3731 matches found
CVE-2022-27531
CVE-2022-27531 affects Autodesk 3ds Max 2022 and 2021, where a maliciously crafted TIFF file can cause a read beyond allocated boundaries during TIFF parsing. This can allow code execution within the current process. The linked records consistently describe the issue as a boundary-read vulnerabil...
CVE-2022-27531
A maliciously crafted TIF file can be forced to read beyond allocated boundaries in Autodesk 3ds Max 2022, and 2021 when parsing the TIF files. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process...
Autodesk 3ds Max 缓冲区错误漏洞
Autodesk 3ds Max is a full-featured, three-dimensional computer graphics software from the US-based Autodesk, Inc. A security vulnerability exists in Autodesk 3ds Max versions 2022 and 2021, which originates from a maliciously crafted TIF file that can be used to write beyond the allocated buffer...
CVE-2022-27532: Out-of-bounds Write
A maliciously crafted TIF file in Autodesk 3ds Max 2022 and 2021 can be used to write beyond the allocated buffer while parsing TIF files. This vulnerability in conjunction with other vulnerabilities could lead to arbitrary code execution...
PT-2022-18471
Name of the Vulnerable Software and Affected Versions Autodesk 3ds Max versions 2021 through 2022 Description A maliciously crafted TIF file can be forced to read beyond allocated boundaries when parsing the TIF files. This issue, in conjunction with other vulnerabilities, could lead to code...
Autodesk 3ds Max 缓冲区错误漏洞
Autodesk 3ds Max is a full-featured, three-dimensional computer graphics software from the American company Autodesk. A security vulnerability exists in Autodesk 3ds Max versions 2022 and 2021, which originates from a maliciously crafted TIF file that may be forced to read beyond allocated...
CVE-2022-27531: Out-of-bounds Read
A maliciously crafted TIF file can be forced to read beyond allocated boundaries in Autodesk 3ds Max 2022, and 2021 when parsing the TIF files. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process...
Max Yi MaxBoard SQL Injection Vulnerability
Max Yi MaxBoard is a CMS Content Management System or web framework from Max Yi, Korea. It helps to make website creation and site management easier and can be easily and conveniently used to build the backend of applications.A SQL injection vulnerability exists in versions prior to Max Yi MaxBoa...
postgresql: memory disclosure in certain queries
A flaw was found in postgresql. A purpose-crafted query can read arbitrary bytes of server memory. In the default configuration, any authenticated database user can complete this attack at will. The attack does not require the ability to create objects. If server settings include...
Upgraded Q -> M from 286 [1654474962848]
Judge has assessed an item in Issue 286 as Medium risk. The relevant finding follows: No min/max fee rate Line Refrences Cally.solL119-121 Description Limits for the fee rate should be set to avoid mistakes when setting the fee. A fee rate that is over 100% could result in the exercise function n...
PT-2022-37875
Уязвимость функции xive get max prio модуля arch/powerpc/sysdev/xive/spapr.c поддержки платформы PowerPC ядра операционной системы Linux связана с ошибками при обновлении счетчика ссылок. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...
PT-2022-17521 · Autodesk · Autodesk 3Ds Max
Name of the Vulnerable Software and Affected Versions: Autodesk 3ds Max versions 2020 through 2022 Description: A stack-based buffer overflow issue may lead to code execution through the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-base...
PT-2022-19475
Name of the Vulnerable Software and Affected Versions Azure RTOS USBX versions prior to 6.1.10 Description The issue arises when an attacker provides a HUB descriptor with bNbPorts set to a value greater than UX MAX TT, which defaults to 8, causing a buffer overflow in the Azure RTOS USBX host...
Microsoft Azure RTOS USBX 安全漏洞
Microsoft Azure RTOS USBX is a high-performance USB host, device, and mobile OTG embedded stack open-sourced by Microsoft in the United States and fully integrated with Azure RTOS ThreadX. A security vulnerability exists in Microsoft Azure RTOS USBX versions prior to 6.1.10. An attacker exploits...
GHSA-WX54-3278-M5G4 Integer overflow in BCrypt class in Spring Security
Spring Security versions 5.5.x prior to 5.5.7, 5.6.x prior to 5.6.4, and earlier unsupported versions contain an integer overflow vulnerability. When using the BCrypt class with the maximum work factor 31, the encoder does not perform any salt rounds, due to an integer overflow error. The default...
CVE-2022-22976
Spring Security versions 5.5.x prior to 5.5.7, 5.6.x prior to 5.6.4, and earlier unsupported versions contain an integer overflow vulnerability. When using the BCrypt class with the maximum work factor 31, the encoder does not perform any salt rounds, due to an integer overflow error. The default...
dotnet: excess memory allocation via HttpClient causes DoS
A flaw was found in dotnet. The Microsoft Security Advisory describes the issue of the Apply MaxResponseHeadersLength limit for trailing headers to address a denial of service via excess memory allocations through the HttpClient...
dotnet: excess memory allocation via HttpClient causes DoS
A flaw was found in dotnet. The Microsoft Security Advisory describes the issue of the Apply MaxResponseHeadersLength limit for trailing headers to address a denial of service via excess memory allocations through the HttpClient...
dotnet: excess memory allocation via HttpClient causes DoS
A flaw was found in dotnet. The Microsoft Security Advisory describes the issue of the Apply MaxResponseHeadersLength limit for trailing headers to address a denial of service via excess memory allocations through the HttpClient...
PT-2022-20195 · Litespeed · Litespeed Quic
Name of the Vulnerable Software and Affected Versions: LiteSpeed QUIC aka LSQUIC versions prior to 3.1.0 Description: The issue arises from the mishandling of MAX TABLE CAPACITY in liblsquic/lsquic qenc hdl.c. No information is provided about the estimated number of potentially affected devices...