CVE-2024-55918: Improper Control of Generation of Code

An issue was discovered in the Graphics::ColorNames package before 3.2.0 for Perl. There is an ambiguity between modules and filenames that can lead to HTML injection by an attacker who can create a file in the current working directory...

PT-2024-36610 · Unknown · Graphics::Colornames

Name of the Vulnerable Software and Affected Versions: Graphics::ColorNames versions prior to 3.2.0 Description: The issue is related to an ambiguity between modules and filenames in the Graphics::ColorNames package for Perl, which can lead to HTML injection by an attacker who can create a file i...

CVE-2024-28143

The Image Access Scan2Net software (versions 7.40 and earlier , 7.42 and earlier , and 7.42B and earlier ) contains a vulnerability in its password change function at /cgi/admin.cgi . The root cause is that the application fails to require the current or old password during a password change. Thi...

CVE-2024-53959

Adobe Framemaker versions 2020.7, 2022.5 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2024-52990

Animate versions 23.0.8, 24.0.5 and earlier are affected by a Buffer Underwrite 'Buffer Underflow' vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could leverage this vulnerability to manipulate memory in such a way that they could execu...

Siemens Solid Edge 数字错误漏洞

Solid Edge is a portfolio of software tools to address a variety of product development processes: 3D design, simulation, manufacturing and design management. Siemens Solid Edge V2024 suffers from an integer underflow vulnerability that can be exploited by an attacker to execute code in the conte...

Adobe InDesign 安全漏洞

Adobe InDesign is a set of layout and editing applications from the American company Audobee Adobe. Adobe InDesign suffers from a stack buffer overflow vulnerability that can be exploited by an attacker to execute arbitrary code in the current user's environment...

Adobe Animate 数字错误漏洞

Adobe Animate is a set of Flash animation software from the American company Audobee Adobe. Adobe Animate suffers from an integer latency vulnerability that can be exploited by an attacker to execute arbitrary code in the current user's environment...

Adobe Substance 3D Modeler 缓冲区错误漏洞

Adobe Substance 3D Modeler is a 3D modeling and sculpting software from the American company Audobee Adobe. Adobe Substance 3D Modeler suffers from an out-of-bounds write vulnerability that can be exploited by an attacker to execute arbitrary code in the context of the current user...

Siemens Solid Edge 安全漏洞

Solid Edge is a portfolio of software tools to address a variety of product development processes: 3D design, simulation, manufacturing and design management. Siemens Solid Edge V2024 suffers from a heap buffer overflow vulnerability that can be exploited by an attacker to execute code in the...

Adobe Substance 3D Painter 缓冲区错误漏洞

Adobe Substance 3D Painter is a 3D texturing application from the American company Audobee Adobe. Adobe Substance 3D Painter suffers from an out-of-bounds write vulnerability that can be exploited by an attacker to execute arbitrary code in the context of the current user...

Adobe Substance 3D Modeler 安全漏洞

Adobe Substance 3D Modeler is a 3D modeling and sculpting software from the American company Audobee Adobe. Adobe Substance 3D Modeler suffers from a heap buffer overflow vulnerability that can be exploited by an attacker to execute arbitrary code in the context of the current user...

Adobe Animate 数字错误漏洞

Adobe Animate is a set of Flash animation software from the American company Audobee Adobe. Adobe Animate suffers from an integer latency vulnerability that can be exploited by an attacker to execute arbitrary code in the current user's environment...

Adobe Substance 3D Modeler 缓冲区错误漏洞

Adobe Substance 3D Modeler is a 3D modeling and sculpting software from the American company Audobee Adobe. Adobe Substance 3D Modeler suffers from an out-of-bounds write vulnerability that can be exploited by an attacker to execute arbitrary code in the context of the current user...

Adobe Substance 3D Sampler 缓冲区错误漏洞

Adobe Substance 3D Sampler is a photogrammetry software from the American company Audobee Adobe. It is used to convert photo captures and scanned images into 3D textures and material assets. Adobe Substance 3D Sampler suffers from an out-of-bounds write vulnerability that can be exploited by an...

Adobe Experience Manager 输入验证错误漏洞

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. An inp...

GHSA-4FH7-M2WX-6WFM Firepad allows insecure document access

Firepad through 1.5.11 allows remote attackers, who have knowledge of a pad ID, to retrieve both the current text of a document and all content that has previously been pasted into the document. NOTE: in several similar products, this is the intentional behavior for anyone who knows the full...

PT-2024-34563 · Firepad · Firepad

Name of the Vulnerable Software and Affected Versions: Firepad versions 1.5.11 and earlier Description: The issue allows remote attackers, who have knowledge of a pad ID, to retrieve both the current text of a document and all content that has previously been pasted into the document. This behavi...

Firepad 安全漏洞

Firepad is an open source collaborative code and text editor from FirebaseExtended Open Source. A security vulnerability exists in Firepad 1.5.11 and earlier versions, which stems from a vulnerability that allows a remote attacker who knows the pad ID to retrieve the current text of a document, a...

Account Takeover

zenml is vulnerable to Account Takeover. The vulnerability is due to a lack of rate-limiting on the '/api/v1/current-user' endpoint, which allows attackers to brute-force the current password in the 'Update Password' function...