The vulnerability of the policy.xml file of the console-based image editing tool ImageMagick allows a hacker to access confidential data and compromise its integrity.

The vulnerability of the policy.xml file of the console-based image editing tool ImageMagick is related to the disclosure of information in the erroneous data area. Exploiting this vulnerability allows an attacker to gain access to confidential data and compromise its integrity...

PT-2023-19666 · Milesight · Milesight Ur32L

Name of the Vulnerable Software and Affected Versions: Milesight UR32L version 32.3.0.5 Description: A command injection issue exists in the vtysh ubus tool's toolsh excute.constprop.1 functionality, specifically within the ping tool utility. This allows an attacker to execute commands by sending...

Shimo VPN 授权问题漏洞

Shimo VPN is a VPN Virtual Private Network software for macOS platform. Mailbutler GmbH Shimo VPN Client for macOS version v5.0.4 suffers from a security vulnerability that stems from a vulnerability in the help tool that allows attackers to bypass authentication via PID reuse...

The vulnerability of the programming software for PLCs (programmable logic controllers), EcoStruxure Control Exper, allows a intruder to execute arbitrary code.

The vulnerability of the EcoStruxure Control Exper programming tool for programmable logic controllers is related to deficiencies in the separation of the controlled system area. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the file copying utility cp in the GNU Core Utilities system of the EMIAS OS operating system allows a perpetrator to cause a service failure or exert other adverse effects.

The vulnerability of the file copying utility cp in the GNU Core Utilities system for the EMIAS OS operating system is related to the distribution of resources without any restrictions or regulations. Exploiting this vulnerability could allow an attacker to cause service failures or have other...

OTFCC 缓冲区错误漏洞

Caryll OTFCC is Caryll open source a C library and utility programs. Used to parse and write OpenType font files. Caryll OTFCC suffers from a buffer overflow vulnerability that originates from a boundary error in /release-x64/otfccdump+0x6e1fc8 when handling untrusted input. An attacker could...

The vulnerability of the monitoring tool for VMware vRealize Operations, related to insecure management of privileges, allows a perpetrator to escalate their privileges.

The vulnerability of the monitoring tool for VMware vRealize Operations is related to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to enhance their privileges remotely...

CVE-2022-35472

OTFCC v0.10.4 was discovered to contain a global overflow via /release-x64/otfccdump+0x718693...

CVE-2022-34295

totd before 1.5.3 does not properly randomize mesg IDs...

OESA-2022-1669 libtiff security update

This libtiff provides support for the Tag Image File Format TIFF, a widely used format for storing image data. The latest version of the TIFF specification is available on-line in several different formats.And contains command-line programs for manipulating TIFF format image files using the libti...

The vulnerability of the OAUTH2 protocol implementation in the command-line tool cURL allows a perpetrator to bypass the authentication process and gain unauthorized access to protected information.

The vulnerability of the OAUTH2 protocol implementation in the command-line tool cURL relates to the repeated use of the same connection with the same credentials. Exploiting this vulnerability allows a malicious actor to bypass the authentication process and gain unauthorized access to protected...

Apache Ranger allows users to bypass intended access restrictions via direct access to module URLs

The Policy Admin Tool in Apache Ranger before 0.5.0 allows remote authenticated users to bypass intended access restrictions via direct access to module URLs...

The vulnerability of the compute_closed_spline() function in the trans_spline.c component of the Fig2dev file conversion tool allows a hacker to cause a service failure.

The vulnerability of the computeclosedspline function in the transspline.c component of the .fig Fig2dev conversion tool is related to pointer manipulation errors. Exploiting this vulnerability allows an attacker to cause a service failure...

The vulnerability of the IBM Security Guardium security tool lies in its lack of protection for website structures, allowing attackers to gain unauthorized access to the protected information.

The vulnerability of the IBM Security Guardium security tool is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to the protected information...

The vulnerability of the QPDFTokenizer::resolveLiteral function in the command-line utility for converting QPDF documents allows a attacker to cause a service failure.

The vulnerability of the QPDFTokenizer::resolveLiteral command-line utility for converting QPDF documents is related to the infinite loop that can occur during execution. Exploiting this vulnerability could allow an attacker to cause service interruptions...

CVE-2020-11014

Electron-Cash-SLP before version 3.6.2 has a vulnerability. All token creators that use the "Mint Tool" feature of the Electron Cash SLP Edition are at risk of sending the minting authority baton to the wrong SLP address. Sending the mint baton to the wrong address will give another party the...

SOPlanning Cross-Site Request Forgery Vulnerability (CNVD-2020-10484)

SOPlanning is an online planning tool for efficiently organizing projects and tasks. SOPlanning 1.45 suffers from a cross-site request forgery vulnerability. An attacker can exploit this vulnerability to arbitrarily change the administrator password via process/xajaxserver.php...

CVE-2020-7251

Improper access control vulnerability in Configuration Tool in McAfee Mcafee Endpoint Security ENS Prior to 10.6.1 February 2020 Update allows local users to disable security features via unauthorised use of the configuration tool from older versions of ENS...

GNU cflow Buffer Overflow Vulnerability

GNU cflow is a flowchart generator from the GNU Project that reads C source files and generates externally referenced flowcharts. A buffer overflow vulnerability exists in the 'nexttoken' function of the parser.c file in GNU cflow 1.6 and earlier versions, which can be exploited by an attacker to...

patch: Malicious patch files cause ed to execute arbitrary commands

GNU Patch version 2.7.6 contains an input validation vulnerability when processing patch files, specifically the EDITORPROGRAM invocation using ed can result in code execution. This attack appear to be exploitable via a patch file processed via the patch utility. This is similar to FreeBSD's...