CVE Vulnerability Catalog

In Trusted Firmware-M up to version 1.3.0, improper memory management during cryptographic operations can lead to a memory leak in case of operation failure.

BMC Remedy Mid Tier 9.1SP3 is affected by a DOM-based cross-site scripting (XSS) vulnerability in a legacy utility. This allows an attacker to inject malicious client-side scripts.

BMC Remedy 9.1SP3 is affected by an authenticated code execution vulnerability. Authenticated users with report creation rights can use BIRT templates to execute arbitrary code.

BMC Remedy Mid Tier 9.1SP3 is affected by log hijacking. Remote logging can be accessed by unauthenticated users, allowing an attacker to hijack system logs. This data can include user names and HTTP data.

BMC Remedy Mid Tier 9.1SP3 is affected by remote and local file inclusion. Due to the lack of restrictions on what can be targeted, the system can be vulnerable to attacks such as system fingerprinting, internal port scanning, Server Side Request Forgery (SSRF), or remote code execution (RCE).

In GNU LibreDWG version 0.10, a vulnerability was found involving overlapping memory areas in the memcpy function. The issue occurs in the read_2004_section_header function in decode.c. It may allow remote code execution.

A heap-based buffer overflow vulnerability was found in GNU LibreDWG version 0.10 in the bit_read_RC function in bits.c. An attacker could exploit this to execute arbitrary code or cause a system crash.

A heap-based buffer overflow vulnerability was found in GNU LibreDWG version 0.10. The issue occurs in the read_2004_section_revhistory function at src/decode.c:3051.

A heap-based buffer overflow vulnerability was found in GNU LibreDWG version 0.10. The issue occurs in the read_2004_section_handles function in decode.c, potentially leading to crashes or arbitrary code execution.

A heap-based buffer overflow vulnerability was found in GNU LibreDWG version 0.10 in the bit_read_B function in bits.c at line 135. This flaw can be exploited by an attacker to execute arbitrary code.

A heap-based buffer overflow vulnerability exists in GNU LibreDWG version 0.10 via the bit_search_sentinel function in ../../src/bits.c:1985. This flaw allows out-of-bounds memory writes.

A memory leak vulnerability was discovered in GNU LibreDWG version 0.10 in the dwg_decode_eed function at decode.c:3638. Crafted input can cause a memory leak, potentially leading to resource exhaustion.

A heap buffer overflow vulnerability exists in GNU LibreDWG version 0.10 in the read_2004_section_appinfo function at ../../src/decode.c:2842. The flaw occurs when processing specially crafted DWG files.

A heap-based buffer overflow vulnerability was found in GNU LibreDWG version 0.10. The issue occurs in the read_2004_section_preview function in decode.c, potentially leading to crashes or arbitrary code execution.

A null pointer dereference issue exists in GNU LibreDWG version 0.10 in the read_2004_compressed_section function in decode.c. The bug can cause a program crash when processing specially crafted DWG files.

A null pointer dereference issue was discovered in GNU LibreDWG 0.10 in the get_bmp function at dwgbmp.c:164. This flaw can cause a program crash.

A heap-based buffer overflow vulnerability exists in GNU LibreDWG version 0.10 in the read_2004_section_classes function at decode.c:2440. This flaw can be exploited by an attacker to execute arbitrary code or cause a denial of service.

A heap-based buffer overflow vulnerability was found in GNU LibreDWG version 0.10 in the read_2004_compressed_section function at ../../src/decode.c:2417. This issue can lead to unexpected program behavior.

A heap-based buffer overflow vulnerability exists in GNU LibreDWG version 0.10 in the bit_calc_CRC function in bits.c. This vulnerability could be exploited by an attacker to execute arbitrary code or cause a system crash.