John Leitch

The issue is related to a stack-based buffer overflow in the .NET Data Provider, allowing remote attackers to execute arbitrary code via a crafted column alias. This can lead to code execution vulnerabilities.

The issue is related to a buffer overflow in the `FPDFBookmark GetTitle` method, allowing context-dependent attackers to execute arbitrary code.

A use-after-free issue exists in the way SumatraPDF Reader handles objects in memory, allowing remote attackers to execute arbitrary code via a crafted PDF file. This could enable an attacker to gain the same user rights as the current user. If the current user has administrative rights, an attacker could take complete control of the affected system.

The issue allows remote attackers to execute arbitrary code via a PDF document with a crafted attachment. This is triggered by the calculation of a negative number during the processing of cross references.

The issue concerns multiple vulnerabilities in the eXtplorer package of the Debian GNU/Linux operating system, which can be exploited remotely to compromise the confidentiality, integrity, and availability of protected information. Specifically, a cross-site request forgery (CSRF) vulnerability allows remote attackers to hijack the authentication of administrators for requests that add an administrator account via an `adduser` admin action.

A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the `id` parameter in the "confirm.php" file.

The issue is related to a cross-site scripting (XSS) vulnerability. It allows remote attackers to inject arbitrary web script or HTML via the `gid` parameter in the vodpod-gallery/vodpod gallery thumbs.php file.

A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML via the `modhash` parameter in the "manager/index.php" endpoint.

The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the `type` parameter in the "doadd.php" file.

A directory traversal issue allows remote attackers to read arbitrary files via ..%2f (encoded dot dot) sequences in the `file` parameter. This issue is present in the framework/source/resource/qx/test/part/delay.php file.

The issue allows remote attackers to read arbitrary files due to a directory traversal vulnerability in the wp-download.php file. This is achieved by using ..%2F (encoded dot dot) sequences in the `url` parameter.

The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the `pdfa` parameter in the plugins/pdfClasses/pdfgen.php plugin.

The issue is related to a cross-site scripting (XSS) vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the `f` parameter in the nuedit.php file.

A cross-site scripting (XSS) issue exists in the Headlines module, specifically in the magpie debug.php script, which allows remote attackers to inject arbitrary web script or HTML via the `url` parameter when the Headlines module is enabled.

A cross-site scripting (XSS) issue exists, allowing remote attackers to inject arbitrary web script or HTML via the `n-cat` parameter in the news show.php file.

The issue allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the `dir` parameter of the fileuploader.php script.

A cross-site scripting (XSS) issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the `s` parameter in the admin/editors/text/editor-body.php file.

The issue allows remote attackers to execute arbitrary code by uploading a file with an executable extension to the admin/code/tce functions tcecode editor.php file, then accessing it via a direct request to the file in cache/.

A cross-site request forgery (CSRF) issue allows remote attackers to hijack user authentication for requests that change passwords via the pbxadmin.web.PbxUserEdit bean.

The issue concerns multiple cross-site request forgery (CSRF) vulnerabilities. These vulnerabilities allow remote attackers to hijack the authentication of administrators for requests that change passwords. The affected API endpoints include "apsetup.php", "psetup.php", "sslpsetup.php", and "mqsetup.php".