The vulnerability of the OpenImageIO image processing library, related to reading data beyond the permissible buffer limits, allows attackers to gain access to confidential data.

The vulnerability of the OpenImageIO image processing library lies in the reading of data beyond the allowed buffer size. Exploiting this vulnerability could allow an attacker to gain access to confidential data through a specially created TIFF file...

Apache NiFi 安全漏洞

Apache NiFi is a data processing and distribution system from the Apache USA Foundation. The system is primarily used for data routing, transformation, and system brokering logic. A security vulnerability exists in Apache NiFi versions 1.21.0 through 1.23.0 that originates from allowing an...

The vulnerability of the pFormat function in the software for converting chemical substance formats, Open Babel, allows a hacker to execute arbitrary code.

The vulnerability of the pFormat function in the Open Babel software for converting chemical substance formats is related to the use of an uninitialized pointer. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the WriteMoleculeCSRFormat function in the Open Babel file format conversion software allows a hacker to execute arbitrary code.

The vulnerability of the WriteMoleculeCSRFormat function in the Open Babel file format conversion software is related to the execution of the operation outside the buffer memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

USN-6297-1 ghostscript vulnerability

It was discovered that Ghostscript incorrectly handled outputting certain PDF files. A local attacker could potentially use this issue to cause a crash, resulting in a denial of service...

编号撤回

LibTIFF is a library for reading and writing TIFF Tagged Image File Format files. The library contains some command line tools for working with TIFF files. This CVE number has been withdrawn...

PT-2023-26979 · Unknown · Pdf-Xchange Editor

Name of the Vulnerable Software and Affected Versions: PDF-XChange Editor affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a...

Fedora: Security Advisory for ghostscript (FEDORA-2023-d0ef677e6f)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE CVE-2020-36138

An issue was discovered in decodeframe in libavcodec/tiff.c in FFmpeg version 4.3, allows remote attackers to cause a denial of service DoS...

Libxls Buffer Error Vulnerability

Libxls is a C-based code library for reading data from OLT-formatted xls files from the Libxls personal developer. A security vulnerability exists in libxls version v.1.6.2, which stems from the presence of a buffer overflow vulnerability that allows remote attackers to execute arbitrary code and...

Fedora: Security Advisory for OpenImageIO (FEDORA-2023-99870af9f0)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 37 Update: OpenImageIO-2.4.14.0-1.fc37

OpenImageIO is a library for reading and writing images, and a bunch of relat ed classes, utilities, and applications. Main features include: - Extremely simple but powerful ImageInput and ImageOutput APIs for reading a nd writing 2D images that is format agnostic. - Format plugins for TIFF,...

[SECURITY] Fedora 38 Update: OpenImageIO-2.4.14.0-1.fc38

OpenImageIO is a library for reading and writing images, and a bunch of relat ed classes, utilities, and applications. Main features include: - Extremely simple but powerful ImageInput and ImageOutput APIs for reading a nd writing 2D images that is format agnostic. - Format plugins for TIFF,...

Exploit for Command Injection in Totolink A3700R_Firmware

repo POC: - CVE-2023-46574 - CVE-2023-6612...

CVE-2023-23903

An authenticated administrator can upload a SAML configuration file with the wrong format, with the application not checking the correct file format. Every subsequent application request will return an error. The whole application in rendered unusable until a console intervention...

Format string

An authenticated administrator can upload a SAML configuration file with the wrong format, with the application not checking the correct file format. Every subsequent application request will return an error. The whole application in rendered unusable until a console intervention...

CVE-2023-23903

CVE-2023-23903 affects Nozomi Guardian/CMC (before v22.6.2). An authenticated administrator can upload a SAML configuration file with the wrong format, and the application does not validate the correct file format. This causes a Denial of Service where every subsequent request renders the applica...

CVE-2023-23903 DoS via SAML configuration in Guardian/CMC before 22.6.2

An authenticated administrator can upload a SAML configuration file with the wrong format, with the application not checking the correct file format. Every subsequent application request will return an error. The whole application in rendered unusable until a console intervention...

CVE-2023-23903 DoS via SAML configuration in Guardian/CMC before 22.6.2

An authenticated administrator can upload a SAML configuration file with the wrong format, with the application not checking the correct file format. Every subsequent application request will return an error. The whole application in rendered unusable until a console intervention...

CVE-2023-39182

A vulnerability has been identified in Solid Edge SE2023 All versions V223.0 Update 7. The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted DFT files. This could allow an attacker to execute code in the context of the curre...