CVE Vulnerability Catalog

In TG Soft Vir.IT eXplorer Lite version 8.5.65, the driver file (VIRAGTLT.SYS) does not validate input values from IOCtl 0x8273E060, allowing local users to cause a denial of service (BSOD) or potentially other unspecified impacts.

In TG Soft Vir.IT eXplorer Lite version 8.5.65, the driver file (VIRAGTLT.SYS) allows local users to cause a denial of service (BSOD) due to not validating input values from IOCtl 0x8273A0A0.

In TG Soft Vir.IT eXplorer Lite version 8.5.65, the driver file (VIRAGTLT.SYS) does not validate input values from IOCtl 0x82730068, allowing local users to cause a denial of service (BSOD) or possibly have unspecified other impact.

In TG Soft Vir.IT eXplorer Lite version 8.5.42, the driver file (VIRAGTLT.SYS) does not validate input values from IOCtl 0x8273A0A0, allowing local users to cause a denial of service (BSOD) or possibly other unspecified impacts.

In IKARUS anti.virus version 2.16.20, the driver file (ntguard.SYS) does not validate input values from IOCtl 0x83000058, allowing local users to cause a denial of service (BSOD) or potentially unspecified other impacts.

In TG Soft Vir.IT eXplorer Lite version 8.5.65, the driver file (VIRAGTLT.SYS) does not validate input values from IOCtl 0x827300A4, allowing local users to cause a denial of service (BSOD) or possibly other unspecified impacts.

In IKARUS anti.virus version 2.16.20, the driver file (ntguard.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact due to not validating input values from IOCtl 0x83000088.

CVE-2017-17793 vulnerability in BlogoText 3.7.6 allows remote attackers to bypass a filename-randomization protection mechanism, enabling them to read backup archives on Windows servers.

In GIMP 2.8.22, there is a heap-based buffer overflow in read_channel_data in plug-ins/common/file-psp.c.

In GIMP 2.8.22, there is a heap-based buffer over-read in the read_creator_block handler in plug-ins/common/file-psp.c.

In GIMP 2.8.22, there is a heap-based buffer over-read in ReadImage in plug-ins/common/file-tga.c, related to an unexpected bits-per-pixel value for an RGBA image.

In GIMP 2.8.22, there is a heap-based buffer overflow in the fli_read_brun function in plug-ins/file-fli/fli.c.

In GIMP 2.8.22, there is a heap-based buffer over-read in load_image in plug-ins/common/file-gbr.c, related to mishandling of UTF-8 data.

In GraphicsMagick 1.3.27a, there is a buffer over-read in ReadPALMImage in coders/palm.c when QuantumDepth is 8.

In GraphicsMagick 1.3.27a, there is a heap-based buffer over-read in ReadOneJNGImage in coders/png.c, related to oFFs chunk allocation.

The admin/configuration.php file in Piwigo version 2.9.2 has a CSRF (Cross-Site Request Forgery) vulnerability. An attacker can exploit this flaw to perform unauthorized actions on behalf of a logged-in user.

SuperBeam versions up to 4.1.3, when using the LAN or WiFi Direct Share feature, does not use HTTPS or any integrity-protection mechanism for file transfer, making it easier for remote attackers to send crafted files, as demonstrated by APK injection.

The Enterprise version of SyncBreeze 10.2.12 and earlier is affected by a Remote Denial of Service vulnerability. The web server does not check bounds when reading server requests in the Host header, resulting in a classic Buffer Overflow that causes a Denial of Service.

The ZoomLauncher binary in the Zoom client for Linux before version 2.0.115900.1201 does not properly sanitize user input when constructing a shell command, allowing remote attackers to execute arbitrary code by leveraging the zoommtg:// scheme handler.

A stack-based buffer overflow in the ZoomLauncher binary in the Zoom client for Linux before version 2.0.115900.1201 allows remote attackers to execute arbitrary code by leveraging the zoommtg:// scheme handler.