CVE Vulnerability Catalog

Artifex MuPDF version 1.11 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .xps file. The issue arises from mishandling of XML tag name comparisons.

Artifex MuPDF version 1.11 allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file. The issue arises from the lack of checks for negative size fields in a ZIP entry.

Artifex MuPDF version 1.11 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .xps file. The issue is related to the xps_load_links_in_glyphs function, which does not verify that an xps font could be loaded.

In EMC ViPR SRM, Storage M&R, VNX M&R, and M&R (Watch4Net) for SAS Solution Packs, the Java Management Extensions (JMX) protocol can be leveraged to create a denial of service (DoS) condition. Attackers with knowledge of JMX agent user credentials could exploit this vulnerability to create arbitrary files on the affected system.

In EMC ViPR SRM, Storage M&R, VNX M&R, and M&R (Watch4Net) for SAS Solution Packs, there is a directory traversal vulnerability in the Webservice Gateway. Attackers with knowledge of Webservice Gateway credentials could exploit this vulnerability to gain unauthorized access to information and modify or delete data.

GetNextToken in MagickCore/token.c in ImageMagick 7.0.6 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted SVG document.

ZKTeco ZKTime Web version 2.0.1.12280 allows remote attackers to obtain sensitive employee metadata via a direct request for a PDF document.

An integer overflow (CWE-190) in Micro Focus VisiBroker 8.5 can lead to an out-of-bounds read (CWE-125), potentially resulting in a denial of service.

A Remote Code Execution vulnerability has been found in the Horde_Image library when using the 'Im' backend with ImageMagick's 'convert' utility. It is not exploitable through any Horde application, but custom applications using the Horde_Image library might be affected.

A heap-based buffer overflow was discovered in AP4_VisualSampleEntry::ReadFields in Bento4 version 1.5.0-617. The vulnerability causes an out-of-bounds write, which leads to remote denial of service or possibly code execution.

The AP4_AvccAtom and AP4_HvccAtom classes in Bento4 version 1.5.0-617 do not properly validate data sizes, leading to a heap-based buffer over-read and application crash in AP4_DataBuffer::SetData.

A heap-based buffer overflow was discovered in the AP4_HdlrAtom class in Bento4 1.5.0-617. The vulnerability causes an out-of-bounds write, which leads to remote denial of service or possibly code execution.

The AP4_VisualSampleEntry::ReadFields function in Bento4 1.5.0-617 has an error in the use of character data types, leading to a stack-based buffer underflow and out-of-bounds write. This may result in application crashes or other unspecified impacts.

Mirasvit Helpdesk MX before 1.5.3 might allow remote attackers to execute arbitrary code by leveraging failure to filter uploaded files.

In TecnoVISION DLX Spot Player4 version >1.5.10, there is an arbitrary file upload vulnerability in resource.php that allows remote authenticated users to upload arbitrary files leading to remote command execution.

The vulnerability in ProxyChains-NG before version 4.9 allows local users to gain privileges via a malicious libproxychains4.so library in the current working directory, which is referenced in the LD_PRELOAD path.

In Qualcomm products with Android releases from CAF, during DMA allocation, due to wrong data type of size, allocation size gets truncated which makes allocation succeed when it should fail.

In Qualcomm products with Android releases from CAF using the Linux kernel, user-level permissions can be used to gain access to kernel memory. Specifically, the ION cache maintenance code is writing to a user supplied address.

All Qualcomm products with Android releases from CAF using the Linux kernel have an off-by-one error in a camera driver, which can lead to out-of-bounds read/write.

In Qualcomm products with Android releases from CAF, in function msm_compr_ioctl_shared, the variable 'ddp->params_length' could be accessed and modified by multiple threads without proper protection. This can lead to race conditions and buffer overflow if the variable is set to a large value.