Zenofex

The issue is caused by a failure in validating the number of scanline samples of a OpenEXR file containing deep scanline data, leading to a heap-based buffer overflow. This allows a remote attacker to read or write arbitrary data. The vulnerability was resolved in versions v3.2.2 and v3.1.12 of the affected library.

The issue is related to a divide by zero error in the CP2179 component of Wireshark, which can be exploited by a remote attacker to cause a denial of service. This occurs due to a failure in validating the length provided by an attacker-crafted CP2179 packet.

The issue arises from a failure to validate the length of a provided MQTT CMD PUBLISH parsed message with a variable length header, leading to a heap-based buffer overflow vulnerability in the default configuration.

The issue is related to a failure in validating the length provided by an attacker-crafted PPD PostScript document, making CUPS and libppd susceptible to a heap-based buffer overflow and possibly code execution. This can be exploited by an attacker to potentially elevate privileges and execute arbitrary code.

The issue arises from a failure to validate the length of an attacker-crafted MSMMS packet, leading to a heap-based buffer overflow. This could result in code execution within the context of the process running the affected software. The issue is particularly relevant in unusual configurations.

The issue arises from a failure to validate the length provided by an attacker-crafted IEEE-C37.118 packet, making Wireshark susceptible to a heap-based buffer overflow, and possibly code execution in the context of the process running Wireshark.

vBulletin 5.5.4 through 5.6.2 allows remote command execution via crafted subWidgets data in an ajax/render/widget tabbedcontainer tab panel request. NOTE: this issue exists because of an incomplete fix for CVE-2019-16759. ALSO NOTE: CVE-2020-7373 is a duplicate of CVE-2020-17496. CVE-2020-17496 is the preferred CVE ID to track this vulnerability.

The issue allows remote command execution via crafted subWidgets data in an "ajax/render/widget tabbedcontainer tab panel" request. This is due to an incomplete fix for a previous issue. The vulnerability can be exploited by a remote attacker to execute arbitrary commands. It has been reported that this issue is being actively exploited in the wild.

An issue in the web administration component allows for multipart upload functionality to be accessible without authentication. This is specifically related to the "/web/jquery/uploader/multi uploadify.php" endpoint, which can be used to place a file anywhere on the device's file system. As a result, an attacker can upload a PHP shell onto the device and obtain arbitrary code execution as root. The vulnerability is related to deficiencies in the authentication procedure of the web interface.