Lucene search
K

15 matches found

RedHat Linux
RedHat Linux
added 5 days ago6 views

TigerVNC: x0vncserver: TigerVNC x0vncserver: Information disclosure, data manipulation, and denial of service via incorrect permissions

A flaw was found in TigerVNC's x0vncserver component. Due to incorrect permissions in the Image.cxx file, other users on the system can observe or manipulate the screen contents of a running session. This vulnerability could also lead to an application crash, resulting in a Denial of Service DoS...

9.8CVSS5.8AI score0.00034EPSS
Exploits0References8
AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.6 views

Astra Linux - уязвимость в htmldoc

A flaw was discovered in htmldoc version 1.9.12. A heap buffer overflow in the rendertablerow function, located in ps-pdf.cxx, may lead to arbitrary code execution and denial of service...

7.8CVSS7.7AI score0.00166EPSS
Exploits1References2
RedHat Linux
RedHat Linux
added 2026/05/19 10:4 p.m.6 views

TigerVNC: x0vncserver: TigerVNC x0vncserver: Information disclosure, data manipulation, and denial of service via incorrect permissions

A flaw was found in TigerVNC's x0vncserver component. Due to incorrect permissions in the Image.cxx file, other users on the system can observe or manipulate the screen contents of a running session. This vulnerability could also lead to an application crash, resulting in a Denial of Service DoS...

9.8CVSS5.8AI score0.00034EPSS
Exploits0References8
RedHat Linux
RedHat Linux
added 2026/05/04 12:38 p.m.9 views

TigerVNC: x0vncserver: TigerVNC x0vncserver: Information disclosure, data manipulation, and denial of service via incorrect permissions

A flaw was found in TigerVNC's x0vncserver component. Due to incorrect permissions in the Image.cxx file, other users on the system can observe or manipulate the screen contents of a running session. This vulnerability could also lead to an application crash, resulting in a Denial of Service DoS...

9.8CVSS5.8AI score0.00034EPSS
Exploits0References8
Positive Technologies
Positive Technologies
added 2026/03/26 12:0 a.m.5 views

PT-2026-28618

Name of the Vulnerable Software and Affected Versions TigerVNC versions prior to 1.16.2 Description The software contains a flaw in the Image.cxx file within the x0vncserver component. Incorrect permissions allow other users to potentially observe or manipulate the screen content, or cause the...

9.8CVSS5.9AI score0.00034EPSS
Exploits0References58
OSV
OSV
added 2023/07/18 2:15 p.m.3 views

DEBIAN-CVE-2021-34121

An Out of Bounds flaw was discovered in htmodoc 1.9.12 in function parsetree in toc.cxx, this possibly leads to memory layout information leaking in the data. This might be used in a chain of vulnerability in order to reach code execution...

7.8CVSS7.5AI score0.00031EPSS
Exploits1References1
SUSE CVE
SUSE CVE
added 2023/02/15 4:46 a.m.2 views

SUSE CVE-2017-7870

LibreOffice before 2017-01-02 has an out-of-bounds write caused by a heap-based buffer overflow related to the tools::Polygon::Insert function in tools/source/generic/poly.cxx...

6.3CVSS7.6AI score0.01133EPSS
Exploits0References5
SUSE CVE
SUSE CVE
added 2023/02/15 4:46 a.m.2 views

SUSE CVE-2017-8358

LibreOffice before 2017-03-17 has an out-of-bounds write caused by a heap-based buffer overflow related to the ReadJPEG function in vcl/source/filter/jpeg/jpegc.cxx...

9.8CVSS7.6AI score0.00508EPSS
Exploits0References5
SUSE CVE
SUSE CVE
added 2023/02/15 3:44 a.m.1 views

SUSE CVE-2021-26259

A flaw was found in htmldoc in v1.9.12. Heap buffer overflow in rendertablerow,in ps-pdf.cxx may lead to arbitrary code execution and denial of service...

7.8CVSS7.9AI score0.00166EPSS
Exploits1References3
0day.today
0day.today
added 2021/11/08 12:0 a.m.344 views

zlog 1.2.15 - Buffer Overflow Exploit

Exploit Title: zlog 1.2.15 - Buffer Overflow Exploit Author: LIWEI Vendor Homepage: https://github.com/HardySimpson/zlog Software Link: https://github.com/HardySimpson/zlog Version: v1.2.15 Tested on: ubuntu 18.04.2 1.- compile the zlogv1.2.15 code to a library. 2.- Use the "zloginit" API to pars...

7.4AI score
Exploits0
Positive Technologies
Positive Technologies
added 2021/01/26 12:0 a.m.2 views

PT-2021-8098 · Htmldoc +3 · Htmldoc +3

Name of the Vulnerable Software and Affected Versions: htmldoc version 1.9.12 Description: A flaw in htmldoc may result in a write-what-where condition, allowing an attacker to execute arbitrary code and cause denial of service. The issue is related to a double-free in the pspdf export function,...

10CVSS7.3AI score0.05615EPSS
Exploits16References76
Positive Technologies
Positive Technologies
added 2021/01/26 12:0 a.m.4 views

PT-2021-8103 · Htmldoc +4 · Htmldoc +4

Name of the Vulnerable Software and Affected Versions: htmldoc versions 1.9.12 and earlier Description: A security issue is found in the image load jpeg function of the image.cxx component, related to NULL pointer dereference errors. This issue may allow an attacker to access confidential data,...

10CVSS6.7AI score0.05615EPSS
Exploits19References90
CNVD
CNVD
added 2018/12/24 12:0 a.m.2 views

LibRaw 'copy_bayer' function null pointer backreference vulnerability

LibRaw is a C++ library developed by the LibRaw team for processing RAW CRW/CR2, NEF, RAF, DNG and others format images. A null pointer back-reference vulnerability exists in the 'copybayer' function of the librawcxx.cpp file in LibRaw version 0.19.1. An attacker can exploit this vulnerability to...

6.5CVSS9.1AI score0.0049EPSS
Exploits1References1
CNVD
CNVD
added 2017/04/05 12:0 a.m.1 views

TigerVNC Denial of Service Vulnerability (CNVD-2017-05161)

TigerVNC is a high-performance, platform-neutral implementation of VNC Virtual Network Computing, a client/server application that allows users to launch and interact with graphical applications on remote machines. A security vulnerability exists in the CConnection::CConnection function of the...

7.5CVSS7.5AI score0.00389EPSS
Exploits0References1
OSV
OSV
added 2011/12/31 1:55 a.m.1 views

DEBIAN-CVE-2011-4620

Buffer overflow in the ulSetError function in util/ulError.cxx in PLIB 1.8.5, as used in TORCS 1.3.1 and other products, allows user-assisted remote attackers to execute arbitrary code via vectors involving a long error message, as demonstrated by a crafted acc file for TORCS. NOTE: some of these...

9.3CVSS8.2AI score0.3458EPSS
Exploits1References1
Rows per page
Query Builder