CVE-2023-24308

A potential memory vulnerability due to insufficient input validation in PDFXEditCore.x64.dll in PDF-XChange Editor version 9.3 by Tracker Software may allow attackers to execute code when a user opens a crafted PDF file. The issue occurs when handling a large number of objects in a PDF file...

CVE-2023-24308

A potential memory vulnerability due to insufficient input validation in PDFXEditCore.x64.dll in PDF-XChange Editor version 9.3 by Tracker Software may allow attackers to execute code when a user opens a crafted PDF file. The issue occurs when handling a large number of objects in a PDF file...

The vulnerability of the HTTP-protocol implementation (http.sys) in Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the HTTP-protocol implementation http.sys in Windows operating systems exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code via a specially crafted HTTP/3 request from a remote location...

Cisco Access Point 安全漏洞

Cisco Access Point is a network access point device from Cisco, Inc. It provides high-density wireless connectivity for small offices. A security vulnerability exists in Cisco Access Point that stems from insufficient input validation of user-supplied commands...

The vulnerability of the System component of the Android operating system, allowing a hacker to execute arbitrary code

The vulnerability of the System component of the Android operating system exists due to insufficient checking of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the System component of the Android operating system, allowing a hacker to execute arbitrary code

The vulnerability of the System component of the Android operating system exists due to insufficient checking of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Cisco IOS XE SD-WAN Software Command Injection Vulnerability

A vulnerability in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to execute arbitrary commands with elevated privileges. This vulnerability is due to insufficient input validation by the system CLI. An attacker with privileges to run commands could exploit...

The vulnerability of the PCL6 printer driver for Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the PCL6 printer driver for Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Advisory ROSA-SA-2023-2133

Software: java-11-openjdk 11.0.18.0.10-1 OS: rosa-server79 packageevrstring: java-11-openjdk-11.0.18.0.10-1 CVE-ID: CVE-2021-2161 BDU-ID: 2021-02490 CVE-Crit: MEDIUM CVE-DESC: A vulnerability in the Libraries component of the Java SE, Java SE Embedded, and Oracle GraalVM Enterprise Edition softwa...

PT-2023-2323 · Delta Electronics · Infrasuite Device Master

Name of the Vulnerable Software and Affected Versions: Delta Electronics InfraSuite Device Master versions prior to 1.0.5 Description: The issue is related to insufficient input validation, allowing a low-level user to extract files and plaintext credentials of administrator users. This results i...

The vulnerability of the Bluetooth service for Windows operating systems allows a perpetrator to execute arbitrary code.

The vulnerability of the Bluetooth service for Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

PT-2023-1761 · Microsoft · Windows Cryptographic Services +1

Name of the Vulnerable Software and Affected Versions: Windows Cryptographic Services affected versions not specified Description: The vulnerability is related to insufficient input validation in the Windows Cryptographic Services, which can be exploited to execute arbitrary code remotely. This...

PT-2023-1723 · Microsoft · Postscript/Pcl6 Class Printer Driver +1

Name of the Vulnerable Software and Affected Versions: Microsoft PostScript and PCL6 Class Printer Driver affected versions not specified Description: The issue is related to insufficient input validation in the PCL6 Class Printer Driver for Windows operating systems. This allows a remote attacke...

PT-2023-1773 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue exists due to insufficient input validation in the Procedure Call Runtime of Windows operating systems. This allows a remote attacker to execute arbitrary code. Recommendations: A...

PT-2023-1728 · Microsoft · Postscript/Pcl6 Class Printer Driver +1

Name of the Vulnerable Software and Affected Versions: Microsoft PostScript and PCL6 Class Printer Driver affected versions not specified Description: The issue is related to insufficient input validation in the PCL6 Class Printer Driver for Windows operating systems. This allows a remote attacke...

PT-2023-1782 · Microsoft · Office 365 +2

Name of the Vulnerable Software and Affected Versions: Microsoft Excel affected versions not specified Office affected versions not specified Office 365 affected versions not specified Description: The issue is related to insufficient input validation in Microsoft office packages, including Excel...

PT-2023-1762 · Microsoft · Postscript/Pcl6 Class Printer Driver +1

Name of the Vulnerable Software and Affected Versions: Microsoft PostScript and PCL6 Class Printer Driver affected versions not specified Description: The issue is related to insufficient input validation in the PCL6 Printer driver for Windows operating systems. This can be exploited by a remote...

PT-2023-1750 · Microsoft · Windows Media Foundation +1

Name of the Vulnerable Software and Affected Versions: Windows Media Foundation affected versions not specified Description: The issue exists due to insufficient input validation in the Windows Media Foundation component of Windows operating systems. This allows a remote attacker to execute...

The vulnerability of the Windows Secure Channel component of the Windows operating system, which allows a hacker to trigger a service failure

The vulnerability of the Windows Secure Channel component in the Windows operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

PT-2023-2369 · Finixbit · Elf-Parser

Name of the Vulnerable Software and Affected Versions: finixbit elf-parser affected versions not specified Description: The issue is related to insufficient input validation in the elf parser::Elf parser::get segments function of the elf parser.cpp component in the elf-parser program. This can le...