ZDI Advisories

OSNEXUS QuantaStor Missing Authentication Remote Code Execution Vulnerability

Progress Software Kemp LoadMaster access Missing Authorization Privilege Escalation Vulnerability

Heimdall Data Database Proxy uploadJar Directory Traversal Remote Code Execution Vulnerability

Sony XAV-9500ES Crash Dump Handler Command Injection Local Privilege Escalation Vulnerability

Aeon load_rehab_pile_dataset Deserialization of Untrusted Data Remote Code Execution Vulnerability

GStreamer rtpsbcdepay Use-After-Free Remote Code Execution Vulnerability

Sony XAV-9500ES RTSP SETUP Buffer Overflow Remote Code Execution Vulnerability

Sony XAV-9500ES gpsd Buffer Overflow Arbitrary Code Execution Vulnerability

Kenwood DNR1007XR JKGenService Command Injection Local Privilege Escalation Vulnerability

Kenwood DNR1007XR tchdr_bytestream_read Out-Of-Bounds Write Code Execution Vulnerability

Kenwood DNR1007XR Firmware Update Link Following Code Execution Vulnerability

Kenwood DNR1007XR udhcpd Incorrect Permission Assignment Local Privilege Escalation Vulnerability

GStreamer OGG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

Aeon load_time_series_segmentation_benchmark Code Injection Remote Code Execution Vulnerability

Kenwood DNR1007XR vCardParser Heap-based Buffer Overflow Code Execution Vulnerability

Sony XAV-9500ES prh_l2_decode_packet Out-Of-Bounds Read Information Disclosure Vulnerability

Aeon load_human_activity_segmentation_datasets Code Injection Remote Code Execution Vulnerability

GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerability

Sony XAV-9500ES l2_reassemble_sdu Heap-based Buffer Overflow Remote Code Execution Vulnerability

GStreamer MRF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerability

GStreamer PNG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

Progress Software Kemp LoadMaster enablexroot Use of Hard-Coded Cryptographic Key Privilege Escalation Vulnerability

GStreamer MRF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

NoMachine getstat Command Injection Remote Code Execution Vulnerability

GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerability

GIMP SGI File Parsing Integer Overflow Remote Code Execution Vulnerability

Docker

NoMachine

Kenwood DNR1007XR startUpdateProcess Command Injection Vulnerability