EUVD-2026-14705

Improper Handling of Values vulnerability in No-Chicken Echo-Mate SDK/rv1106-sdk/sysdrv/source/kernel/include/net/netfilter modules. This vulnerability is associated with program files nftables.H‎, nftbyteorder.C‎, nftmeta.C‎. This issue affects Echo-Mate: before V250329...

CVE-2026-4736 Math Issue in No-Chicken/Echo-Mate

Improper Handling of Values vulnerability in No-Chicken Echo-Mate SDK/rv1106-sdk/sysdrv/source/kernel/include/net/netfilter modules. This vulnerability is associated with program files nftables.H‎, nftbyteorder.C‎, nftmeta.C‎. This issue affects Echo-Mate: before V250329...

Directory Traversal

Overview mlflow is a platform to streamline machine learning development, including tracking experiments, packaging code into reproducible runs, and sharing and deploying models. Affected versions of this package are vulnerable to Directory Traversal via the 'findrunroot function in the FileStore...

PDF-XChange Editor 安全漏洞

PDF-XChange Editor is a PDF file viewer software from PDF-XChange, Inc. that runs on Microsoft Windows systems. A security vulnerability exists in PDF-XChange Editor version 10.7.3.401, which originates from an out-of-bounds read in the EMF function, which could lead to the disclosure of sensitiv...

EUVD-2025-179155

Malicious code in emulate-throw-root-meta-file npm...

PYSEC-2024-274

Gradio v4.36.1 was discovered to contain a code injection vulnerability via the component /gradio/componentmeta.py. This vulnerability is triggered via a crafted input. NOTE: the supplier disputes this because the report is about a user attacking himself...

The vulnerability of the is_protected_meta function in the wp-includes/meta.php component of the WordPress content management system, related to improper access control, allows attackers to compromise data integrity and cause service failures.

The vulnerability of the isprotectedmeta function in the wp-includes/meta.php component of the WordPress content management system is related to an incorrect definition of meta-key protection. Exploiting this vulnerability could allow a malicious actor to compromise data integrity and cause servi...

CVE-2015-3649

The CVE-2015-3649 entry concerns the Ruby gem open-uri-cached. Affected component: open-uri-cached Ruby gem; root cause: insecure/predictable temporary file handling in /tmp, where a directory named with openuri- and a meta/marker file is created, allowing a local attacker to place Ruby code and ...

CVE-2015-3649

The open-uri-cached rubygem allows local users to execute arbitrary Ruby code by creating a directory under /tmp containing "openuri-" followed by a crafted UID, and putting Ruby code in said directory once a meta file is created...

PT-2017-6689

Name of the Vulnerable Software and Affected Versions open-uri-cached rubygem affected versions not specified Description The issue allows local users to execute arbitrary Ruby code. This is achieved by creating a directory under /tmp with a specific name, including "openuri-" followed by a craft...

CVE-2017-3052

Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have a memory address leak vulnerability in the image conversion engine, related to parsing of EMF - enhanced meta file format...

CVE-2017-3052

Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have a memory address leak vulnerability in the image conversion engine, related to parsing of EMF - enhanced meta file format...

CVE-2017-3052

Technical details for CVE-2017-3052 are not provided in the supplied documents. Monitor for updates from official advisories.

LibreOffice < 3.5.7 / 3.6.1 Multiple Denial of Service Vulnerabilities

A version of LibreOffice prior to 3.5.7 / 3.6.1 is installed on the remote Windows host. It is, therefore, reportedly affected by multiple denial of service vulnerabilities in various import filters: - Excel .xls - Windows Meta File .wmf - Open Document Format .odg / .odt This could allow a remot...

LibreOffice < 3.5.7 / 3.6.1 Multiple Denial of Service Vulnerabilities (Mac OS X)

A version of LibreOffice prior to 3.5.7 / 3.6.1 is installed on the remote Mac OS X host. It is, therefore, reportedly affected by multiple denial of service vulnerabilities in various import filters: - Excel .xls - Windows Meta File .wmf - Open Document Format .odg / .odt This could allow a remo...

LibreOffice Import Files Denial of Service Vulnerabilities - Mac OS X

LibreOffice is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ZDI-12-034 : Microsoft Windows Media Player ASX Meta-File Parsing Remote Code Execution Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ZDI-12-034 : Microsoft Windows Media Player ASX Meta-File Parsing Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-12-034 February 22, 2012 - -- CVE ID: CVE-2012-0150 - -- CVSS: 7.5, AV:N/AC:L/Au:N/C:P/I:P/A:P - --...

Microsoft Windows Media Player ASX Meta-File Parsing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Windows Media Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within t...

gdi32-dos.txt

/ MS07-046GDI32.dll Integer overflow DOS Proof Of Concept Code by Hong Gil-Dong & Chun Woo-Chi Yang yeon?1542, Korea "I shall keep clenching my left fist unitl i see the real tao". This POC is only for test. If an application read a malformed wmf file like this POC, the application will be crashe...

brush.txt

Description: yet another 'windows meta file' WMF denial of service exploit. System affected: + Windows XP SP2, + Windows 2003 SP1, + Windows XP SP1, + Windows XP + Windows 2003 Tech info: page fault in gdi32!CreateBrushIndirect because invalid pointer access. Incorrect short to void sign extensio...