SonicWall SMA100 SSL-VPN Affected By Multiple Vulnerabilities

1 Path traversal vulnerability – attributed to publicly known Apache HTTP Server vulnerability CVE-2024-38475Improper escaping of output in modrewrite in Apache HTTP Server 2.4.59 and earlier allows an attacker to map URLs to file system locations that are permitted to be served by the server. CV...

RHEL 8 : tigervnc (RHSA-2024:9819)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:9819 advisory. Virtual Network Computing VNC is a remote display system which allows users to view a computing desktop environment not only on the machine where it ...

RHEL 9 : tigervnc (RHSA-2024:9816)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:9816 advisory. Virtual Network Computing VNC is a remote display system which allows users to view a computing desktop environment not only on the machine where it ...

CVE-2024-53901

The Imager package before 1.025 for Perl has a heap-based buffer overflow leading to denial of service, or possibly unspecified other impact, when the trim method is called on a crafted input image...

RHEL 8 : tigervnc (RHSA-2024:9818)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:9818 advisory. Virtual Network Computing VNC is a remote display system which allows users to view a computing desktop environment not only on the machine where it ...

CVE-2024-53901

CVE-2024-53901 affects the Imager Perl package prior to 1.025. The issue is a heap-based buffer overflow in the trim() method when processing a crafted input image, leading to denial of service (and possibly unspecified other impact). Conditions: local attack vector, requires user interaction. Re...

RHEL 8 : tigervnc (RHSA-2024:9820)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:9820 advisory. Virtual Network Computing VNC is a remote display system which allows users to view a computing desktop environment not only on the machine where it ...

RHEL 7 : tigervnc (RHSA-2024:9901)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:9901 advisory. Virtual Network Computing VNC is a remote display system which allows users to view a computing desktop environment not only on the machine where it ...

CVE-2024-11576

Luxion KeyShot 3DS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Luxion KeyShot. User interaction is required to exploit this vulnerability in that the target must visi...

CVE-2024-9734

CVE-2024-9734 affects Tungsten Automation Power PDF. The issue is a heap-based buffer overflow in PDF file parsing caused by insufficient validation of the length of user-supplied data before copying into a fixed-length heap buffer. This can allow remote code execution in the context of the curre...

CVE-2024-9734 Tungsten Automation Power PDF PDF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

Tungsten Automation Power PDF PDF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tungsten Automation Power PDF. User interaction is required to exploit this vulnerabilit...

CVE-2024-9734 Tungsten Automation Power PDF PDF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

Tungsten Automation Power PDF PDF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tungsten Automation Power PDF. User interaction is required to exploit this vulnerabilit...

CVE-2024-9742 Tungsten Automation Power PDF PSD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

Tungsten Automation Power PDF PSD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tungsten Automation Power PDF. User interaction is required to exploit this vulnerabilit...

CVE-2024-9743

Power PDF by Tungsten Automation is affected by a heap-based buffer overflow in PDF file parsing due to improper validation of user-supplied data length before copying into a fixed-length heap buffer. This can enable remote code execution when a user opens a malicious PDF or visits a malicious pa...

CVE-2024-9743 Tungsten Automation Power PDF PDF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

Tungsten Automation Power PDF PDF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tungsten Automation Power PDF. User interaction is required to exploit this vulnerabilit...

CVE-2024-11516 IrfanView JPM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

IrfanView JPM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a...

CVE-2024-11514

CVE-2024-11514 – IrfanView : The issue stems from parsing ECW files in IrfanView, where the length of user-supplied data is not properly validated before copying to a heap-based buffer, causing a heap-based buffer overflow. This can lead to arbitrary code execution in the attacker’s context. Expl...

CVE-2024-11511

CVE-2024-11511 affects IrfanView via the XCF Plugin . The vulnerability is a heap-based buffer overflow in the parsing of XCF files, caused by the lack of proper validation of the length of user-supplied data before copying to a heap buffer. This can allow remote code execution in the context of ...

CVE-2024-11511 IrfanView XCF Plugin XCF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

IrfanView XCF Plugin XCF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must vis...

CVE-2024-11580

CVE-2024-11580 : Luxion KeyShot is affected by a heap-based buffer overflow in the parsing of ABC files. The flaw arises from insufficient validation of the length of user-supplied data before copying to a heap buffer, enabling remote code execution. Exploitation requires user interaction (the ta...