Lucene search
K

28 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2024-2443

Malicious code in bioql PyPI...

8.3CVSS6.4AI score0.001EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2025/02/05 11:12 a.m.3 views

CVE-2024-21525

All versions of the package node-twain are vulnerable to Improper Check or Handling of Exceptional Conditions due to the length of the source data not being checked. Creating a new twain.TwainSDK with a productName or productFamily, manufacturer, version.info property of length = 34 chars leads t...

8.3CVSS7.2AI score0.001EPSS
Exploits0References1
Veracode
Veracode
added 2024/07/11 5:51 a.m.14 views

Buffer Overflow

node-twain is vulnerable to a buffer overflow. The vulnerability is due to improper handling of exceptional conditions related to the length of source data while reading a new twain.TwainSDK object with certain properties of sufficient length = 34 characters. The vulnerability allows an attacker ...

8.3CVSS8.5AI score0.001EPSS
Exploits0References2Affected Software1
Github Security Blog
Github Security Blog
added 2024/07/10 6:33 a.m.12 views

node-twain vulnerable to Improper Check or Handling of Exceptional Conditions

All versions of the package node-twain are vulnerable to Improper Check or Handling of Exceptional Conditions due to the length of the source data not being checked. Creating a new twain.TwainSDK with a productName or productFamily, manufacturer, version.info property of length = 34 chars leads t...

8.3CVSS7.3AI score0.001EPSS
Exploits0References4Affected Software1
OSV
OSV
added 2024/07/10 6:33 a.m.9 views

GHSA-WXR3-2HGV-QM8F node-twain vulnerable to Improper Check or Handling of Exceptional Conditions

All versions of the package node-twain are vulnerable to Improper Check or Handling of Exceptional Conditions due to the length of the source data not being checked. Creating a new twain.TwainSDK with a productName or productFamily, manufacturer, version.info property of length = 34 chars leads t...

8.7CVSS8.6AI score0.001EPSS
Exploits0References4
NVD
NVD
added 2024/07/10 5:15 a.m.12 views

CVE-2024-21525

All versions of the package node-twain are vulnerable to Improper Check or Handling of Exceptional Conditions due to the length of the source data not being checked. Creating a new twain.TwainSDK with a productName or productFamily, manufacturer, version.info property of length = 34 chars leads t...

8.3CVSS0.001EPSS
Exploits0References2
CVE
CVE
added 2024/07/10 5:0 a.m.41 views

CVE-2024-21525

CVE-2024-21525 affects the node-twain package. The root cause is improper checking/handling of exceptionally long source data when constructing a new twain.TwainSDK with properties like productName, productFamily, manufacturer, or version.info whose length is >= 34 characters, causing a buffer...

8.3CVSS7.6AI score0.001EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2024/07/10 5:0 a.m.10 views

CVE-2024-21525

All versions of the package node-twain are vulnerable to Improper Check or Handling of Exceptional Conditions due to the length of the source data not being checked. Creating a new twain.TwainSDK with a productName or productFamily, manufacturer, version.info property of length = 34 chars leads t...

8.3CVSS7.4AI score0.001EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2024/07/10 12:0 a.m.1 views

PT-2024-18939 · Unknown · Node-Twain

Name of the Vulnerable Software and Affected Versions: node-twain versions all Description: The issue arises from improper check or handling of exceptional conditions due to the length of the source data not being checked. Creating a new twain.TwainSDK with a productName or productFamily,...

8.7CVSS7.3AI score0.001EPSS
Exploits0References10
CNNVD
CNNVD
added 2024/07/10 12:0 a.m.1 views

node-twain security vulnerability

node-twain is a nodejs client SDK for TWAIN nodejs by lossa individual developer. can control scanners that implement the TWAIN protocol. A security vulnerability exists in node-twain that stems from not checking the length of the source data and is susceptible to improper checking or exception...

8.3CVSS7.2AI score0.001EPSS
Exploits0References3
CNNVD
CNNVD
added 2024/06/06 12:0 a.m.2 views

Dynamsoft Service Security Vulnerability

Dynamsoft Service is a core part of a Dynamic Web TWAIN from Dynamsoft Canada when running in service mode. A security vulnerability exists in Dynamsoft Service that stems from incorrect access control...

9.8CVSS6.8AI score0.00739EPSS
Exploits0References2
Snyk
Snyk
added 2024/02/20 2:13 p.m.2 views

Improper Check or Handling of Exceptional Conditions

Overview node-twain is an A TWAIN library for nodejs. Affected versions of this package are vulnerable to Improper Check or Handling of Exceptional Conditions due to the length of the source data not being checked. Creating a new twain.TwainSDK with a productName or productFamily, manufacturer,...

8.3CVSS7.4AI score0.001EPSS
Exploits0References2
IBM Security Bulletins
IBM Security Bulletins
added 2024/01/03 7:58 p.m.73 views

Security Bulletin: Security vulnerability in IBM Datacap Navigator plugin

Summary Due to an issue in the client-side Dynamsoft Service, IBM Datacap Navigator plugin is at risk for malicious code to be executed remotely. This bulletin identifies the steps to take to address the vulnerability. Vulnerability Details IBM X-Force ID: 275484 DESCRIPTION: Due to inadequate...

6.7AI score
Exploits0Affected Software1
Exploit DB
Exploit DB
added 2021/01/06 12:0 a.m.392 views

PaperStream IP (TWAIN) 1.42.0.5685 - Local Privilege Escalation

Exploit Title: PaperStream IP TWAIN 1.42.0.5685 - Local Privilege Escalation Exploit Author: 1F98D Original Author: securifera Date: 12 May 2020 Vendor Hompage: https://www.fujitsu.com/global/support/products/computing/peripheral/scanners/fi/software/fi6x30-fi6x40-ps-ip-twain32.html CVE:...

7.8CVSS7.7AI score0.13853EPSS
Exploits4
Cvelist
Cvelist
added 2019/05/17 5:20 p.m.11 views

CVE-2018-16156

In PaperStream IP TWAIN 1.42.0.5685 Service Update 7, the FJTWSVIC service running with SYSTEM privilege processes unauthenticated messages received over the FjtwMkicFjicube32 named pipe. One of these message processing functions attempts to dynamically load the UninOldIS.dll library and executes...

7.8AI score0.13853EPSS
Exploits4References2
CVE
CVE
added 2019/05/17 5:20 p.m.108 views

CVE-2018-16156

CVE-2018-16156 pertains to PaperStream IP (TWAIN) 1.42.0.5685 (Service Update 7). The vulnerability arises in the FJTWSVIC service, which running with SYSTEM privilege processes unauthenticated messages via the FjtwMkic_Fjicube_32 named pipe. A message processing function dynamically loads the Un...

7.8CVSS7.7AI score0.13853EPSS
Exploits4References2Affected Software1
OpenVAS
OpenVAS
added 2019/01/17 12:0 a.m.62 views

FUJITSU Paperstream IP (TWAIN) Software Detection (Windows SMB Login)

SMB login-based detection of FUJITSU Paperstream IP TWAIN Software. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.1AI score
Exploits0References1
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.25 views

leadtools activex common dialogs 16.5 - Multiple Vulnerabilities

No description provided by source. LEADTOOLS ActiveX Common Dialogs 16.5 Multiple Remote Vulnerabilities Vendor: LEAD Technologies, Inc. Product Web Page: http://www.leadtools.com Affected version: 16.5.0.2 Summary: With LEADTOOLS you can control any scanner, digital camera or capture card that h...

7.1AI score
Exploits0
Check Point Advisories
Check Point Advisories
added 2010/11/30 12:0 a.m.0 views

Update protection against LEADTOOLS Raster Twain LtocxTwainu.dll Buffer Overflow

A buffer overflow vulnerability exists in LEADTOOLS Raster Twain ActiveX control. LEADTOOLS Imaging SDK provides tools for adding advanced imaging features to various applications. The vulnerability is due to a boundary error while parsing the "AppName" parameter of the affected ActiveX control...

8AI score
Exploits0
Check Point Advisories
Check Point Advisories
added 2010/10/05 12:0 a.m.0 views

LEADTOOLS Raster Twain LtocxTwainu.dll Buffer Overflow

LEADTOOLS Imaging SDK is a developers tool for adding advanced imaging features to various applications. TWAIN is standardized API that regulates communications between software applications and imaging devices. LEADTOOLS base Imaging SDK provides an ActiveX control that includes a Raster TWAIN...

8AI score
Exploits0
Rows per page
Query Builder