CVE-2021-42529

CVE-2021-42529 affects XMP Toolkit SDK 2021.07 and earlier, with a stack-based buffer overflow that can lead to arbitrary code execution in the context of the current user. Exploitation requires the victim to open a crafted file (user interaction). Connected advisories confirm the issue across mu...

CVE-2021-42529

XMP Toolkit SDK version 2021.07 and earlier is affected by a stack-based buffer overflow vulnerability potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted file...

CVE-2021-42529 XMP-Toolkit SDK Stack-based Buffer Overflow Could Lead To Arbitrary Code Execution

XMP Toolkit SDK version 2021.07 and earlier is affected by a stack-based buffer overflow vulnerability potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted file...

CVE-2021-42531 XMP-Toolkit SDK Stack-based Buffer Overflow Could Lead To Arbitrary Code Execution

XMP Toolkit SDK version 2021.07 and earlier is affected by a stack-based buffer overflow vulnerability potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted file...

CVE-2021-42531

CVE-2021-42531 affects Exempi (XMP Toolkit SDK) version 2021.07 and earlier, with a stack-based buffer overflow that can enable arbitrary code execution in the context of the current user. Exploitation requires the user to open a crafted file. Publicly documented fixes exist across distributions:...

CVE-2021-42531

XMP Toolkit SDK version 2021.07 and earlier is affected by a stack-based buffer overflow vulnerability potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted file...

CVE-2021-42530

XMP Toolkit SDK version 2021.07 and earlier is affected by a stack-based buffer overflow vulnerability potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted file...

CVE-2021-42530

CVE-2021-42530 affects Exempi (XMP Toolkit SDK) up to version 2021.07 and earlier, due to a stack-based buffer overflow that can lead to arbitrary code execution in the current user context. Exploitation requires the user to open a crafted file. Debian LTS advisories show patched packages: 2.5.2-...

CVE-2021-42530 XMP-Toolkit SDK Stack-based Buffer Overflow Could Lead To Arbitrary Code Execution

XMP Toolkit SDK version 2021.07 and earlier is affected by a stack-based buffer overflow vulnerability potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted file...

CVE-2021-42532

XMP Toolkit SDK version 2021.07 and earlier is affected by a stack-based buffer overflow vulnerability potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted file...

CVE-2021-42532

Multiple connected sources confirm CVE-2021-42532 affects Exempi (XMP Toolkit SDK) with a stack-based buffer overflow that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction (open a crafted file). Public details cite affected versions (...

CVE-2021-42532 XMP-Toolkit SDK Stack-based Buffer Overflow Could Lead To Arbitrary Code Execution

XMP Toolkit SDK version 2021.07 and earlier is affected by a stack-based buffer overflow vulnerability potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted file...

CVE-2021-42528

XMP Toolkit 2021.07 and earlier is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue...

CVE-2021-42528

CVE-2021-42528 is a NULL pointer dereference in Exempi / XMP Toolkit 2021.07 (and earlier) when parsing a specially crafted file. An unauthenticated attacker could cause an application-denial-of-service in the context of the current user, with user interaction required to open the malicious file....

CVE-2021-42528 XMP-Toolkit Null Pointer Dereference Application denial-of-service

XMP Toolkit 2021.07 and earlier is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue...

Ping Identity PingFederate授权问题漏洞

Ping Identity PingFederate is a flagship software-based federation server in the United States. for identity management. Ping Identity PingFederate has a security vulnerability that originates from an MFA bypass vulnerability in the PingOne MFA Integration Toolkit when an adapter HTML template is...

How to Use Windows Security to Keep Your PC Protected

Your Microsoft computer comes with built-in safety software that shields you from the worst threats. Here's how to navigate your toolkit...

Security Bulletin: IBM Initiate Master Data Service, IBM InfoSphere Master Data Management Standard and Advanced Editions are affected by Cross Site Scripting vulnerabilities in IBM Dojo Toolkit (CVE-2014-8917)

Summary IBM Web applications using file uploader services of IBM Dojo Toolkit might be subject to Cross Site Scripting vulnerability, caused by improper validation of user-supplied input. Vulnerability Details CVEID: CVE-2014-8917 DESCRIPTION: IBM Dojo Toolkit is vulnerable to cross-site scriptin...

Security Bulletin: Vulnerabilities in OpenSSL affect IBM InfoSphere Master Data Management ( CVE-2015-1793)

Summary OpenSSL vulnerabilities were disclosed by the OpenSSL Project and affect IBM InfoSphere Master Data Management . This includes the alternate chains certificate forgery vulnerability CVE-2015-1793. IBM InfoSphere Master Data Management has addressed the applicable CVEs. Vulnerability Detai...

The vulnerability of the C-Bus Toolkit software exists due to an incorrect limitation on the path name to the restricted access directory, allowing a perpetrator to execute arbitrary code.

The vulnerability of the C-Bus Toolkit software exists due to an incorrect limitation on the path name to the restricted access directory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code during the file loading process...