CVE-2022-35583

wkhtmlTOpdf 0.12.6 is vulnerable to SSRF which allows an attacker to get initial access into the target's system by injecting iframe tag with initial asset IP address on it's source. This allows the attacker to takeover the whole infrastructure by accessing their internal assets...

OTFCC Buffer Overflow Vulnerability (CNVD-2025-02609)

OTFCC is Caryll open source a C library and utility programs. Used to parse and write OpenType font files. A buffer overflow vulnerability exists in OTFCC version 0.10.4, which stems from a lack of proper validation of user-supplied data in the /release-x64/otfccdump+0x6c0a32 file, and can be...

OTFCC Buffer Overflow Vulnerability (CNVD-2024-08547)

OTFCC is Caryll open source a C library and utility programs. Used to parse and write OpenType font files. A buffer overflow vulnerability exists in OTFCC version 0.10.4, which stems from a lack of proper validation of user-supplied data in the /release-x64/otfccdump+0x6b05ce file, and can be...

OTFCC Buffer Overflow Vulnerability (CNVD-2025-02608)

OTFCC is Caryll open source a C library and utility programs. Used to parse and write OpenType font files. A buffer overflow vulnerability exists in OTFCC version 0.10.4, which stems from a lack of proper validation of user-supplied data in the /release-x64/otfccdump+0x6c08a6 file, and can be...

OTFCC Buffer Overflow Vulnerability (CNVD-2024-08548)

OTFCC is Caryll open source a C library and utility programs. Used to parse and write OpenType font files. A buffer overflow vulnerability exists in OTFCC version 0.10.4, which stems from a lack of proper validation of user-supplied data in the /release-x64/otfccdump+0x6b0b2c file, and can be...

OTFCC Buffer Overflow Vulnerability (CNVD-2025-02615)

OTFCC is Caryll open source a C library and utility programs. Used to parse and write OpenType font files. A buffer overflow vulnerability exists in OTFCC version 0.10.4, which stems from a lack of proper validation of user-supplied data in the /release-x64/otfccdump+0x6e420d file, and can be...

Vim latin_ptr2len function buffer overflow vulnerability

Vim is a cross-platform text editor. buffer overflow vulnerability exists in versions prior to Vim 9.0.0220, which stems from the lack of proper validation of user-supplied data by the latinptr2len function, and can be exploited by attackers to cause remote code execution...

Cisco Secure Web Appliance < 14.5.0-537 Privilege Escalation (cisco-sa-wsa-prv-esc-8PdRU8t8)

According to its self-reported version, Cisco Web Security Appliance WSA is affected by a privilege escalation vulnerability. This vulnerability is due to insufficient validation of user-supplied input for the web interface. An authenticated, remote attacker could exploit this vulnerability to...

IBM Sterling B2B Integrator Cross-Site Scripting Vulnerability (CNVD-2022-61907)

IBM Sterling B2B Integrator is a suite of software from IBM USA that integrates critical B2B processes, transactions and relationships. The software supports secure integration of complex B2B processes with different partner communities. IBM Sterling B2B Integrator Standard suffers from a...

OTFCC Buffer Overflow Vulnerability (CNVD-2024-08541)

OTFCC is Caryll open source a C library and utility programs. Used to parse and write OpenType font files. A buffer overflow vulnerability exists in OTFCC version 0.10.4, which stems from a lack of proper validation of user-supplied data in the /release-x64/otfccdump+0x65fc97 file, and can be...

OTFCC Buffer Overflow Vulnerability (CNVD-2024-08539)

OTFCC is Caryll open source a C library and utility programs. Used to parse and write OpenType font files. A buffer overflow vulnerability exists in OTFCC version 0.10.4, which stems from a lack of proper validation of user-supplied data in the /release-x64/otfccdump+0x61731f file, and can be...

OTFCC Buffer Overflow Vulnerability (CNVD-2024-08546)

OTFCC is Caryll open source a C library and utility programs. Used to parse and write OpenType font files. A buffer overflow vulnerability exists in OTFCC version 0.10.4, which stems from a lack of proper validation of user-supplied data in the /release-x64/otfccdump+0x6b05aa file, and can be...

OTFCC Buffer Overflow Vulnerability (CNVD-2024-08551)

OTFCC is Caryll open source a C library and utility programs. Used to parse and write OpenType font files. A buffer overflow vulnerability exists in OTFCC version 0.10.4, which stems from a lack of proper validation of user-supplied data in the /release-x64/otfccdump+0x6b55af file, and can be...

OTFCC code issue vulnerability

OTFCC is Caryll open source a C library and utilities. It is used to parse and write OpenType font files. OTFCC version 0.10.4 contains a code issue vulnerability that stems from a lack of proper validation of user-supplied data in the /x8664-linux-gnu/libc.so.6 0xbb384 file, which can be exploit...

(Pwn2Own) Microsoft Windows partmgr Integer Overflow Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within partmgr.sys. The...

Apple macOS Remote Events Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS. Authentication is not required to exploit this vulnerability. The specific flaw exists within Apple Remote Events. The issue results from the lack of proper validation of user-supplied...

Adobe Acrobat Reader Buffer Overflow Vulnerability (CNVD-2022-58463)

Adobe Acrobat Reader is a PDF viewer from Adobe, Inc. The software is used to print, sign, and annotate PDFs. Adobe Acrobat Reader is vulnerable to a buffer overflow vulnerability that stems from a lack of proper validation of user-supplied data, which could result in reading beyond the end of th...

Adobe Illustrator Buffer Overflow Vulnerability (CNVD-2022-58465)

Adobe Illustrator is a set of vector-based image creation software from the American company Audobee Adobe. Adobe Illustrator suffers from a buffer overflow vulnerability that stems from a lack of proper validation of user-supplied data, which could result in reading beyond the end of an allocate...

CVE-2022-20869 Cisco BroadWorks Application Delivery Platform Software Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco BroadWorks Application Delivery Platform Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting attack against a user of the interface. This vulnerability exists because the web-based management...

Server-Side Request Forgery (SSRF)

localstack is vulnerable to server-side request forgery attacks. The application does not properly handle user-supplied data, which allows a malicious user to make arbitrary requests on the internal network, resulting in sensitive information retrieval or deletion...