The vulnerability of the tif_getimage.c component in the LibTIFF library, related to writing beyond the buffer boundaries, allows an attacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the tifgetimage.c component in the LibTIFF library is related to a buffer overflow vulnerability. This could potentially lead to a buffer overflow through the creation of an RGBA image, due to the presence of the “Nagative-size-param” condition. Exploiting this vulnerability...

The vulnerability of the XkbSetMap function in the X Window System X.Org Server implementation arises from the possibility of an out-of-buffer operation in memory. This vulnerability allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the XkbSetMap function in the X Window System X.Org Server implementation is related to the execution of operations that exceed the permissible data buffer limits. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and caus...

The vulnerability of the getChunkOffsetTableSize() function in software for storing OpenEXR images with a wide dynamic range in brightness levels, related to out-of-buffer writing, allows attackers to cause service interruptions.

The vulnerability of the getChunkOffsetTableSize function in software for storing OpenEXR images with a wide dynamic range of brightness levels is related to the operation exceeding the allowable buffer data size. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the WriteJP2Image function in the ImageMagick program, which is used for reading and editing graphic files, relates to memory initialization errors. This vulnerability allows attackers to gain access to confidential information or cause service interruptions.

The vulnerability of the WriteJP2Image function in the ImageMagick program, which is used for reading and editing graphic files, is related to incorrect initialization. Exploiting this vulnerability allows an attacker to gain access to confidential information or cause service failures...

The vulnerability of the HuffmanDecodeImage function in the command-line applications for processing GraphicsMagick image files, related to integer overflow, allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the HuffmanDecodeImage function in the command-line applications for processing GraphicsMagick image files is related to a numerical overflow of values. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and caus...

The vulnerability of the FastHufDecoder::refill library in the ImfFastHuf.cpp software for storing images in OpenEXR format with a wide dynamic range of brightness levels, related to reading data beyond the buffer’s acceptable limits, allows attackers to cause service interruptions.

The vulnerability of the FastHufDecoder::refill library in the ImfFastHuf.cpp software for storing images with wide dynamic range brightness in the OpenEXR format is related to reading data beyond the allowable buffer size. Exploiting this vulnerability could allow a malicious actor to cause...

The vulnerability of the ReadPANGOImage function in the ImageMagick graphics file reading and editing program lies in memory initialization errors. This allows attackers to gain access to confidential information or cause service interruptions.

The vulnerability of the ReadPANGOImage function in the ImageMagick graphics file reading and editing program is related to incorrect initialization. Exploiting this vulnerability allows an attacker to gain access to confidential information or cause service failures...

The vulnerability of many components of the ZeroMQ messaging system, related to uncontrolled resource consumption, allows a hacker to cause a service failure.

The vulnerability of many components of the ZeroMQ messaging system is related to a bug in the resource management mechanism. Exploiting this vulnerability allows an attacker who operates remotely to cause service interruptions...

The vulnerability of the multi-media library Ffmpeg allows a intruder to gain access to confidential data, compromise its integrity, and cause service interruptions.

Vulnerability of the multi-media library Ffmpeg. Exploitation of this vulnerability can allow a remote attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...

The vulnerability of the ImfOptimizedPixelReading.h library in software for storing images in OpenEXR format, which has a wide dynamic range of brightness levels, arises from reading data beyond the acceptable buffer limit. This allows attackers to cause service interruptions.

The vulnerability of the ImfOptimizedPixelReading.h library, which is used in software for storing images with wide dynamic range brightness in OpenEXR format, relates to reading data beyond the allowable buffer size. Exploiting this vulnerability could allow a malicious actor to cause service...

The vulnerability of the ImfTileOffsets.cpp library in software for storing images in OpenEXR format, which has a wide dynamic range of brightness levels, arises from reading data beyond the allowable buffer size. This allows attackers to cause system failures.

The vulnerability of the ImfTileOffsets.cpp library in software for storing images with wide dynamic range brightness in OpenEXR is related to the operation being performed within acceptable buffer data limits. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the PhpFastCache PHP library, related to deficiencies in the deserialization mechanism, allows attackers to trigger a denial-of-service attack.

The vulnerability of the PhpFastCache PHP library is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability of the ImageMagick image processing component, a console-based graphic editor, relates to reading data beyond the allowed buffer size. This allows attackers to cause service interruptions.

The vulnerability of the ImageMagick image processing component relates to reading data from beyond the allowed buffer size. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the WriteSGIImage function in the console-based image editing tool ImageMagick, related to writing beyond buffer boundaries, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the WriteSGIImage function in the console-based image editing tool ImageMagick is related to the execution of operations that exceed the allowable buffer data size. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its...

CVE-2021-33214

In HMS Ewon eCatcher through 6.6.4, weak filesystem permissions could allow malicious users to access files that could lead to sensitive information disclosure, modification of configuration files, or disruption of normal system operation...

CVE-2021-33214

In HMS Ewon eCatcher through 6.6.4, weak filesystem permissions could allow malicious users to access files that could lead to sensitive information disclosure, modification of configuration files, or disruption of normal system operation...

Information disclosure

In HMS Ewon eCatcher through 6.6.4, weak filesystem permissions could allow malicious users to access files that could lead to sensitive information disclosure, modification of configuration files, or disruption of normal system operation...

CVE-2021-33214

CVE-2021-33214 affects HMS Networks eCatcher prior to or up to version 6.6.4. The vulnerability arises from weak filesystem permissions that could allow malicious users to access files, potentially leading to sensitive information disclosure, modification of configuration files, or disruption of ...

CVE-2021-33214

In HMS Ewon eCatcher through 6.6.4, weak filesystem permissions could allow malicious users to access files that could lead to sensitive information disclosure, modification of configuration files, or disruption of normal system operation...

DarkSide Ransomware: Best Practices for Preventing Business Disruption from Ransomware Attacks

Summary This Advisory uses the MITRE Adversarial Tactics, Techniques, and Common Knowledge ATT &CK® framework, Version 9. See the ATT&CK for Enterprise for all referenced threat actor tactics and techniques. The Cybersecurity and Infrastructure Security Agency CISA and the Federal Bureau of...