Xxe

National land numerical information data conversion tool all versions improperly restricts XML external entity references XXE. By processing a specially crafted XML file, arbitrary files on the PC may be accessed by an attacker...

Improper restriction of XML external entity references (XXE) in National land numerical information data conversion tool

Overview National land numerical information data conversion tool provided by MLIT improperly restricts XML external entity references XXE CWE-611. Taku Toyama and Kohei Matsumoto of NEC Corporation reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information...

JVN#75742861: Improper restriction of XML external entity references (XXE) in National land numerical information data conversion tool

National land numerical information data conversion tool provided by MLIT improperly restricts XML external entity references XXE CWE-611. Impact By processing a specially crafted XML file, arbitrary files on the PC may be accessed by an attacker. Solution Stop using the product The developer...

National land numerical information data conversion tool 代码问题漏洞

National Land Information Division National land numerical information data conversion tool is a data conversion tool from National Land Information Division, Japan. A security vulnerability exists in the National land numerical information data conversion tool due to an improper restriction on X...

[SECURITY] Fedora 38 Update: perl-Cpanel-JSON-XS-4.35-1.fc38

This module converts Perl data structures to JSON and vice versa. Its primary goal is to be correct and its secondary goal is to be fast. To reach the latter goal it was written in C...

CVE-2022-41911

TensorFlow is an open source platform for machine learning. When printing a tensor, we get it's data as a const char array since that's the underlying storage and then we typecast it to the element type. However, conversions from char to bool are undefined if the char is not 0 or 1, so...

The vulnerability of microprogramming software in embedded Qualcomm Android operating systems, related to data type conversion errors, allows attackers to escalate their privileges.

The vulnerability of microprogramming software in embedded Qualcomm Android operating systems is related to errors in data type conversion during the verification of file hash segments. Exploiting this vulnerability can allow attackers to enhance their privileges using a specially created malicio...

Security Bulletin: Multiple IBM MQ vulnerabilities affect IBM Sterling Global Mailbox

Summary IBM MQ is shipped with IBM Sterling Global Mailbox. Multiple vulnerabilities impacts IBM MQ. Remediation is available for the issues. Vulnerability Details CVEID: CVE-2019-4227 DESCRIPTION: IBM MQ 8.0.0.4 - 8.0.0.12, 9.0.0.0 - 9.0.0.6, 9.1.0.0 - 9.1.0.2, and 9.1.0 - 9.1.2 AMQP Listeners...

Denial Of Service (DoS)

IBM MQ is vulnerable to denial of service. The vulnerability exists due to an error within the Data Conversion logic...

Gnuplot code issue vulnerability

Gnuplot is a command-line interactive tool that allows users to enter commands to convert data data and data functions into easy-to-see flat or three-dimensional graphs A code problem vulnerability exists in Gnuplot, which stems from the boundary3d function in the product's graph3d.c file that...

python-psutil: Double free because of refcount mishandling

A double free issue has been discovered in python-psutil because of the mishandling of refcounts while converting system data into Python objects in functions like psutildiskpartitions, psutilusers, psutilnetifaddrs, and others. In particular cases, a local attacker may be able to get code...

SUSE: Security Advisory (SUSE-SU-2018:4193-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 34 Update: mapserver-7.6.3-1.fc34

Mapserver is an internet mapping program that converts GIS data to map images in real time. With appropriate interface pages, Mapserver can provide an interactive internet map based on custom GIS data...

Security Bulletin: Multiple IBM MQ Vulnerabilities Affect IBM Control Center

Summary Multiple IBM MQ vulnerabilities affect IBM Control Center. See vulnerability details for descriptions. Vulnerability Details CVEID: CVE-2020-4320 DESCRIPTION: IBM MQ Appliance and IBM MQ AMQP Channels 8.0, 9.0 LTS, 9.1 LTS, and 9.1 CD do not correctly block or allow clients based on the...

python-psutil: Double free because of refcount mishandling

A double free issue has been discovered in python-psutil because of the mishandling of refcounts while converting system data into Python objects in functions like psutildiskpartitions, psutilusers, psutilnetifaddrs, and others. In particular cases, a local attacker may be able to get code...

The vulnerability affects the implementation of the RotatePage command in the Foxit Reader text viewer and the Foxit PhantomPDF PDF editing program. This allows an attacker to execute arbitrary code.

The vulnerability of the RotatePage function in the Foxit Reader text viewer and Foxit PhantomPDF PDF editing software lies in data type conversion errors. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely...

The vulnerability affects the implementation of the “AddWatermark” command in the Foxit Reader text viewer software and the Foxit PhantomPDF PDF editing software. This allows a malicious individual to execute arbitrary code.

The vulnerability of the “AddWatermark” command in the Foxit Reader text viewer and the Foxit PhantomPDF PDF editing program is related to data type conversion errors. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely...

The vulnerability of the Foxit Reader text viewer program and the Foxit PhantomPDF PDF editing program, related to data conversion errors, allows a perpetrator to execute arbitrary code.

The vulnerability of the Foxit Reader text viewer program and the Foxit PhantomPDF PDF editing program is related to data type conversion errors. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

python-psutil: Double free because of refcount mishandling

A double free issue has been discovered in python-psutil because of the mishandling of refcounts while converting system data into Python objects in functions like psutildiskpartitions, psutilusers, psutilnetifaddrs, and others. In particular cases, a local attacker may be able to get code...

Security Bulletin: IBM MQ is vulnerable to a denial of service attack due to an error within the Data Conversion logic. (CVE-2020-4310)

Summary An issue was found within the data conversion logic that could cause a SIGSEGV and denial of service within an MQ channel process. Vulnerability Details CVEID: CVE-2020-4310 DESCRIPTION: IBM MQ and MQ Appliance is vulnerable to a denial of service attack due to an error within the Data...