Category Archives: Advisories

CVE-2021-40164

October 7, 2022

Read Time:7 Second

A heap-based buffer overflow could occur while parsing TIFF, PICT, TGA, or RLC files. This vulnerability may be exploited to execute arbitrary code.

Advisories

CVE-2021-40165

October 7, 2022

Read Time:12 Second

A maliciously crafted TIFF, PICT, TGA, or RLC file in Autodesk Image Processing component may be used to write beyond the allocated buffer while parsing TIFF, PICT, TGA, or RLC files. This vulnerability may be exploited to execute arbitrary code.

Advisories

CVE-2021-40166

October 7, 2022

Read Time:12 Second

A maliciously crafted PNG file in Autodesk Image Processing component may be used to attempt to free an object that has already been freed while parsing them. This vulnerability may be exploited by attackers to execute arbitrary code.

Advisories

CVE-2022-21936

October 7, 2022

Read Time:8 Second

On Metasys ADX Server version 12.0 running MVE, an Active Directory user could execute validated actions without providing a valid password when using MVE SMP UI.

Advisories

CVE-2020-15855

October 7, 2022

Read Time:4 Second

Two cross-site scripting vulnerabilities were fixed in Bodhi 5.6.1.

Advisories

CVE-2022-22493

October 7, 2022

Read Time:9 Second

IBM WebSphere Automation for Cloud Pak for Watson AIOps 1.4.2 is vulnerable to cross-site request forgery, caused by improper cookie attribute setting. IBM X-Force ID: 226449.

Advisories

CVE-2022-22480

October 7, 2022

Read Time:9 Second

IBM QRadar SIEM 7.4 and 7.5 data node rebalancing does not function correctly when using encrypted hosts which could result in information disclosure. IBM X-Force ID: 225889.

Advisories