PT-2023-33423 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 4.8 through 4.19.267 Description: The issue concerns an out-of-bounds read in the afe4403 read raw function. This problem was introduced in version v4.8 and is fixed in Linux Kernel version v4.19.268. The actual impact a...

PT-2023-33296 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.159 Description: A shift-out-of-bounds issue was discovered in the hid report raw event function. The actual impact and attack plausibility have not yet been proven. This issue was introduced in version...

PT-2023-33452 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.14.301 Description: The issue concerns an out-of-bounds read in the afe4403 read raw function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

PT-2023-33422 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 4.8 through 4.19.267 Description: The issue concerns an out-of-bounds read in the afe4404 read|write raw functions. This is an automated ID intended to aid in discovery of potential security vulnerabilities, with the...

PT-2023-8498

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.3 Description The issue is related to the IPv6 implementation in the Linux kernel, specifically with the net/ipv6/route.c file. It involves incorrect handling of boundary conditions, potentially allowing a remo...

PT-2023-10610 · Insteon · Insteon Hub

Name of the Vulnerable Software and Affected Versions: Insteon Hub version 1012 Description: Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub. Specially crafted commands sent through the PubNub service can cause a...

CVE-2022-23549 Discourse vulnerable to bypass of post max_length using HTML comments

Discourse is an option source discussion platform. Prior to version 2.8.14 on the stable branch and version 2.9.0.beta16 on the beta and tests-passed branches, users can create posts with raw body longer than the maxlength site setting by including html comments that are not counted toward the...

The vulnerability of the plugin for viewing RAW images lies in insufficient validation of input data, allowing a hacker to execute arbitrary code.

The vulnerability of the plugin for viewing RAW images is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code using specially created data...

CVE-2022-44687

Raw Image Extension Remote Code Execution Vulnerability...

CVE-2022-44687

Raw Image Extension Remote Code Execution Vulnerability...

Remote code execution

Raw Image Extension Remote Code Execution Vulnerability...

Raw Image Extension Remote Code Execution Vulnerability

...

PT-2022-5871 · Unknown · Raw Image Extension

Name of the Vulnerable Software and Affected Versions: Raw Image Extension affected versions not specified Description: The issue is related to insufficient input validation in the Raw Image Extension plugin, which can be exploited to execute arbitrary code using specially crafted data...

CVE-2022-44687 Raw Image Extension Remote Code Execution Vulnerability

...

Microsoft Windows Codecs Library 安全漏洞

The Microsoft Windows Codecs Library is a library of features for the Microsoft Windows system from Microsoft Corporation. A security vulnerability exists in the Microsoft Windows Codecs Library. The following products and versions are affected: Raw Image Extension for Windows 11 for ARM64-based...

Microsoft Windows Raw Image Extensions Library RCE (December 2022)

The Windows 'Raw Image Extensions' app installed on the remote host is affected by a remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. %NASLMINLEVEL 80900 C Tenable Network Security, Inc. The descriptive text an...

CVE-2022-44687

CVE-2022-44687 is a Remote Code Execution vulnerability in the Windows Raw Image Extensions component. Public details indicate the issue stems from insufficient input validation in the Raw Image Extension, allowing crafted data to trigger arbitrary code execution. Public exploits exist. Affected ...

OESA-2022-2132 kubernetes security update

Container cluster management. Security Fixes: kubectl does not neutralize escape, meta or control sequences contained in the raw data it outputs to a terminal. This includes but is not limited to the unstructured string fields in objects such as Events.CVE-2021-25743...

Input validation

go-merkledag implements the 'DAGService' interface and adds two ipld node types, Protobuf and Raw for the ipfs project. A ProtoNode may be modified in such a way as to cause various encode errors which will trigger a panic on common method calls that don't allow for error returns. A ProtoNode...

PT-2025-49468

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.1.0-rc5-wt-ath-656295-gef907406320c-dirty 6 Description The Linux kernel contains a flaw within the ath11k module related to monitor mode bringup. When an interface is activated in monitor mode, a NULL pointer...