CVE Vulnerability Catalog

Due to an integer overflow in sam2p 0.49.3, a loop executes 0xffffffff times, ending with an invalid read of size 1 in the Image::Indexed::sortPal function in image.cpp. This also causes memory corruption due to an attempted write to the invalid d[0xfffffffe] array element.

Artifex MuPDF version 1.11 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .xps file. The issue arises from mishandling of XML tag name comparisons.

Artifex MuPDF version 1.11 allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file. The issue arises from the lack of checks for negative size fields in a ZIP entry.

Artifex MuPDF version 1.11 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .xps file. The issue is related to the xps_load_links_in_glyphs function, which does not verify that an xps font could be loaded.

In EMC ViPR SRM, Storage M&R, VNX M&R, and M&R (Watch4Net) for SAS Solution Packs, the Java Management Extensions (JMX) protocol can be leveraged to create a denial of service (DoS) condition. Attackers with knowledge of JMX agent user credentials could exploit this vulnerability to create arbitrary files on the affected system.

In EMC ViPR SRM, Storage M&R, VNX M&R, and M&R (Watch4Net) for SAS Solution Packs, there is a directory traversal vulnerability in the Webservice Gateway. Attackers with knowledge of Webservice Gateway credentials could exploit this vulnerability to gain unauthorized access to information and modify or delete data.

GetNextToken in MagickCore/token.c in ImageMagick 7.0.6 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted SVG document.

ZKTeco ZKTime Web version 2.0.1.12280 allows remote attackers to obtain sensitive employee metadata via a direct request for a PDF document.

An out-of-bounds read (CWE-125) vulnerability exists in Micro Focus VisiBroker 8.5. The feasibility of leveraging this vulnerability for further attacks was not assessed.

An integer overflow (CWE-190) led to an out-of-bounds write (CWE-787) on a heap-allocated area, leading to heap corruption in Micro Focus VisiBroker 8.5.

An integer overflow (CWE-190) in Micro Focus VisiBroker 8.5 can lead to an out-of-bounds read (CWE-125), potentially resulting in a denial of service.

libexif through 0.6.21 is vulnerable to out-of-bounds heap read vulnerability in exif_data_save_data_entry function. The issue is caused by improper length computation of the allocated data of an ExifMnote entry, which can lead to denial-of-service or possibly information disclosure.

Version 1.0.46-1 of pure-ftpd shipped in Fedora was vulnerable to a packaging error that caused the original configuration to be ignored after an update, resulting in the service running with the default configuration.

The Tapatalk plugin before version 4.5.8 for MyBB contains an SQL injection vulnerability in mobiquo/lib/classTTForum.php, allowing an unauthenticated remote attacker to inject arbitrary SQL commands via an XML-RPC encoded document sent during the user registration process.

A Remote Code Execution vulnerability has been found in the Horde_Image library when using the 'Im' backend with ImageMagick's 'convert' utility. It is not exploitable through any Horde application, but custom applications using the Horde_Image library might be affected.

A global buffer overflow was discovered in the iteration_loop function in loop.c in BladeEnc version 0.94.2. The vulnerability causes an out-of-bounds write, which leads to remote denial of service or possibly code execution.

A heap-based buffer overflow was discovered in AP4_VisualSampleEntry::ReadFields in Bento4 version 1.5.0-617. The vulnerability causes an out-of-bounds write, which leads to remote denial of service or possibly code execution.

The AP4_AvccAtom and AP4_HvccAtom classes in Bento4 version 1.5.0-617 do not properly validate data sizes, leading to a heap-based buffer over-read and application crash in AP4_DataBuffer::SetData.

A heap-based buffer overflow was discovered in the AP4_HdlrAtom class in Bento4 1.5.0-617. The vulnerability causes an out-of-bounds write, which leads to remote denial of service or possibly code execution.

The AP4_VisualSampleEntry::ReadFields function in Bento4 1.5.0-617 has an error in the use of character data types, leading to a stack-based buffer underflow and out-of-bounds write. This may result in application crashes or other unspecified impacts.