Joseph Sheridan

A Privilege Escalation issue exists in the SDBagent service, which could allow a local malicious user to obtain privileges.

A Privilege Escalation issue exists in the unquoted Service Binary in SDPAgent or SDBAgent, which could allow a local malicious user to obtain privileges.

The issue allows remote authenticated users to execute arbitrary SQL commands. This is achieved via the `sort` parameter in the modules/calendar/json.php file.

The issue is related to a stack-based buffer overflow that allows remote attackers to execute arbitrary code. This is achieved through a crafted ZIP file that triggers incorrect processing of long pathnames by the Watch Folders feature.

The issue is related to a heap-based buffer overflow in the xjpegls.dll format plugin, which handles JLS (JPEG-LS or JPEG lossless) images. This allows remote attackers to execute arbitrary code via a crafted JLS image file.

The issue is related to a buffer overflow in the readstr upto function, which can be exploited by remote attackers to execute arbitrary code. This is achieved by sending a long string in a command to the script-fu server.