The vulnerability of the FileHandler component in the Open Asset Import Library (Assimp) library allows a hacker to execute arbitrary code.

The vulnerability of the FileHandler component in the Open Asset Import Library Assimp library is related to buffer overflow attacks. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...

i-librarian 安全漏洞

i-librarian is an online service from Martin Kucej Personal Developer that will organize your PDF files and office document collections. A security vulnerability exists in i-librarian v.5.11.0 and earlier versions, which stems from the presence of a cross-site scripting vulnerability that allows ...

PT-2024-28880 · Martin Kucej · I-Librarian

Name of the Vulnerable Software and Affected Versions: Martin Kucej i-librarian versions 5.11.0 and before Description: The issue allows a local attacker to execute arbitrary code via the search function in the import component. This is a Cross Site Scripting vulnerability. Recommendations: For...

CVE-2024-40500

CVE-2024-40500 affects Martin Kucej i-librarian versions 5.11.0 and earlier. Description: a Cross-Site Scripting vulnerability in the import component’s search function can allow a local attacker to execute arbitrary code. The issue is due to improper handling in the search/import flow. Impact is...

CVE-2024-3279 Improper Access Control in mintplex-labs/anything-llm

An improper access control vulnerability exists in the mintplex-labs/anything-llm application, specifically within the import endpoint. This vulnerability allows an anonymous attacker, without an account in the application, to import their own database file, leading to the deletion or spoofing of...

CVE-2024-37382

An issue discovered in import host feature in Ab Initio Metadata Hub and Authorization Gateway before 4.3.1.1 allows attackers to run arbitrary code via crafted modification of server configuration...

CVE-2024-37382

An issue discovered in import host feature in Ab Initio Metadata Hub and Authorization Gateway before 4.3.1.1 allows attackers to run arbitrary code via crafted modification of server configuration...

org.bouncycastle: Importing an EC certificate with crafted F2m parameters may lead to Denial of Service

A vulnerability was found in Bouncy Castle. An issue was discovered in ECCurve.java and ECCurve.cs in Bouncy Castle Java BC Java. Importing an EC certificate with crafted F2m parameters can lead to excessive CPU consumption during the evaluation of the curve parameters...

org.bouncycastle: Importing an EC certificate with crafted F2m parameters may lead to Denial of Service

A vulnerability was found in Bouncy Castle. An issue was discovered in ECCurve.java and ECCurve.cs in Bouncy Castle Java BC Java. Importing an EC certificate with crafted F2m parameters can lead to excessive CPU consumption during the evaluation of the curve parameters...

kernel: SUNRPC: fix a memleak in gss_import_v2_context

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: fix a memleak in gssimportv2context The ctx-mechused.data allocated by kmemdup is not freed in neither gssimportv2context nor it only caller gsskrb5importseccontext, which frees ctx on error. Thus, this patch reform the...

kernel: SUNRPC: fix a memleak in gss_import_v2_context

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: fix a memleak in gssimportv2context The ctx-mechused.data allocated by kmemdup is not freed in neither gssimportv2context nor it only caller gsskrb5importseccontext, which frees ctx on error. Thus, this patch reform the...

PT-2024-27511 · Ab Initio · Ab Initio Authorization Gateway +1

Name of the Vulnerable Software and Affected Versions: Ab Initio Metadata Hub and Authorization Gateway versions prior to 4.3.1.1 Description: An issue in the import host feature allows attackers to run arbitrary code via crafted modification of server configuration. Recommendations: For versions...

WordPress Import and export users and customers plugin <= 1.26.8 - Sensitive Information via Imported File vulnerability

Sensitive Information via Imported File vulnerability discovered by emad Patchstack Alliance in WordPress Plugin Import and export users and customers versions = 1.26.8...

WordPress Import and export users and customers Plugin <= 1.26.8 is vulnerable to Sensitive Data Exposure

Software Import and export users and customers Type Plugin Vulnerable versions = 1.26.8 Fixed in 1.26.9 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2024-38787 Patch priority Low CVSS severity Low 7.5 Developer Codection PSID a113b5766398 Credits emad...

ROS-20240807-01

Vulnerability in the implementation of ColladaParser::ExtractDataObjectFromChannel function of the Open Asset Import Library Assimp 3D models Open Asset Import Library Assimp is related to memory usage after release. Exploitation of the vulnerability could allow an attacker acting remotely to gai...

SUSE-SU-2024:2786-1 Security update for java-1_8_0-openjdk

This update for java-180-openjdk fixes the following issues: Update to version jdk8u422 icedtea-3.32.0: Security fixes + JDK-8314794, CVE-2024-21131, bsc1228046: Improve UTF8 String supports + JDK-8319859, CVE-2024-21138, bsc1228047: Better symbol storage + JDK-8320097: Improve Image...

SUSE-SU-2024:2766-1 Security update for java-1_8_0-openjdk

This update for java-180-openjdk fixes the following issues: Update to version jdk8u422 icedtea-3.32.0 Security fixes + JDK-8314794, CVE-2024-21131, bsc1228046: Improve UTF8 String supports + JDK-8319859, CVE-2024-21138, bsc1228047: Better symbol storage + JDK-8320097: Improve Image transformatio...

CVE-2024-23355

CVE-2024-23355 describes memory corruption in the keymaster subsystem when a shared key is imported. Public references point to Qualcomm/Android ecosystems (Keymaster) with a local attack vector, low privileges required and no user interaction, but no concrete fix version is specified in the prov...

PT-2024-19834 · Keymaster · Keymaster

Name of the Vulnerable Software and Affected Versions: Keymaster affected versions not specified Description: The issue is related to memory corruption that occurs when a keymaster operation imports a shared key. Recommendations: At the moment, there is no information about a newer version that...

PT-2024-29569 · Xibo · Xibo

Name of the Vulnerable Software and Affected Versions: Xibo versions prior to 3.3.12 Xibo versions prior to 4.0.14 Description: A SQL injection issue was discovered in the API routes of Xibo, a content management system, specifically in the components responsible for filtering DataSets. This allo...