Zenofex

O problema é causado por uma falha na validação do número de amostras de linha de varredura de um arquivo OpenEXR que contém dados de linha de varredura profunda, levando a um estouro de buffer baseado na pilha. Isso permite que um invasor remoto leia ou grave dados arbitrários. A vulnerabilidade foi corrigida nas versões v3.2.2 e v3.1.12 da biblioteca afetada.

The issue is related to a divide by zero error in the CP2179 component of Wireshark, which can be exploited by a remote attacker to cause a denial of service. This occurs due to a failure in validating the length provided by an attacker-crafted CP2179 packet.

The issue arises from a failure to validate the length of a provided MQTT CMD PUBLISH parsed message with a variable length header, leading to a heap-based buffer overflow vulnerability in the default configuration.

The issue is related to a failure in validating the length provided by an attacker-crafted PPD PostScript document, making CUPS and libppd susceptible to a heap-based buffer overflow and possibly code execution. This can be exploited by an attacker to potentially elevate privileges and execute arbitrary code.

The issue arises from a failure to validate the length of an attacker-crafted MSMMS packet, leading to a heap-based buffer overflow. This could result in code execution within the context of the process running the affected software. The issue is particularly relevant in unusual configurations.

The issue arises from a failure to validate the length provided by an attacker-crafted IEEE-C37.118 packet, making Wireshark susceptible to a heap-based buffer overflow, and possibly code execution in the context of the process running Wireshark.

vBulletin 5.5.4 through 5.6.2 allows remote command execution via crafted subWidgets data in an ajax/render/widget tabbedcontainer tab panel request. NOTE: this issue exists because of an incomplete fix for CVE-2019-16759. ALSO NOTE: CVE-2020-7373 is a duplicate of CVE-2020-17496. CVE-2020-17496 is the preferred CVE ID to track this vulnerability.

A vulnerabilidade permite a execução remota de comandos por meio de dados subWidgets manipulados em uma solicitação “ajax/render/widget tabbedcontainer tab panel”. Isso se deve a uma correção incompleta de uma vulnerabilidade anterior. A vulnerabilidade pode ser explorada por um invasor remoto para executar comandos arbitrários. Foi relatado que essa vulnerabilidade está sendo ativamente explorada na natureza.

An issue in the web administration component allows for multipart upload functionality to be accessible without authentication. This is specifically related to the "/web/jquery/uploader/multi uploadify.php" endpoint, which can be used to place a file anywhere on the device's file system. As a result, an attacker can upload a PHP shell onto the device and obtain arbitrary code execution as root. The vulnerability is related to deficiencies in the authentication procedure of the web interface.