CVE-2021-40904: Incorrect Default Permissions

The web management console of CheckMK Raw Edition versions 1.5.0 to 1.6.0 allows a misconfiguration of the web-app Dokuwiki installed by default, which allows embedded php code. As a result, remote code execution is achieved. Successful exploitation requires access to the web management interface...

expat: Integer overflow in storeRawNames()

An integer overflow was found in expat. The issue occurs in storeRawNames by abusing the mbuffer expansion logic to allow allocations very close to INTMAX and out-of-bounds heap writes. This flaw can cause a denial of service or potentially arbitrary code execution...

CVE-2021-24959

The WP Email Users WordPress plugin through 1.7.6 does not escape the dataraw parameter in the weuselectedusers1 AJAX action, available to any authenticated users, allowing them to perform SQL injection attacks...

CVE-2021-24959

The WP Email Users WordPress plugin through 1.7.6 does not escape the dataraw parameter in the weuselectedusers1 AJAX action, available to any authenticated users, allowing them to perform SQL injection attacks...

expat: Integer overflow in storeRawNames()

An integer overflow was found in expat. The issue occurs in storeRawNames by abusing the mbuffer expansion logic to allow allocations very close to INTMAX and out-of-bounds heap writes. This flaw can cause a denial of service or potentially arbitrary code execution...

expat: Integer overflow in storeRawNames()

An integer overflow was found in expat. The issue occurs in storeRawNames by abusing the mbuffer expansion logic to allow allocations very close to INTMAX and out-of-bounds heap writes. This flaw can cause a denial of service or potentially arbitrary code execution...

PT-2022-9529

Name of the Vulnerable Software and Affected Versions WP Email Users WordPress plugin versions prior to 1.8 Description The issue allows authenticated users to perform SQL injection attacks due to the lack of escaping of the data raw parameter in the /wp-admin/admin-ajax.php "weu selected users 1...

expat: Integer overflow in storeRawNames()

An integer overflow was found in expat. The issue occurs in storeRawNames by abusing the mbuffer expansion logic to allow allocations very close to INTMAX and out-of-bounds heap writes. This flaw can cause a denial of service or potentially arbitrary code execution...

expat: Integer overflow in storeRawNames()

An integer overflow was found in expat. The issue occurs in storeRawNames by abusing the mbuffer expansion logic to allow allocations very close to INTMAX and out-of-bounds heap writes. This flaw can cause a denial of service or potentially arbitrary code execution...

Microsoft Raw Image Extension Remote Code Execution Vulnerability (CNVD-2023-02188)

Microsoft Raw Image Extension is a software for manipulating Raw format files from Microsoft Corporation USA.A remote code execution vulnerability exists in Microsoft Raw Image Extension. An attacker could exploit the vulnerability to execute arbitrary code on the system...

CVE-2022-23300

Raw Image Extension Remote Code Execution Vulnerability...

CVE-2022-23300

Raw Image Extension Remote Code Execution Vulnerability...

CVE-2022-23300

Raw Image Extension Remote Code Execution Vulnerability...

CVE-2022-23295

Raw Image Extension Remote Code Execution Vulnerability...

CVE-2022-23295

Raw Image Extension Remote Code Execution Vulnerability...

Remote code execution

Raw Image Extension Remote Code Execution Vulnerability...

CVE-2022-23300 Raw Image Extension Remote Code Execution Vulnerability

...

CVE-2022-23300

CVE-2022-23300 affects Microsoft Windows Raw Image Extension. The vulnerability is a remote code execution in the Raw Image Extensions/Codecs Library (Microsoft Windows). Impact per sources: attacker could execute arbitrary code on the target, with high severity (CVSS v3.1 base score 7.8; local/p...

CVE-2022-23295 Raw Image Extension Remote Code Execution Vulnerability

...

CVE-2022-23295

CVE-2022-23295 concerns Microsoft Windows' Raw Image Extension (Raw Image Extensions Library). The vulnerability is a remote code execution flaw in the Windows codecs library/extension when handling crafted image files, enabling an attacker to run arbitrary code on a vulnerable system. Public sou...