8221 matches found
Siemens Simcenter Femap has an out-of-bounds write vulnerability (CNVD-2022-28488)
An out-of-bounds write vulnerability exists in Siemens Simcenter Femap, an advanced simulation application for creating, editing, and inspecting finite element models of complex products or systems, which can be exploited by attackers to execute code in the context of the current process...
Pimcore SQL injection vulnerability
Pimcore is an open source Web content management platform for creating and managing Web applications from the Austrian company Pimcore. The platform integrates Web content management, e-commerce frameworks and product information management applications.A SQL injection vulnerability exists in...
CVE-2022-28541
CVE-2022-28541 describes an Uncontrolled search path element vulnerability in Samsung Update, affecting versions prior to 3.0.77.0. The flaw allows local attackers with Samsung Update permission to execute arbitrary code. No exploit details, affected platforms, nor fixed versions are provided bey...
Mozilla: Incorrect AliasSet used in JIT Codegen
A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes this flaw as: When generating the assembly code for MLoadTypedArrayElementHole, an incorrect AliasSet was used. In conjunction with another vulnerability, this could have been used for an out-of-bounds memory read...
UBUNTU-CVE-2022-28284
SVG's use element could have been used to load unexpected content that could have executed script in certain circumstances. While the specification seems to allow this, other browsers do not, and web developers relied on this property for script security so gecko's implementation was aligned with...
Mozilla Firefox security feature vulnerabilities
Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security feature issue vulnerability exists in Mozilla Firefox versions 92.0 through 98.0.2, which stems from an error that allows the element of SVG to load unexpected content and execute it under...
PT-2022-4251
Name of the Vulnerable Software and Affected Versions Firefox versions prior to 99 Description The issue is related to the implementation of the SVG element, which could be used to load unexpected content, potentially executing scripts under certain circumstances. Although the specification appea...
Cyrus IMAP Cryptographic Defect DoS
The vulnerability of the Cyrus IMAP mail server lies in the ability to select a table element for data storage. Exploiting this vulnerability allows an attacker operating remotely to cause a service failure...
CVE-2021-35088
Possible out of bound read due to improper validation of IE length during SSID IE parse when channel is DFS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure...
PT-2022-10409 · Qualcomm · Snapdragon Connectivity +7
Name of the Vulnerable Software and Affected Versions: Snapdragon Auto affected versions not specified Snapdragon Compute affected versions not specified Snapdragon Connectivity affected versions not specified Snapdragon Consumer IOT affected versions not specified Snapdragon Industrial IOT...
CVE-2021-44209
OX App Suite through 7.10.5 allows XSS via an HTML 5 element such as AUDIO...
CVE-2021-44209
OX App Suite through 7.10.5 allows XSS via an HTML 5 element such as AUDIO...
Cross site scripting
OX App Suite through 7.10.5 allows XSS via an HTML 5 element such as AUDIO...
CVE-2021-44209: Improper Neutralization of Input During Web Page Generation
OX App Suite through 7.10.5 allows XSS via an HTML 5 element such as AUDIO...
CVE-2022-26511: Uncontrolled Search Path Element
WPS Presentation 11.8.0.5745 insecurely load d3dx941.dll when opening .pps files'current directory type' DLL loading...
DEBIAN-CVE-2022-26354
A flaw was found in the vhost-vsock device of QEMU. In case of error, an invalid element was not detached from the virtqueue before freeing its memory, leading to memory leakage and other unexpected results. Affected QEMU versions = 6.2.0...
AZL-9095 CVE-2022-26354 affecting package qemu for versions less than 6.2.0-2
A flaw was found in the vhost-vsock device of QEMU. In case of error, an invalid element was not detached from the virtqueue before freeing its memory, leading to memory leakage and other unexpected results. Affected QEMU versions = 6.2.0...
UBUNTU-CVE-2022-26354
A flaw was found in the vhost-vsock device of QEMU. In case of error, an invalid element was not detached from the virtqueue before freeing its memory, leading to memory leakage and other unexpected results. Affected QEMU versions = 6.2.0...
CVE-2021-42262
An issue was discovered in Softing OPC UA C++ SDK before 5.70. An invalid XML element in the type dictionary makes the OPC/UA client crash due to an out-of-memory condition...
Design/Logic Flaw
An issue was discovered in Softing OPC UA C++ SDK before 5.70. An invalid XML element in the type dictionary makes the OPC/UA client crash due to an out-of-memory condition...