Huawei EulerOS: Security Advisory for httpd (EulerOS-SA-2023-1408)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EIPStackGroup OpENer 缓冲区错误漏洞

EIPStackGroup OpENer is a software from the EIPStackGroup organization for providing EtherNet/IP stacking functionality to IO adapter devices . A buffer error vulnerability exists in EIPStackGroup OpENer version 58ee13c, which stems from an out-of-bounds write vulnerability in the SetAttributeLis...

Cross site scripting

FrameMaker 2020 Update 4 and earlier, 2022 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

Cross site scripting

Photoshop version 23.5.3 and earlier, 24.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

Adobe FrameMaker out-of-bounds write vulnerability (CNVD-2023-14297)

Adobe Framemaker is a set of page layout software for writing and editing large or complex documents including structured documents from Adobe. Adobe FrameMaker has an out-of-bounds write vulnerability that can be exploited by attackers to cause arbitrary code execution...

Adobe FrameMaker out-of-bounds write vulnerability (CNVD-2023-14295)

Adobe Framemaker is a set of page layout software for writing and editing large or complex documents including structured documents from Adobe. Adobe FrameMaker has an out-of-bounds write vulnerability that could be exploited by an attacker to execute arbitrary code in the context of the current...

CVE-2023-22227

Adobe Bridge (Windows/macOS) versions 12.0.3 and earlier, and 13.0.1 and earlier, are affected by an out-of-bounds write vulnerability that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction: a victim must open a malicious file. The iss...

CVE-2023-21622

Adobe FrameMaker is affected by CVE-2023-21622 (out-of-bounds write) that could allow arbitrary code execution in the context of the current user. Affected: FrameMaker 2020 Update 4 and earlier, and FrameMaker 2022 and earlier. Root cause: out-of-bounds write in the font parsing component. Attack...

SUSE CVE-2017-14151

An off-by-one error was discovered in opjtcdcodeblockencallocatedata in lib/openjp2/tcd.c in OpenJPEG 2.2.0. The vulnerability causes an out-of-bounds write, which may lead to remote denial of service heap-based buffer overflow affecting opjmqcflush in lib/openjp2/mqc.c and opjt1encodecblk in...

SUSE CVE-2018-12474

Improper input validation in obs-service-tarscm of Open Build Service allows remote attackers to cause access and extract information outside the current build or cause the creation of file in attacker controlled locations. Affected releases are openSUSE Open Build Service: versions prior to...

SUSE CVE-2018-14457

An issue was discovered in libgig 4.1.0. There is an out-of-bounds write in the function DLS::Info::UpdateChunks in DLS.cpp...

SUSE CVE-2019-16225

An issue was discovered in py-lmdb 0.97. For certain values of mpflags, mdbpagetouch does not properly set up mc-mcpgmc-top, leading to an invalid write operation. NOTE: this outcome occurs when accessing a data.mdb file supplied by an attacker...

SUSE CVE-2019-19906

cyrus-sasl aka Cyrus SASL 2.1.27 has an out-of-bounds write leading to unauthenticated remote denial-of-service in OpenLDAP via a malformed LDAP packet. The OpenLDAP crash is ultimately caused by an off-by-one error in sasladdstring in common.c in cyrus-sasl...

SUSE CVE-2022-3775

When rendering certain unicode sequences, grub2's font code doesn't proper validate if the informed glyph's width and height is constrained within bitmap size. As consequence an attacker can craft an input which will lead to a out-of-bounds write into grub2's heap, leading to memory corruption an...

SUSE CVE-2022-33103

Das U-Boot from v2020.10 to v2022.07-rc3 was discovered to contain an out-of-bounds write via the function sqfsreaddir...

Adobe Bridge 缓冲区错误漏洞

Adobe Bridge is a file viewer from Adobe, Inc. An out-of-bounds write vulnerability exists in Adobe Bridge, which can be exploited to execute arbitrary code in the context of the current user...

Adobe Bridge 缓冲区错误漏洞

Adobe Bridge is a file viewer from Adobe, Inc. An out-of-bounds write vulnerability exists in Adobe Bridge, which can be exploited to execute arbitrary code in the context of the current user...

Adobe Photoshop 缓冲区错误漏洞

Adobe Photoshop is a set of image processing software from the American company Adobe. Adobe Photoshop is vulnerable to an out-of-bounds write vulnerability, which can be exploited by attackers to cause arbitrary code execution...

CVE-2023-25011

PC settings tool Ver10.1.26.0 and earlier, PC settings tool Ver11.0.22.0 and earlier allows a attacker to write to the registry as administrator privileges with standard user privileges...

Adobe After Effects 缓冲区错误漏洞

Adobe After Effects is a suite of visual effects and motion graphics software from Adobe, which is vulnerable to an out-of-bounds write vulnerability that could be exploited to execute arbitrary code in the context of the current user...