CVE-2023-21588 Adobe InDesign Improper Input Validation Remote Code Execution Vulnerability

Adobe InDesign version 18.0 and earlier, 17.4 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

PT-2023-1033 · Adobe · Incopy

Name of the Vulnerable Software and Affected Versions: Adobe InCopy versions 18.0 and earlier Adobe InCopy versions 17.4 and earlier Description: The issue is related to a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability...

PT-2023-1032 · Adobe · Incopy

Name of the Vulnerable Software and Affected Versions: Adobe InCopy versions 18.0 and earlier Adobe InCopy versions 17.4 and earlier Description: The issue is related to improper input validation, which could result in arbitrary code execution in the context of the current user. Exploitation of...

PT-2023-1030 · Adobe · Incopy

Name of the Vulnerable Software and Affected Versions: Adobe InCopy versions 18.0 and earlier Adobe InCopy versions 17.4 and earlier Description: The issue is related to an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this...

Cross site scripting

IBM Business Automation Workflow 18.0, 19.0, 20,0 and 21.0 and IBM Business Process Manager 8.5 and 8.6 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to...

NI Service Locator 代码问题漏洞

NI Service Locator is the NI Service Locator stores registered services and returns data to the client requesting the service. A security vulnerability exists in NI Service Locator versions prior to 18.0 that allows a local user to insert arbitrary code into an unquoted service path and elevate...

CVE-2021-29835

IBM Business Automation Workflow (IBM Cloud Pak for Business Automation) is affected by CVE-2021-29835: cross-site scripting in the Web UI for versions 18.0–21.0. The root cause is improper handling of UI input leading to JavaScript injection, with potential credential exposure in a trusted sessi...

CVE-2021-41390

In Ericsson ECM before 18.0, it was observed that Security Provider Endpoint in the User Profile Management Section is vulnerable to CSV Injection...

CVE-2019-20916 affecting package python-pip 18.0-5

CVE-2019-20916 affecting package python-pip 18.0-5. An upgraded version of the package is available that resolves this issue...

Security Bulletin: Information disclosure and Denial of Service vulnerability affect IBM Business Automation Workflow and IBM Business Process Manager (BPM) - CVE-2020-4794

Summary The optional component Process Federation Server that is shipped with IBM Business Process Manager and IBM Business Automation Workflow is vulnerable to a information disclosure and denial of service attack. Vulnerability Details CVEID: CVE-2020-4794 DESCRIPTION: IBM Process Federation...

IBM Business Process Manager and IBM Business Automation Workflow Cross-Site Scripting Vulnerability (CNVD-2020-54677)

IBM Business Process Manager BPM and IBM Business Automation Workflow are both products of IBM Corporation, U.S.A. IBM Business Process Manager is a comprehensive business process management platform. The platform provides a series of related tools for business process modeling, assembly,...

CVE-2020-14708

Vulnerability in the Customer Management and Segmentation Foundation product of Oracle Retail Applications component: Segment. Supported versions that are affected are 16.0, 17.0 and 18.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

CVE-2020-12271: Sophos XG Firewall Pre-Auth SQL Injection Vulnerability

A SQL injection issue was found in SFOS 17.0, 17.1, 17.5, and 18.0 before 2020-04-25 on Sophos XG Firewall devices, as exploited in the wild in April 2020. This affected devices configured with either the administration HTTPS service or the User Portal exposed on the WAN zone. A successful attack...

Buffer overflow

Vulnerability in the Oracle Retail Customer Management and Segmentation Foundation product of Oracle Retail Applications component: Promotions. The supported version that is affected is 18.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi...

Buffer overflow

Vulnerability in the Oracle Retail Customer Management and Segmentation Foundation product of Oracle Retail Applications component: Security. The supported version that is affected is 18.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise...

CVE-2019-4424

CVE-2019-4424 is an XML External Entity (XXE) vulnerability affecting IBM Business Automation Workflow and IBM BPM. The IBM Security Bulletin lists affected products/versions: IBM Business Automation Workflow 18.0.0.0–18.0.0.2 and 19.0.0.1–19.0.0.2; IBM BPM up to several earlier CF fixes. The roo...

Rockwell Automation 1336 PLUS Drive 18.0 A, 230V 1336S-AQF50 Smart MCC

Binary data 754131.prm...

Rockwell Automation 1336 PLUS II Drv 18.0 A, 230V 1336F-AQF50 Smart MCC

Binary data 754133.prm...

Intel Quartus Prime Elevation of Privilege Vulnerability

Intel Quartus Prime is a suite of software for hardware programming from the American company Intel Intel. A security vulnerability exists in Intel Quartus Prime versions 15.1 through 18.0. A local attacker can exploit the vulnerability to execute arbitrary code...

Intel Quartus Prime Programmer and Tools Elevation of Privilege Vulnerability

Intel Quartus Prime Programmer and Tools is a hardware programming tool from Intel USA. A security vulnerability exists in Intel Quartus Prime Programmer and Tools versions 15.1 through 18.0. A local attacker can exploit the vulnerability to execute arbitrary code...