The vulnerability of the web page rendering modules in WebKitGTK and WPE WebKit, related to the occurrence of operations outside the buffer in memory, allows attackers to access confidential data.

The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to gain access to confidential data...

Merative Merge DICOM Toolkit 安全漏洞

Merative Merge DICOM Toolkit is a comprehensive API from Merative that complies with the latest DICOM standards. A security vulnerability exists in Merative Merge DICOM Toolkit C/C++ versions prior to 5.18.0 that stems from the presence of an out-of-bounds read vulnerability...

WordPress Plugin Gutenberg Block Editor Toolkit 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

CVE-2023-34031

A vulnerability in Pascal Casier bbPress Toolkit bbp-toolkit.This issue affects bbPress Toolkit: from n/a through = 1.0.12...

Intel Distribution of OpenVINO(TM) Toolkit Code Issue Vulnerability

The Intel Distribution of OpenVINOTM Toolkit is an application and solution for developing applications and solutions that use deep learning intelligence from Intel USA. Based on convolutional neural networks CNNs, the toolkit scales workloads across Intel® hardware, including gas pedals, and...

NVIDIA CUDA Toolkit 缓冲区错误漏洞

The NVIDIA CUDA toolkit is a toolkit from NVIDIA, Inc. It provides a development environment for creating high-performance GPU-accelerated applications. A security vulnerability exists in NVIDIA CUDA Toolkit that originates from an attacker may be able to cause an out-of-bounds read by inducing a...

CVE-2022-34667

NVIDIA CUDA Toolkit SDK contains a stack-based buffer overflow vulnerability in cuobjdump, where an unprivileged remote attacker could exploit this buffer overflow condition by persuading a local user to download a specially crafted corrupted file and execute cuobjdump against it locally, which m...

UBUNTU-CVE-2021-41688

DCMTK through 3.6.6 does not handle memory free properly. The object in the program is free but its address is still used in other locations. Sending specific requests to the dcmqrdb program will incur a double free. An attacker can use it to launch a DoS attack...

CVE-2021-44442

A vulnerability has been identified in JT Utilities All versions V13.1.1.0, JTTK All versions V11.1.1.0. JTTK library in affected products contains an out of bounds write past the fixed-length heap-based buffer while parsing specially crafted JT files. This could allow an attacker to execute code...

Siemens JT Utilities 缓冲区错误漏洞

Siemens JT Utilities is an application from Siemens Germany. A Siemens application. A buffer error vulnerability exists in JT Utilities all versions V13.1.1.0 and JTTK all versions V11.1.1.0, which stems from the fact that when parsing specially crafted JT files, the JTTK libraries in the affecte...

Siemens JT Utilities 缓冲区错误漏洞

JT is a publicly released data format developed by Siemens Digital Industry Software.JT Open Toolkit also known as JTTK is developer-oriented application programming interface API JT-enabled software.JT Open Toolkit is a read and write toolkit.JT Utilities and JTTK file parsing vulnerabilities. A...

PT-2021-6801 · Adobe +4 · Xmp Toolkit +4

Name of the Vulnerable Software and Affected Versions: XMP Toolkit versions 2021.07 and earlier Description: The issue is related to a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve an...

PT-2021-4885 · Adobe +4 · Xmp Toolkit +4

Name of the Vulnerable Software and Affected Versions: XMP Toolkit versions 2020.1 and earlier Description: The issue is related to a memory corruption vulnerability, potentially allowing arbitrary code execution in the context of the current user. This can be achieved through a buffer overflow i...

Schneider Electric C-Bus Toolkit Path Traversal Vulnerability (CNVD-2021-31170)

Schneider Electric C-Bus Toolkit is a software application from Schneider Electric, France. It is used to assist in C-Bus installations. A path traversal vulnerability exists in C-Bus Toolkit V1.15.7 and earlier versions, which can be exploited by an attacker to execute arbitrary code...

gtk-vnc Remote Code Execution Vulnerability

GTK-VNC is a for GTK VNC viewer widget. A remote code execution vulnerability exists in gtk-vnc. An attacker could exploit the vulnerability to execute arbitrary code within the context of an application. A failed exploit attempt could result in a denial of service condition...

The vulnerability of the Java Development Kit application development tool allows a remote attacker to compromise data confidentiality and integrity.

The vulnerability of the Java Development Kit application development tool relates to the subcomponents of the program. Exploiting this vulnerability allows a malicious attacker to compromise the confidentiality, integrity, and accessibility of data by using the JAXB subcomponent...

IBM MQ M2000 Appliance GSKit Information Disclosure Vulnerability

The IBM MQ M2000 Appliance is an all-in-one appliance for rapid deployment of enterprise-class messaging middleware from IBM, USA.GSKit is a set of security management tools within it. A security vulnerability exists in GSKit in IBM MQ M2000 Appliance versions prior to 8.0.0.4. A remote attacker...

AJAX Control Toolkit Directory Traversal Vulnerability

AJAX Control Toolkit is a toolkit of extended controls for ASP.NET WebForms. A directory traversal vulnerability exists in AJAX Control Toolkit. A remote attacker can exploit this vulnerability by sending a specially crafted request with the directory traversal character '...' A remote attacker c...

The vulnerability of the SUSE Linux Enterprise operating system allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the libqt4-x11-x86 package in the SUSE Linux Enterprise operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...

UBUNTU-CVE-2013-6825

1 movescu.cc and 2 storescp.cc in dcmnet/apps/, 3 dcmnet/libsrc/scp.cc, 4 dcmwlm/libsrc/wlmactmg.cc, 5 dcmprscp.cc and 6 dcmpsrcv.cc in dcmpstat/apps/, 7 dcmpstat/tests/msgserv.cc, and 8 dcmqrdb/apps/dcmqrscp.cc in DCMTK 3.6.1 and earlier does not check the return value of the setuid system call,...