in Simcenter Femap All versions V2406. The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted IGS files. This could allow an attacker to execute code in the context of the current process...
CVE-2024-28761
IBM App Connect Enterprise 11.0.0.1 through 11.0.0.25 and 12.0.1.0 through 12.0.12.0 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. IBM X-Force I...
CVE-2024-28761
IBM App Connect Enterprise 11.0.0.1 through 11.0.0.25 and 12.0.1.0 through 12.0.12.0 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. IBM X-Force I...
CVE-2024-22344
IBM TXSeries for Multiplatforms 8.2 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. IBM X-Force ID: 280191...
CVE-2024-34086
CVE-2024-34086 affects Siemens JT2Go and Teamcenter Visualization (V14.1, V14.2, V14.3, V2312) with all versions prior to specific fixed builds. The vulnerability is an out-of-bounds write while parsing a specially crafted CGM file, enabling code execution in the affected process. Affected versio...
CVE-2024-32635
CVE-2024-32635 affects Siemens JT2Go and Teamcenter Visualization: JT2Go < V2312.0005; Teamcenter Visualization V14.2 < 0.12; V14.3 < 0.10; V2312
CVE-2024-32065
CVE-2024-32065 affects Siemens/Siemens Simcenter Femap (versions prior to V2406). The vulnerability is an out-of-bounds read past the end of an allocated structure while parsing specially crafted IGS files, which could allow code execution in the current process. Affected in Simcenter Femap
CVE-2024-32064
A vulnerability has been identified in Simcenter Femap All versions V2406. The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted IGS files. This could allow an attacker to execute code in the context of the current process...
CVE-2024-32064
CVE-2024-32064 affects Simcenter Femap versions prior to V2406, where parsing specially crafted IG S files can cause an out-of-bounds read and potentially allow code execution in the current process. The vulnerability is tied to the IGS parsing path in Simcenter Femap; affected software and versi...