16480 matches found
CVE-2021-40386
Kaseya Unitrends Client/Agent through 10.5,5 allows remote attackers to execute arbitrary code...
CVE-2021-40386
Kaseya Unitrends Client/Agent through 10.5,5 allows remote attackers to execute arbitrary code...
PayloadCMS arbitrary file upload vulnerability
PayloadCMS is a Headless CMS and application framework built using TypeScript, Node.js, React and MongoDB.PayloadCMS is vulnerable to arbitrary file uploads, which can be exploited by attackers to execute arbitrary code via crafted SVG files...
Notable path traversal vulnerabilities
Notable is a Markdown-based note-taking software with cross-platform support from the individual developers of Notable. A path traversal vulnerability exists in Notable-insiders that stems from incorrect validation of the file URI scheme. Hyperlinks pointing to SMB shares could lead to the...
Adobe After Effects Buffer Overflow Vulnerability (CNVD-2022-67848)
Adobe After Effects is a suite of visual effects and motion graphics software from Adobe. Adobe After Effects is vulnerable to a buffer overflow vulnerability that could be exploited by attackers to execute arbitrary code in the context of the current user...
Adobe Photoshop out-of-bounds write vulnerability (CNVD-2022-52087)
Adobe Photoshop is a set of image processing software from the American company Adobe. An out-of-bounds write vulnerability exists in Adobe Photoshop. An attacker could use this vulnerability to execute arbitrary code in the context of the current user...
Adobe Photoshop out-of-bounds write vulnerability (CNVD-2022-42168)
Adobe Photoshop is a set of image processing software from Adobe. Adobe Photoshop is vulnerable to an out-of-bounds write vulnerability. An attacker could exploit the vulnerability to execute code in the context of the current user...
CVE-2022-27475
Cross site scripting XSS vulnerability in tramyardg hotel-mgmt-system, allows attackers to execute arbitrary code when when /admin.php is loaded...
Unrestricted Upload of File with Dangerous Type in Strapi
An arbitrary file upload vulnerability in the file upload module of Strapi v4.1.5 allows attackers to execute arbitrary code via a crafted file...
GHSA-FFHQ-G856-9F2P Arbitrary file upload in Ghost
An arbitrary file upload vulnerability in the file upload module of Ghost CMS v4.42.0 allows attackers to execute arbitrary code via a crafted file...
Arbitrary file upload in Ghost
An arbitrary file upload vulnerability in the file upload module of Ghost CMS v4.42.0 allows attackers to execute arbitrary code via a crafted file...
Samsung SMR Heap Buffer Overflow Vulnerability
Samsung SMR is a system patch package from South Korea's Samsung Samsung. Samsung SMR contains a heap buffer overflow vulnerability that can be exploited by attackers to execute code...
Samsung SMR Heap Buffer Overflow Vulnerability (CNVD-2022-63656)
Samsung SMR is a system patch package from South Korea's Samsung Samsung. Samsung SMR contains a heap buffer overflow vulnerability that can be exploited by attackers to execute code...
Adobe Flash Player Use-After-Free Vulnerability
Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 AS3 implementation in Adobe Flash Player allows remote attackers to execute code or cause a denial-of-service DoS...
Samsung SMR Heap Buffer Overflow Vulnerability (CNVD-2022-63658)
Samsung SMR is a system patch package from South Korea's Samsung Samsung. Samsung SMR contains a heap buffer overflow vulnerability that can be exploited by attackers to execute code...
CVE-2022-27263
An arbitrary file upload vulnerability in the file upload module of Strapi v4.1.5 allows attackers to execute arbitrary code via a crafted file...
Design/Logic Flaw
An arbitrary file upload vulnerability in the file upload module of PayloadCMS v0.15.0 allows attackers to execute arbitrary code via a crafted SVG file...
Design/Logic Flaw
An arbitrary file upload vulnerability in the file upload module of Skipper v0.9.1 allows attackers to execute arbitrary code via a crafted file...