ZDI Advisories

Sony XAV-9500ES Crash Dump Handler Command Injection Local Privilege Escalation Vulnerability

WatchGuard FireWare OS sigd comp_start_cb Directory Traversal Arbitrary File Creation Vulnerability

Adminer multi_query Incorrect Check of Function Return Value Remote Code Execution Vulnerability

GIMP TIF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

Heimdall Data Database Proxy uploadJar Directory Traversal Remote Code Execution Vulnerability

GIMP TIF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

OSNEXUS QuantaStor Missing Authentication Remote Code Execution Vulnerability

GIMP PSD File Parsing Integer Overflow Remote Code Execution Vulnerability

NoMachine

Kenwood DNR1007XR Firmware Update Link Following Code Execution Vulnerability

NoMachine getstat Command Injection Remote Code Execution Vulnerability

Progress Software Kemp LoadMaster enablexroot Use of Hard-Coded Cryptographic Key Privilege Escalation Vulnerability

Progress Software Kemp LoadMaster access Missing Authorization Privilege Escalation Vulnerability

Kenwood DNR1007XR JKGenService Command Injection Local Privilege Escalation Vulnerability

Kenwood DNR1007XR USB Incorrect Default Permissions Local Privilege Escalation Vulnerability

LangGenius

Apple macOS ImageIO Numeric Truncation Remote Code Execution Vulnerability

Apple macOS USD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

WatchGuard FireWare OS networkd network_wireless_kick_off_user_cb Stack-based Buffer Overflow Remote Code Execution Vulnerability

Kenwood DNR1007XR vCardParser Heap-based Buffer Overflow Code Execution Vulnerability

Apple macOS USD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

Kenwood DNR1007XR udhcpd Incorrect Permission Assignment Local Privilege Escalation Vulnerability

Apple macOS CoreAudio Out-Of-Bounds Write Remote Code Execution Vulnerability

Kenwood DNR1007XR startUpdateProcess Command Injection Vulnerability

Kenwood DNR1007XR tchdr_bytestream_read Out-Of-Bounds Write Code Execution Vulnerability

VMware ESXi VMXNET3 espQueueMask Out-Of-Bounds Write Local Privilege Escalation Vulnerability

Thanos

Netdata

Trend Micro

Oracle