290 matches found
CVE-2024-8827 PDF-XChange Editor PPM File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
PDF-XChange Editor PPM File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must vis...
PDF-XChange Editor 缓冲区错误漏洞
PDF-XChange Editor is a PDF editor software and PDF reader. PDF-XChange Editor PPM file parsing has an out-of-bounds write remote code execution vulnerability that can be exploited by an attacker to execute code in the context of the current process...
CVE-2024-8827: Out-of-bounds Write
PDF-XChange Editor PPM File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must vis...
PDF-XChange Editor PPM File Parsing Out-of-Bounds Write Remote Code Execution Vulnerability
PDF-XChange Editor is a PDF editor software and PDF reader. PDF-XChange Editor PPM file parsing has an out-of-bounds write remote code execution vulnerability that can be exploited by an attacker to execute code in the context of the current process...
PDF-XChange Editor PPM File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...
Apple macOS PPM Image Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS. Interaction with the ImageIO framework is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the ImageIO...
PT-2024-6432 · Pdf Xchange · Pdf-Xchange Editor
Name of the Vulnerable Software and Affected Versions: PDF-XChange Editor affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this, where the target must...
CentOS 9 : libjpeg-turbo-2.0.90-6.el9
The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the libjpeg- turbo-2.0.90-6.el9 build changelog. - The PPM reader in libjpeg-turbo through 2.0.90 mishandles use of tjLoadImage for loading a 16-bit binary PPM file into a grayscale buffer...
ppm-technology.com Improper Access Control vulnerability OBB-3807308
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2023-37790
Jaspersoft Clarity PPM version 14.3.0.298 was discovered to contain an arbitrary file upload vulnerability via the Profile Picture Upload function...
CVE-2023-37790
Jaspersoft Clarity PPM version 14.3.0.298 was discovered to contain an arbitrary file upload vulnerability via the Profile Picture Upload function...
Design/Logic Flaw
Jaspersoft Clarity PPM version 14.3.0.298 was discovered to contain an arbitrary file upload vulnerability via the Profile Picture Upload function...
NewStart CGSL MAIN 6.06 : libjpeg-turbo Multiple Vulnerabilities (NS-SA-2023-0130)
The remote NewStart CGSL host, running version MAIN 6.06, has libjpeg-turbo packages installed that are affected by multiple vulnerabilities: - Libjpeg-turbo versions 2.0.91 and 2.0.90 is vulnerable to a denial of service vulnerability caused by a divide by zero when processing a crafted GIF imag...
PT-2023-26110 · Jaspersoft · Jaspersoft Clarity Ppm
Name of the Vulnerable Software and Affected Versions: Jaspersoft Clarity PPM version 14.3.0.298 Description: The issue is related to an arbitrary file upload vulnerability via the Profile Picture Upload function. This allows for potential malicious file uploads. Recommendations: For Jaspersoft...
CVE-2023-37790
Jaspersoft Clarity PPM version 14.3.0.298 was discovered to contain an arbitrary file upload vulnerability via the Profile Picture Upload function...
CVE-2023-37790: Improper Neutralization of Input During Web Page Generation
Jaspersoft Clarity PPM version 14.3.0.298 was discovered to contain an arbitrary file upload vulnerability via the Profile Picture Upload function...
CVE-2023-37790
CVE-2023-37790 affects Jaspersoft Clarity PPM 14.3.0.298. Affected component: Profile Picture Upload; vulnerability is an arbitrary file upload vulnerability. No exploitation details are provided in the initial/connected docs. A remediation note from PT-Security recommends disabling the Profile P...
CVE-2023-37790
Jaspersoft Clarity PPM version 14.3.0.298 was discovered to contain an arbitrary file upload vulnerability via the Profile Picture Upload function...
Oracle Linux 7 : qt (ELSA-2020-1172)
The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-1172 advisory. 1:4.8.7-8 - Fix QImage allocation failure in qgifhandler Resolves: bz1667863 - Fix QTgaFile CPU exhaustion Resolves: bz1667879 - Fix QBmpHandler...
Amazon Linux 2 : libjpeg-turbo (ALAS-2023-2214)
The version of libjpeg-turbo installed on the remote host is prior to 2.0.90-2. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-2214 advisory. The PPM reader in libjpeg-turbo through 2.0.90 mishandles use of tjLoadImage for loading a 16-bit binary PPM file into a...