1243 matches found
ImageMagick Digital Error Vulnerability (CNVD-2021-10260)
ImageMagick is a software for creating, editing, and composing images that can read, convert, and write images in many formats. A numeric error vulnerability exists in MagickCore/gem-private.h in versions of ImageMagick prior to 7.0.9-0. An attacker can exploit this vulnerability by submitting a...
ImageMagick Digital Error Vulnerability (CNVD-2021-10255)
ImageMagick is a software for creating, editing, and composing images that can read, convert, and write images in many formats. A numeric error vulnerability exists in MagickCore/segment.c in versions of ImageMagick prior to 7.0.9-0. An attacker can exploit this vulnerability by submitting a...
ImageMagick Digital Error Vulnerability (CNVD-2021-10265)
ImageMagick is a software for creating, editing, and composing images that can read, convert, and write images in many formats. A numeric error vulnerability exists in MagickCore/resize.c in versions of ImageMagick prior to 7.0.8-68. An attacker could exploit this vulnerability via a specially...
ImageMagick Studio ImageMagick 数字错误漏洞
ImageMagick is a software for creating, editing, and composing images that can read, convert, and write images in many formats. A numeric error vulnerability exists in MagickCore/gem-private.h in versions of ImageMagick prior to 7.0.9-0. An attacker can exploit this vulnerability by submitting a...
ImageMagick Studio ImageMagick 数字错误漏洞
ImageMagick is a software for creating, editing, and composing images that can read, convert, and write images in many formats. A numeric error vulnerability exists in MagickCore/segment.c in versions of ImageMagick prior to 7.0.9-0. An attacker can exploit this vulnerability by submitting a...
ImageMagick Studio ImageMagick 数字错误漏洞
ImageMagick is a software for creating, editing, and compositing images that can read, convert, and write images in many formats. A numeric error vulnerability exists in GammaImage in /MagickCore/enhance.c in versions of ImageMagick prior to 7.0.8-68. An attacker could cause a denial of service b...
ImageMagick Studio ImageMagick 数字错误漏洞
ImageMagick is a software for creating, editing, and composing images that can read, convert, and write images in many formats. A numeric error vulnerability exists in MagickCore/resize.c in versions of ImageMagick prior to 7.0.8-68. An attacker could exploit this vulnerability via a specially...
Mhart Stringstream Buffer Error Vulnerability
Mhart Stringstream is a JS-based code library for converting Stream data streams directly to string type by Mhart individual developers. A buffer error vulnerability exists in the Node.js stringstream module prior to version 0.0.6, which stems from susceptibility to out-of-bounds reads, as an...
Microsoft Windows: Get RSOP_SecuritySettings
The RSOPSecuritySettings WMI class is the abstract class from which other RSoP security classes derive. Instances of this class are not logged. This class was added for Windows XP. The RSOPSecuritySettingNumeric WMI class represents the numeric security setting for an account policy. Account...
ICSA-20-315-01_OSIsoft PI Interface for OPC XML-DA
1. EXECUTIVE SUMMARY CVSS v3 8.1 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: OSIsoft Equipment: PI Interface Vulnerability: Numeric Errors 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker-controlled OPC XML-DA Server to respond with a...
Exploit for Incorrect Conversion between Numeric Types in Linux Linux_Kernel
CVE...
Medium: edk2
Issue Overview: Insufficient control flow management in BIOS firmware for 8th, 9th, 10th Generation IntelR CoreTM, IntelR CeleronR Processor 4000 & 5000 Series Processors may allow an authenticated user to potentially enable denial of service via adjacent access. CVE-2019-14558 Memory leak in...
The vulnerability of the FTS3 extension of the SQLite database management system allows a hacker to execute arbitrary code.
The vulnerability of the FTS3 extension of the SQLite database management system arises from a numerical overflow condition. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...
systemd through v245 mishandles numerical usernames such as ones composed of decimal digits or 0x followed by hex digits as demonstrated by use of root privileges when privileges of the 0x0 user account were intended. NOTE: this issue exists because of an incomplete fix for CVE-2017-1000082.
...
Lua Numeric Error Vulnerability
Lua is a lightweight, multi-paradigm programming language. A numeric error vulnerability exists in getlocal and setlocal in ldebug.c in Lua 5.4.0. No detailed vulnerability details are provided at this time...
Artifex Software Ghostscript Numeric Error Vulnerability (CNVD-2020-46251)
Artifex Software Ghostscript is an open source parser for Postscript a page description language and programming language used in the electronics industry and desktop publishing from Artifex Software, Inc. The product can display Postscript files as well as print Postscript files on non-PostScrip...
Artifex Software Ghostscript Numeric Error Vulnerability
Artifex Software Ghostscript is an open source parser for Postscript a page description language and programming language used in the electronics industry and desktop publishing from Artifex Software, Inc. The product can display Postscript files as well as print Postscript files on non-PostScrip...
Secomea GateManager Numeric Error Vulnerability
Secomea GateManager is a remote access server product from Secomea, Denmark. A numeric error vulnerability exists in Secomea GateManager versions prior to 9.2c. The vulnerability arises from a network system or product not properly calculating or converting generated numbers. A remote attacker...
Nextcloud: Access control missing while viewing the attachments in the "All boards"
The vulnerability lies in the "view attachment" of the tasks . When a user uploads the file to the Task, the attachment is given a numeric number and is increased +1 on further uploads. It is easy for any user to view and download all the files uploaded to the tasks by any user. The access is not...