DEBIAN-CVE-2024-21633

Apktool is a tool for reverse engineering Android APK files. In versions 2.9.1 and prior, Apktool infers resource files' output path according to their resource names which can be manipulated by attacker to place files at desired location on the system Apktool runs on. Affected environments are...

PT-2024-1051 · Apktool +1 · Apktool +1

Name of the Vulnerable Software and Affected Versions: Apktool versions 2.9.1 and prior Description: The issue is related to incorrect restriction of the directory path name with limited access. An attacker can exploit this to write or overwrite arbitrary data. Apktool infers resource files' outp...

OESA-2023-1986 hdf5 security update

HDF5 is a data model, library, and file format for storing and managing data. It supports an unlimited variety of datatypes, and is designed for flexible and efficient I/O and for high volume and complex data. HDF5 is portable and is extensible, allowing applications to evolve in their use of HDF...

CVE-2023-52174

XnView Classic before 2.51.3 on Windows has a Write Access Violation at xnview.exe+0x3125D6...

CVE-2023-52173

XnView Classic before 2.51.3 on Windows has a Write Access Violation at xnview.exe+0x3ADBD0...

CVE-2023-52173

XnView Classic before 2.51.3 on Windows has a Write Access Violation at xnview.exe+0x3ADBD0...

CVE-2023-52174

XnView Classic before 2.51.3 on Windows has a Write Access Violation at xnview.exe+0x3125D6...

CVE-2023-52173

XnView Classic before 2.51.3 on Windows has a Write Access Violation at xnview.exe+0x3ADBD0...

CVE-2023-52174

XnView Classic before 2.51.3 on Windows has a Write Access Violation at xnview.exe+0x3125D6...

Design/Logic Flaw

XnView Classic before 2.51.3 on Windows has a Write Access Violation at xnview.exe+0x3ADBD0...

Design/Logic Flaw

XnView Classic before 2.51.3 on Windows has a Write Access Violation at xnview.exe+0x3125D6...

CVE-2023-52174

XnView Classic before 2.51.3 on Windows has a Write Access Violation at xnview.exe+0x3125D6...

CVE-2023-52173

XnView Classic on Windows is affected by a Write Access Violation in xnview.exe+0x3ADBD0 affecting versions prior to 2.51.3. The vulnerability is due to a fault in handling memory access, with potential impact on confidentiality, integrity, and availability as reflected in reported CVSS metrics (...

XnView Classic Security Vulnerability

XnView Classic is a suite of image viewing software. The software can be used to view, convert, organize and edit graphic and video files. A security vulnerability exists in XnView Classic prior to version 2.51.3, which originates from a write access conflict in xnview.exe+0x3125D6...

XnView Classic Security Vulnerability

XnView Classic is a suite of image viewing software. The software can be used to view, convert, organize and edit graphic and video files. A security vulnerability exists in XnView Classic prior to version 2.51.3, which originates from a write access conflict in xnview.exe+0x3ADBD0...

CVE-2023-52173

XnView Classic before 2.51.3 on Windows has a Write Access Violation at xnview.exe+0x3ADBD0...

CVE-2023-52173

XnView Classic before 2.51.3 on Windows has a Write Access Violation at xnview.exe+0x3ADBD0...

PT-2023-31934 · Xnview · Xnview Classic

Name of the Vulnerable Software and Affected Versions: XnView Classic versions prior to 2.51.3 Description: The issue is related to a Write Access Violation at xnview.exe+0x3125D6 in XnView Classic on Windows. Recommendations: For versions prior to 2.51.3, update to version 2.51.3 or later to...

PT-2023-31933 · Xnview · Xnview Classic

Name of the Vulnerable Software and Affected Versions: XnView Classic versions prior to 2.51.3 Description: The issue is related to a Write Access Violation at xnview.exe+0x3ADBD0 in XnView Classic on Windows. Recommendations: For versions prior to 2.51.3, update to version 2.51.3 or later to...

GHSA-8F57-WCMG-4JMH Apache Airflow vulnerable to Exposure of Resource to Wrong Sphere

Apache Airflow, in versions prior to 2.8.0, contains a security vulnerability that allows an authenticated user with limited access to some DAGs, to craft a request that could give the user write access to various DAG resources for DAGs that the user had no access to, thus, enabling the user to...