IBM Sterling B2B Integrator SQL Injection Vulnerability (CNVD-2020-59703)

IBM Sterling B2B Integrator is a suite of software from IBM USA that integrates critical B2B processes, transactions and relationships. The software supports secure integration of complex B2B processes with diverse partner communities. IBM Sterling B2B Integrator suffers from a SQL injection...

Security Bulletin: SQL Injection Vulnerability Affects the Graphic Process Modeler in IBM Sterling B2B Integrator (CVE-2019-4680)

Summary IBM Sterling B2B Integrator has addressed SQL injection security vulnerability in the Graphic Process Modeler. Vulnerability Details CVEID: CVE-2019-4680 DESCRIPTION: IBM Sterling B2B Integrator Standard Edition is vulnerable to SQL injection. A remote attacker could send specially-crafte...

Information leakage vulnerability in Zijinqiao monitoring configuration software

Zijinqiao monitoring and configuration software is a professional Zijinqiao monitoring and configuration software, which adopts C/S architecture and has database processing technology and graphic system. There is an information disclosure vulnerability in Zijinqiao Monitoring and Configuration...

Microsoft Windows and Windows Server Remote Code Execution Vulnerability (CNVD-2021-71412)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation, an operating system for personal devices, and Microsoft Windows Server, a server operating system. A remote code execution vulnerability exists in Microsoft Windows and Windows Server. The vulnerability ste...

The vulnerability of the graphic editor application for Adobe Creative Cloud Desktop Application, related to the disclosure of confidential data, allows a perpetrator to gain unauthorized access to information.

The vulnerability of the Adobe Creative Cloud Desktop Application relates to the disclosure of confidential data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to information...

Heap Override Write Vulnerability in Light and Shadow Magic

Light Magic Hand is a graphic image processing software. A heap out-of-bounds write vulnerability exists in LightShadowMagician, which can be exploited by an attacker to cause a denial of service on the server...

CVE-2019-0155

A flaw was found in the Intel graphics hardware GPU, where a local attacker with the ability to issue commands to the GPU could inadvertently lead to memory corruption and possible privilege escalation. The attacker could use the GPU blitter to perform privilege MMIO operations, not limited to th...

Description of the security update for Access 2013: August 11, 2020

Description of the security update for Access 2013: August 11, 2020 Summary This security update resolves a remote code execution vulnerability that exists in Microsoft Office that could be exploited if a user opens a file that contains a malformed graphics image or inserts a malformed graphics...

Multiple Mitsubishi Electric Products Resource Management Error Vulnerability (CNVD-2020-46798)

Mitsubishi Electric GT27 and others are a GOT2000 series graphic operation terminal from Mitsubishi Electric Japan. A resource management error vulnerability exists in CoreOS Y and prior versions in the Mitsubishi Electric GT27, GT25, and GT23 GOT2000 series, which can be exploited by an attacker...

Multiple Mitsubishi Electric Products Inject Vulnerabilities

Mitsubishi Electric GT27 and others are a GOT2000 series graphic operation terminal from Mitsubishi Electric Japan. An injection vulnerability exists in CoreOS Y and prior versions in the Mitsubishi Electric GT27, GT25, and GT23 GOT2000 series, which can be exploited by an attacker to cause a...

CVE-2020-12802

LibreOffice has a 'stealth mode' in which only documents from locations deemed 'trusted' are allowed to retrieve remote resources. This mode is not the default mode, but can be enabled by users who want to disable LibreOffice's ability to include remote resources within a document. A flaw existed...

CVE-2020-12802

LibreOffice has a 'stealth mode' in which only documents from locations deemed 'trusted' are allowed to retrieve remote resources. This mode is not the default mode, but can be enabled by users who want to disable LibreOffice's ability to include remote resources within a document. A flaw existed...

Design/Logic Flaw

LibreOffice has a 'stealth mode' in which only documents from locations deemed 'trusted' are allowed to retrieve remote resources. This mode is not the default mode, but can be enabled by users who want to disable LibreOffice's ability to include remote resources within a document. A flaw existed...

CVE-2020-12802

CVE-2020-12802 concerns The Document Foundation LibreOffice. A vulnerability in LibreOffice's “stealth mode” (which restricts remote resource loading to trusted locations) fails to apply to remote resources loaded from docx documents in versions before 6.4.4. As a result, remote graphic links cou...

CVE-2020-12802 remote graphics contained in docx format retrieved in 'stealth mode'

LibreOffice has a 'stealth mode' in which only documents from locations deemed 'trusted' are allowed to retrieve remote resources. This mode is not the default mode, but can be enabled by users who want to disable LibreOffice's ability to include remote resources within a document. A flaw existed...

Notorious dark web child abuser arrested after int’l operation

By Deeba Ahmed Authorities have arrested a dark web child abuser known for uploading highly graphic content on several marketplaces and online forums. This is a post from HackRead.com Read the original post: Notorious dark web child abuser arrested after int'l operation...

XSS Vulnerability in the MMS app

Meishu is a graphic creation and sharing application APP, developed by Nanjing Blue Whaler Network Science and Technology Co, Ltd, with products covering web and mobile ends. Meishu app has an XSS vulnerability, which can be exploited by an attacker to obtain the user's cookie information...

advancecomp: integer overflow in png_compress in pngex.cc

In AdvanceCOMP 2.1, pngcompress in pngex.cc in advpng has an integer overflow upon encountering an invalid PNG size, which results in an attempted memcpy to write into a buffer that is too small. There is also a heap-based buffer over-read...

qt5-qtbase: QImage allocation failure in qgifhandler

An issue was discovered in Qt before 5.11.3. A malformed GIF image causes a NULL pointer dereference in QGifHandler resulting in a segmentation fault...

The vulnerability of the Adobe Photoshop graphic editor is related to the issue of executing code outside the buffer boundaries in memory, allowing attackers to execute arbitrary code.

The vulnerability of the Adobe Photoshop graphic editor is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code on the target system by opening the malicious file...