5382 matches found
CVE-2019-17261
XnView Classic 2.49.1 allows a User Mode Write AV starting at Xwsq+0x0000000000001e51...
CVE-2019-17253
IrfanView 4.53 allows a User Mode Write AV starting at JPEGLS+0x000000000000a6b8...
CVE-2019-13243
IrfanView 4.52 has a User Mode Write AV starting at image00400000+0x00000000000249c6...
CVE-2019-13256
XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x000000000032e849...
CVE-2019-13262
XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x00000000003283eb...
CVE-2018-7846
A CWE-501: Trust Boundary Violation vulnerability on connection to the Controller exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum and Modicon Premium which could cause unauthorized access by conducting a brute force attack on Modbus protocol to the controller...
CVE-2011-4039
Invensys Wonderware HMI Reports 3.42.835.0304 and earlier, as used in Ocean Data Systems Dream Report before 4.0 and other products, allows user-assisted remote attackers to execute arbitrary code via a malformed file that triggers a "write access violation."...
CVE-2017-1000455
GuixSD prior to Git commit 5e66574a128937e7f2fcf146d146225703ccfd5d used POSIX hard links incorrectly, leading the creation of setuid executables in "the store", violating a fundamental security assumption of GNU Guix...
CVE-2017-11099
When SWFTools 0.9.2 processes a crafted file in wav2swf, it can lead to a Segmentation Violation in the wavconvert2mono function in lib/wav.c...
CVE-2023-47466
TagLib before 2.0 allows a segmentation violation and application crash during tag writing via a crafted WAV file in which an id3 chunk is the only valid chunk...
CVE-2023-47466
CVE-2023-47466 affects TagLib prior to 2.0, where processing a crafted WAV file with only an id3 chunk can cause a segmentation fault and crash. Several connected advisories confirm affected packages across distros (e.g., Debian 11: taglib 1.11.1+dfsg.1-3+deb11u1; Amazon Linux 2023: taglib 1.12-4...
CVE-2023-47466
TagLib before 2.0 allows a segmentation violation and application crash during tag writing via a crafted WAV file in which an id3 chunk is the only valid chunk...
CVE-2023-47466
TagLib before 2.0 allows a segmentation violation and application crash during tag writing via a crafted WAV file in which an id3 chunk is the only valid chunk...
CVE-2023-47466
TagLib before 2.0 allows a segmentation violation and application crash during tag writing via a crafted WAV file in which an id3 chunk is the only valid chunk...
CVE-1999-0227
Access violation in LSASS.EXE LSA/LSARPC program in Windows NT allows a denial of service...
firefox: thunderbird: Out-of-bounds access when resolving Promise objects
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: An attacker was able to perform an out-of-bounds read or write on a JavaScript Promise object...
The vulnerability of the Adobe Substance 3D Modeler software-related to the execution of operations beyond the buffer boundaries in memory allows a hacker to execute arbitrary code.
The vulnerability of the Adobe Substance 3D Modeler software-related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
RockyLinux 8 : thunderbird (RLSA-2024:5402)
The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2024:5402 advisory. Thunderbird: 115.14/128.1 mozilla: Fullscreen notification dialog can be obscured by document content CVE-2024-7518 mozilla: Out of bounds memory access ...
CVE-2025-4316
Improper access control in PAM feature in Devolutions Server allows a PAM user to self approve their PAM requests even if disallowed by the configured policy via specific user interface actions. This issue affects Devolutions Server versions from 2025.1.3.0 through 2025.1.6.0, and all versions up...
