CVE Vulnerability Catalog

Memory corruption vulnerability in OriginLab Origin Viewer OGW file parsing allows remote code execution. Lack of proper validation of user-supplied data leads to memory corruption. User interaction is required, such as visiting a malicious page or opening a malicious file.

Out-of-bounds write in OriginLab Origin Viewer OPJ file parsing allows remote code execution. Lack of proper validation of user-supplied data leads to write past the end of an allocated data structure. User interaction is required, such as visiting a malicious page or opening a malicious file.

Memory corruption vulnerability in OriginLab OriginPro OGG file parsing allows remote code execution. Lack of proper validation of user-supplied data leads to memory corruption. User interaction is required, such as visiting a malicious page or opening a malicious file.

Memory corruption vulnerability in OriginLab OriginPro OGW file parsing allows remote code execution. Lack of proper validation of user-supplied data leads to memory corruption. User interaction is required, such as visiting a malicious page or opening a malicious file.

Out-of-bounds write in OriginLab OriginPro OGG file parsing allows remote code execution. Lack of proper validation of user-supplied data leads to write past the end of an allocated data structure. User interaction is required, such as visiting a malicious page or opening a malicious file.

Vulnerability in OriginLab OriginPro during parsing of OPJ files allows remote code execution. Lack of user data validation leads to a write past the end of an allocated data structure. User interaction is required, such as opening a malicious file.

Vulnerability in OriginLab OriginPro during parsing of OPJU files allows remote code execution. Lack of user data validation leads to a write past the end of an allocated data structure. User interaction is required, such as opening a malicious file.

Vulnerability in the aeon library in the load_time_series_segmentation_benchmark method allows remote code execution via Python code injection. Lack of string validation before using it to execute code. User interaction is required.

Vulnerability in the aeon library in the load_human_activity_segmentation_datasets method allows remote code execution via Python code injection. Lack of string validation before using it to execute code. User interaction is required.

Vulnerability in the Aeon library in the load_rehab_pile_dataset method allows remote code execution via deserialization of untrusted data. Lack of user data validation leads to deserialization of untrusted objects. User interaction is required.

Vulnerability in Sony XAV-9500ES device in crash dump handling allows local privilege escalation via command injection. Lack of string validation before using it in a system call. Requires low-privileged access to the system.

Vulnerability in Sony XAV-9500ES device in AVRCP_Br_Response_Parser allows remote code execution via heap-based buffer overflow. Lack of length validation before copying data to a buffer. Requires pairing a malicious Bluetooth device.

Vulnerability in Sony XAV-9500ES device in l2_reassemble_sdu allows remote code execution via heap-based buffer overflow. Lack of length validation before copying data to a buffer. Requires pairing a malicious Bluetooth device.

Vulnerability in Sony XAV-9500ES device in handling of RTSP SETUP packets allows remote code execution via buffer overflow. Lack of length validation before copying data to a fixed-length buffer. Authentication is not required.

Vulnerability in Heimdall Data Database Proxy in the uploadJar method allows remote code execution via directory traversal. Lack of path validation before using it in file operations. Authentication is required.

Vulnerability in Kenwood DNR1007XR in the udhcpd service is due to incorrect permissions set on a resource. A local attacker can exploit this flaw to escalate privileges and execute code in the context of root.

Vulnerability in Kenwood DNR1007XR in the JKGenService is due to lack of proper validation of a user-supplied string before using it to execute a system call. A local attacker can exploit this flaw to escalate privileges and execute arbitrary code in the context of root.

Vulnerability in NoMachine in the getstat service is due to lack of proper validation of a user-supplied string before using it to execute a system call. A remote authenticated attacker can exploit this flaw to execute arbitrary code in the context of the service account.

Vulnerability in Parallels RAS Client in the RDP Backend Service is due to an exposed dangerous function. A local attacker can exploit this flaw to escalate privileges and execute arbitrary code in the context of SYSTEM.

Vulnerability in Parallels RAS Client in the RDP Backend Service is due to an exposed dangerous function. A local attacker can exploit this flaw to escalate privileges and execute arbitrary code in the context of SYSTEM.