8230 matches found
Tencent WeChat WXAM Decoder Heap-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tencent WeChat. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the WXAM decoder. T...
Adobe Bridge out-of-bounds write vulnerability (CNVD-2022-50224)
Adobe Bridge, a file viewer from Adobe, is vulnerable to an out-of-bounds write vulnerability. An attacker could use this vulnerability to execute arbitrary code in the context of the current user...
Adobe Bridge out-of-bounds write vulnerability (CNVD-2022-50226)
Adobe Bridge is a file viewer from Adobe. Adobe Bridge is vulnerable to an out-of-bounds write vulnerability that could be exploited to execute arbitrary code in the context of the current user...
Adobe Illustrator out-of-bounds write vulnerability (CNVD-2022-50221)
An out-of-bounds write vulnerability exists in Adobe Illustrator, a vector-based image creation software from Adobe. An attacker could use this vulnerability to execute arbitrary code in the context of the current user...
Adobe Bridge out-of-bounds write vulnerability (CNVD-2022-50227)
Adobe Bridge is a file viewer from Adobe. Adobe Bridge is vulnerable to an out-of-bounds write vulnerability that could be exploited to execute arbitrary code in the context of the current user...
Adobe Illustrator Resource Management Error Vulnerability (CNVD-2022-50220)
Adobe Illustrator, a vector-based image creation software from Adobe, is vulnerable to a resource management error. An attacker could use this vulnerability to execute arbitrary code in the context of the current user...
Adobe InDesign Heap Buffer Overflow Vulnerability (CNVD-2022-50228)
Adobe InDesign is a set of typesetting and editing applications from Adobe. Adobe InDesign is vulnerable to a heap buffer overflow vulnerability that could be exploited by an attacker to execute arbitrary code in the context of the current user...
[slackware-security] mozilla-firefox
New mozilla-firefox packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/mozilla-firefox-91.11.0esr-i686-1slack15.0.txz: Upgraded. This update contains security fixes and improvements. For more...
GSD-2022-1002898 sysrq: do not omit current cpu when showing backtrace of all active CPUs
sysrq: do not omit current cpu when showing backtrace of all active CPUs This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.15 by commit...
Issue with TWAV calculation.
Lines of code Vulnerability details Impact To calculate time weighted average value, current valuation is used. This is not appropriate way to decide the TWAV while other locations considers only time. This might not be the stable one. Proof of Concept uint256 currentValuation =...
Adobe Bridge Resource Management Error Vulnerability (CNVD-2022-48773)
Adobe Bridge is a file viewer from Adobe, which is vulnerable to resource management errors. An attacker could use this vulnerability to execute arbitrary code in the context of the current user...
Adobe InDesign out-of-bounds write vulnerability (CNVD-2022-48770)
An out-of-bounds write vulnerability exists in Adobe InDesign, a set of typesetting and editing applications from Adobe. An attacker could use this vulnerability to execute arbitrary code in the context of the current user...
Adobe InDesign out-of-bounds write vulnerability (CNVD-2022-48767)
An out-of-bounds write vulnerability exists in Adobe InDesign, a set of typesetting and editing applications from Adobe. An attacker could use this vulnerability to execute arbitrary code in the context of the current user...
Adobe Bridge out-of-bounds write vulnerability (CNVD-2022-48779)
Adobe Bridge is a file viewer from Adobe, Inc. An out-of-bounds write vulnerability exists in Adobe Bridge, which could be exploited to execute arbitrary code in the context of the current user...
PT-2022-3444
Name of the Vulnerable Software and Affected Versions Vim versions prior to 8.2 Description The issue is related to a buffer over-read in the Vim text editor, specifically in the current quote function located in textobject.c. This can be exploited by a remote attacker to execute arbitrary code...
SAP 3D Visual Enterprise Viewer U3D File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of SAP 3D Visual Enterprise Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...
Adobe InCopy heap buffer overflow vulnerability
Adobe InCopy is a text editing software for authoring from Adobe U.S. A heap buffer overflow vulnerability exists in Adobe InCopy, which could be exploited by an attacker to execute arbitrary code in the context of the current user...
Adobe InCopy Resource Management Error Vulnerability (CNVD-2022-48786)
Adobe InCopy is a text editing software for authoring from Adobe U.S. A resource management error vulnerability exists in Adobe InCopy, which could be exploited by attackers to execute arbitrary code in the context of the current user...
CVE-2022-30328
An issue was found on TRENDnet TEW-831DR 1.0 601.130.1.1356 devices. The username and password setup for the web interface does not require entering the existing password. A malicious user can change the username and password of the interface...