24369 matches found
CVE-2022-35171
When a user opens manipulated JPEG 2000 .jp2, jp2k.x3d files received from untrusted sources in SAP 3D Visual Enterprise Viewer, the application crashes and becomes temporarily unavailable to the user until restart of the application. The file format details along with their CVE relevant...
CVE-2022-35171
When a user opens manipulated JPEG 2000 .jp2, jp2k.x3d files received from untrusted sources in SAP 3D Visual Enterprise Viewer, the application crashes and becomes temporarily unavailable to the user until restart of the application. The file format details along with their CVE relevant...
Siemens Simcenter Femap和Siemens Parasolid 缓冲区错误漏洞
Simcenter Femap is an advanced simulation application for creating, editing, and inspecting finite element models of complex products or systems. parasolid is a 3D geometric modeling tool that supports a variety of techniques, including solid modeling, direct editing, and freeform/sheet modeling...
CVE-2022-35411
rpc.py through 0.6.0 allows Remote Code Execution because an unpickle occurs when the "serializer: pickle" HTTP header is sent. In other words, although JSON not Pickle is the default data format, an unauthenticated client can cause the data to be processed with unpickle...
Remote code execution
rpc.py through 0.6.0 allows Remote Code Execution because an unpickle occurs when the "serializer: pickle" HTTP header is sent. In other words, although JSON not Pickle is the default data format, an unauthenticated client can cause the data to be processed with unpickle...
Oracle Linux 9 : libinput (ELSA-2022-5257)
The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-5257 advisory. 1.19.3-2 - CVE-2022-1215: fix a format string vulnerability 2076816 Tenable has extracted the preceding description block directly from the Oracle Linux securit...
CVE-2021-3697
A crafted JPEG image may lead the JPEG reader to underflow its data pointer, allowing user-controlled data to be written in heap. To a successful to be performed the attacker needs to perform some triage over the heap layout and craft an image with a malicious format and payload. This vulnerabili...
CVE-2021-3697
A crafted JPEG image may lead the JPEG reader to underflow its data pointer, allowing user-controlled data to be written in heap. To a successful to be performed the attacker needs to perform some triage over the heap layout and craft an image with a malicious format and payload. This vulnerabili...
Qualcomm 芯片缓冲区错误漏洞
A Qualcomm chip is a chip from Qualcomm Incorporated USA. A way to miniaturize circuitry including primarily semiconductor devices, but also passive components, etc., and is often fabricated on the surface of semiconductor wafers. A buffer error vulnerability exists in Qualcomm that originates fr...
Fedora: Security Advisory for golang-github-snappy (FEDORA-2022-fae3ecee19)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
The vulnerability of Adobe Reader and Adobe Acrobat PDF viewer/editor programs, related to the execution of operations beyond the buffer in memory, allows attackers to execute arbitrary code or cause service interruptions.
The vulnerability of PDF viewing and editing programs like Adobe Reader and Adobe Acrobat lies in the execution of operations beyond the buffer limits in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure by using a specially create...
Fedora: Security Advisory for golang-github-pelletier-toml-2 (FEDORA-2022-fae3ecee19)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
The vulnerability of the Authplay.dll library (AuthPlayLib.bundle) in the Flash Player software, as well as in programs for viewing and editing PDF files such as Adobe Reader and Adobe Acrobat, allows a perpetrator to execute arbitrary code or cause service interruptions.
The vulnerability of the Authplay.dll library AuthPlayLib.bundle in the Flash Player software, as well as in programs for viewing and editing PDF files like Adobe Reader and Adobe Acrobat, arises due to the execution of operations outside the buffer in memory when incompatible data types are used...
[SECURITY] Fedora 36 Update: golang-github-snappy-0.0.2-6.fc36
Implementation of the Snappy compression format for Go...
[SECURITY] Fedora 36 Update: golang-github-pelletier-toml-2-2.0.0~beta.8-4.fc36
Go library for the TOML file format...
The vulnerability of the Microsoft Office suite, related to pointer offsets, allows a perpetrator to execute arbitrary code or gain full control over the application.
The vulnerability of the Microsoft Office package is related to a pointer offset issue during the processing of the cbHdrData element in the FEATHEADER field of BIFF format files. Exploiting this vulnerability allows an attacker to execute arbitrary code or gain full control over the application...
libarchive: an out-of-bounds read via the component zipx_lzma_alone_init
An out-of-bounds read flaw was found in libarchive. This flaw allows an attacker who can supply a specially crafted zip file to libarchive to cause an out-of-bounds read in programs linked with libarchive, using the LZMA zip functionality. The consequences depend on the specific program linked wi...
Libmobi 代码问题漏洞
Libmobi is a C library . It is used to process documents in the Mobipocket/Kindle MOBI e-book format. A code issue vulnerability exists in Libmobi versions prior to 0.11, which stems from NULL pointer dereferencing...
RHEL 8 : libinput (RHSA-2022:5331)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:5331 advisory. libinput is a library that handles input devices for display servers and other applications that need to directly deal with input devices. Security...
