CVE-2021-25175

An issue was discovered in Open Design Alliance Drawings SDK before 2021.11. A Type Conversion issue exists when rendering malformed .DXF and .DWG files. This can allow attackers to cause a crash, potentially enabling a denial of service attack Crash, Exit, or Restart...

Jiajia Blu-ray HD Format Converter is vulnerable to dll hijacking.

Jia Jia Blu-ray HD Format Converter is a format conversion software specialized in converting BD Blu-ray HD videos. Jiajia Blu-ray HD Format Converter suffers from a dll hijacking vulnerability. An attacker can exploit this vulnerability to load a malicious dll and execute malicious code...

Jiajia MP4 MP3 Format Converter is vulnerable to dll hijacking.

Jia Jia MP4 MP3 Format Converter is a MP4, MP3 format conversion tool. Jiajia MP4 MP3 Format Converter suffers from a dll hijacking vulnerability. An attacker can exploit this vulnerability to load a malicious dll and execute malicious code...

CVE-2020-35578

An issue was discovered in the Manage Plugins page in Nagios XI before 5.8.0. Because the line-ending conversion feature is mishandled during a plugin upload, a remote, authenticated admin user can execute operating-system commands...

The vulnerability of the Foxit Reader text viewer program and the Foxit PhantomPDF PDF editing program, related to data conversion errors, allows a perpetrator to execute arbitrary code.

The vulnerability of the Foxit Reader text viewer program and the Foxit PhantomPDF PDF editing program is related to data type conversion errors. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

CVE-2021-23930

OX App Suite through 7.10.4 allows XSS via use of the conversion API for a distributedFile...

CVE-2021-23930

OX App Suite through 7.10.4 allows XSS via use of the conversion API for a distributedFile...

CVE-2021-23930

OX App Suite through 7.10.4 allows XSS via use of the conversion API for a distributedFile...

Design/Logic Flaw

OX App Suite through 7.10.4 allows XSS via use of the conversion API for a distributedFile...

CVE-2021-23930

CVE-2021-23930 affects OX App Suite up to version 7.10.4, with an XSS vulnerability exploitable via the transformation/conversion API used for a distributedFile. The connected records corroborate the issue across multiple feeds (Red Hat, CNVD, NVD, etc.). The provided documents do not specify an ...

CVE-2021-23930

OX App Suite through 7.10.4 allows XSS via use of the conversion API for a distributedFile...

EV Video Converter Win has dll hijacking vulnerability

EV Video Converter is a video conversion tool. EV Video Converter Win suffers from a dll hijacking vulnerability. An attacker can exploit the vulnerability to load a malicious dll and execute malicious code...

Security update for cobbler (moderate)

openSUSE Security Update: Security update for cobbler Announcement ID: openSUSE-SU-2021:0046-1 Rating: moderate References: 1020376 1029276 1048183 1074594 1075014 1081714 1081739 1090205 1097733 1101670 1104189 1104190 1104287 1105440 1105442 1113747 1128754 1128926 1130658 1134588 1149075 11518...

Denial Of Service (DoS)

ghostscript is vulnerable to denial of service. The vulnerability exists through a flaw in src/lib/openjp2/pi.c through openjpeg's conversion/encoding functionality that causes an out-of-bounds read...

CVE-2020-13545

An exploitable signed conversion vulnerability exists in the TextMaker document parsing functionality of SoftMaker Office 2021’s TextMaker application. A specially crafted document can cause the document parser to miscalculate a length used to allocate a buffer, later upon usage of this buffer th...

CVE-2020-13545

An exploitable signed conversion vulnerability exists in the TextMaker document parsing functionality of SoftMaker Office 2021’s TextMaker application. A specially crafted document can cause the document parser to miscalculate a length used to allocate a buffer, later upon usage of this buffer th...

CVE-2020-13545

CVE-2020-13545 affects SoftMaker Office TextMaker 2021. The TALOS analysis details a signed/unsigned conversion issue in TextMaker’s document parsing that can cause heap-based memory corruption when loading a crafted TextMaker Document (.tmd). The root cause involves miscalculation of a length us...

CVE-2020-27845

There's a flaw in src/lib/openjp2/pi.c of openjpeg in versions prior to 2.4.0. If an attacker is able to provide untrusted input to openjpeg's conversion/encoding functionality, they could cause an out-of-bounds read. The highest impact of this flaw is to application availability...

ALPINE-CVE-2020-27844

A flaw was found in openjpeg's src/lib/openjp2/t2.c in versions prior to 2.4.0. This flaw allows an attacker to provide crafted input to openjpeg during conversion and encoding, causing an out-of-bounds write. The highest threat from this vulnerability is to confidentiality, integrity, as well as...

AZL-44712 CVE-2020-27845 affecting package openjpeg2 for versions less than 2.3.1-12

There's a flaw in src/lib/openjp2/pi.c of openjpeg in versions prior to 2.4.0. If an attacker is able to provide untrusted input to openjpeg's conversion/encoding functionality, they could cause an out-of-bounds read. The highest impact of this flaw is to application availability...