UBUNTU-CVE-2021-26221

The ezxmlnew function in ezXML 0.8.6 and earlier is vulnerable to OOB write when opening XML file after exhausting the memory pool...

ezXML 缓冲区错误漏洞

ezXML is a C library for parsing XML documents . An out-of-bounds write vulnerability exists in the ezxmltoxml function in ezXML 0.8.6 and earlier. An attacker can exploit this vulnerability to cause an out-of-bounds write when opening an XML file after the memory pool has been exhausted...

Huawei EulerOS: Security Advisory for perl-DBI (EulerOS-SA-2020-2501)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security update for perl-DBI (moderate)

openSUSE Security Update: Security update for perl-DBI Announcement ID: openSUSE-SU-2020:2051-1 Rating: moderate References: 1176492 Cross-References: CVE-2014-10401 CVE-2014-10402 Affected Products: openSUSE Leap 15.1 An update that fixes two vulnerabilities is now available. Description: This...

CVE-2014-10402

An issue was discovered in the DBI module through 1.643 for Perl. DBD::File drivers can open files from folders other than those specifically passed via the fdir attribute in the data source name DSN. NOTE: this issue exists because of an incomplete fix for CVE-2014-10401...

CVE-2014-10402

An issue was discovered in the DBI module through 1.643 for Perl. DBD::File drivers can open files from folders other than those specifically passed via the fdir attribute in the data source name DSN. NOTE: this issue exists because of an incomplete fix for CVE-2014-10401...

The vulnerability of Visual Studio Code’s source editor lies in its error handling after a project is opened, allowing an attacker to execute arbitrary code.

The vulnerability of Visual Studio Code’s source editor is related to a error in variable handling after a project is opened. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely...

PT-2020-3658 · Microsoft · Visual Studio Code

Name of the Vulnerable Software and Affected Versions: Visual Studio Code affected versions not specified Description: A remote code execution issue exists when Visual Studio Code processes environment variables after opening a project. An attacker who successfully exploits this could run arbitra...

The vulnerability of the Microsoft Visual Studio Code ESLint Extension lies in the insufficient data validation when opening a project, allowing a malicious actor to execute arbitrary code.

The vulnerability of the Microsoft Visual Studio Code ESLint Extension lies in the insufficient data validation when opening a project. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

PT-2020-3300 · Microsoft · Visual Studio Code Eslint Extension

Name of the Vulnerable Software and Affected Versions: ESLint extension for Visual Studio Code affected versions not specified Description: A remote code execution issue exists in the ESLint extension for Visual Studio Code. This occurs when the extension validates source code after a project is...

CVE-2020-7496

A CWE-88: Argument Injection or Modification vulnerability exists in EcoStruxure Operator Terminal Expert 3.1 Service Pack 1 and prior formerly known as Vijeo XDwhich could cause unauthorized write access when opening the project file...

MDX managed apps cannot open links properly so that apps which are not managed launch automatically

Problem description: MDX app policies are configured but the app that is not managed does not launch automatically as expected. Example use case: iOS has the Booking.com app installed from the Public App Store. The device also has Secure Web and Secure Mail installed. The Secure apps are managed ...

MS15-013: Description of the security update for Microsoft Office 2010: February 10, 2015

MS15-013: Description of the security update for Microsoft Office 2010: February 10, 2015 Introduction This security update resolves vulnerabilities that could allow security feature bypass if a specially crafted file is opened in an affected edition of Microsoft Office. Summary Microsoft has...

nbdkit security and bug fix update

1.8.0-3 - Fix for CVE-2019-14850 denial of service due to premature opening of back-end connection resolves: rhbz1757261 1.8.0-2 - Explicitly disable nbdkit-ext2-plugin in configure resolves: rhbz1724242...

RHEL 7 : nbdkit (RHSA-2020:1167)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:1167 advisory. Network Block Device NBD is a protocol for accessing hard disks and other disk-like devices over the network. The nbdkit toolkit utilizes NBD to crea...

The vulnerability of the Adobe Photoshop graphic editor is related to the issue of executing code outside the buffer boundaries in memory, allowing attackers to execute arbitrary code.

The vulnerability of the Adobe Photoshop graphic editor is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code on the target system by opening the malicious file...

How to Watch Donald Trump’s Impeachment Trial

The Senate gets set to debate the rules for Trump’s trial today. Tomorrow, the opening arguments begin...

DEBIAN-CVE-2012-5639

LibreOffice and OpenOffice automatically open embedded content...

CVE-2012-5639

LibreOffice and OpenOffice automatically open embedded content...

PT-2019-4245 · Apache +2 · Openoffice +2

Name of the Vulnerable Software and Affected Versions: LibreOffice affected versions not specified OpenOffice affected versions not specified Description: The issue is related to LibreOffice and OpenOffice automatically opening embedded content. This can be exploited by a remote attacker to impac...