The vulnerability in the implementation of the Lightweight Directory Access Protocol (LDAP) on the Microsoft Windows operating system allows a perpetrator to execute arbitrary code.

The vulnerability of the LDAP protocol implementation on Microsoft Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to execute arbitrary code by opening a specially created file...

AZL-10714 CVE-2022-38533 affecting package binutils for versions less than 2.37-4

In GNU Binutils before 2.40, there is a heap-buffer-overflow in the error function bfdgetl32 when called from the stripmain function in strip-new via a crafted file...

AZL-43450 CVE-2021-23210 affecting package sox 14.4.2.0-34

A floating point exception divide-by-zero issue was discovered in SoX in functon readsamples of voc.c file. An attacker with a crafted file, could cause an application to crash...

Denial Of Service (DoS)

unzip is vulnerable to denial of service. The vulnerability exists due to a heap of out-of-bound write during the conversion of a wide string to a local string allowing an attacker to crash the system via a maliciosuly crafted zip file...

vim: Out-of-bounds Write

A flaw was found in vim. The vulnerability occurs due to Illegal memory access and leads to an out-of-bounds write vulnerability in the excmds function. This flaw allows an attacker to input a specially crafted file, leading to a crash or code execution...

The vulnerability of the _nc_parse_entry function in the terminal input/output library parse_entry.c allows a attacker to cause a service failure.

The vulnerability of the ncparseentry function in the terminal input/output library’s source file parseentry.c is related to the use of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure by using a specially created file...

GPAC 代码问题漏洞

GPAC is a multimedia framework. GPAC MP4Box version 1.1.0 suffers from a denial of service vulnerability that originates in the gfhintertrackfinalize function. An attacker could exploit this vulnerability to cause a denial of service via a specially crafted file in the MP4Box command...

The vulnerability of Adobe Illustrator’s graphic editor, related to reading data beyond the buffer in memory, allows attackers to exploit this to disclose protected information.

The vulnerability of Adobe Illustrator graphic editor is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose protected information using a specially created file...

vim: use after free in utf_ptr2char

A heap use-after-free vulnerability was found in Vim's utfptr2char function of the src/mbyte.c file. This flaw occurs because vim is using a buffer line after it has been freed in the old regexp engine. This flaw allows an attacker to trick a user into opening a specially crafted file, triggering...

CVE-2021-21944

Two heap-based buffer overflow vulnerabilities exist in the TIFF parser functionality of Accusoft ImageGear 19.10. A specially-crafted file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger these vulnerabilities.This heap-based buffer oveflow takes place tryi...

CVE-2022-25230

Use after free vulnerability in CX-Programmer v9.76.1 and earlier which is a part of CX-One v4.60 suite allows an attacker to cause information disclosure and/or arbitrary code execution by having a user to open a specially crafted CXP file. This vulnerability is different from CVE-2022-25325...

Apache POI 资源管理错误漏洞

Apache POI is the United States Apache Apache Foundation of an open source library, which provides APIs to Java programs can read and write Microsoft Office format files. A resource management error vulnerability exists in Apache POI that stems from the product's failure to effectively determine...

The vulnerability of the software for creating metadata, processing, and exchanging standard sets within the Adobe XMP-Toolkit-SDK lies in the insufficient validation of input data. This allows a perpetrator to execute arbitrary code.

The vulnerability of the software for creating metadata, processing, and exchanging standard sets within the Adobe XMP-Toolkit-SDK is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code in the context of the current user,...

Corel Pdf Fusion 缓冲区错误漏洞

Corel Pdf Fusion is a commercial all-in-one Pdf creator from Canada's Corel Digital Technology Corel. For assembling, editing and creating Pdf. A security vulnerability exists in Corel PDF Fusion 2.6.2.0, which originates from a buffer error in Coreip.dll when parsing a carefully crafted file,...

The vulnerability of the `PackLinuxElf::canUnpack()` function in the `p_lx_elf.cpp` component of the UPX executable file unpacker, related to pointer swapping errors, allows a hacker to gain access to confidential data, compromise its integrity, and cause service failure.

The vulnerability of the PackLinuxElf::canUnpack function in the plxelf.cpp component of the UPX executable file unpacker is related to pointer swapping errors. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service...

DEBIAN-CVE-2021-32138

The DumpTrackInfo function in GPAC 1.0.1 allows attackers to cause a denial of service NULL pointer dereference via a crafted file in the MP4Box command...

GPAC 代码问题漏洞

GPAC is a multimedia framework for rich media and is distributed under the LGPL license. gfhinterfinalize function in GPAC version 1.0.1 is vulnerable to null pointer dereference. An attacker could exploit this vulnerability to cause a denial of service via a specially crafted file in the MP4Box...

PT-2021-11568 · Prusa +1 · Prusaslicer +1

Name of the Vulnerable Software and Affected Versions: PrusaSlicer versions 2.2.0 through Master commit 4b040b856 Description: An out-of-bounds write issue exists in the stl fix normal directions functionality. A specially crafted AMF file can lead to code execution. An attacker can provide a...

The vulnerability of the ReadPSDLayersInternal function in the coders/psd.c component of the console image editing tool ImageMagick, related to a lack of input data validation mechanism, allows attackers to trigger a service failure.

The vulnerability of the ReadPSDLayersInternal function in the ImageMagick console graphics editor’s coders/psd.c file is related to the lack of a mechanism for checking input data. Exploiting this vulnerability allows an attacker to cause a service failure by using a specially crafted file...

The vulnerability of the elFinder file manager stems from the incorrect implementation of authentication mechanisms, allowing attackers to execute arbitrary code.

The vulnerability of the elFinder file manager is related to the unlimited loading of files of a dangerous type. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created .phar file...