34 matches found
CVE-2024-51506
Tiki through 27.0 allows users who have certain permissions to insert a "Create a Wiki Pages" stored XSS payload in the description...
WordPress Visual Composer Website Builder Plugin <= 26.0 is vulnerable to Cross Site Scripting (XSS)
Software Visual Composer Website Builder Type Plugin Vulnerable versions = 26.0 Fixed in 27.0 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2020-36722 Patch priority Low CVSS severity Low 5.4 Developer Visual Composer PSID 94fc9a4ee237 Credits Jerome...
CVE-2022-44502 Adobe Illustrator Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
Adobe Illustrator versions 26.5.1 and earlier, and 27.0 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user...
CVE-2022-44499
Adobe Illustrator versions 26.5.1 and earlier, and 27.0 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user...
CVE-2022-44502
Adobe Illustrator versions 26.5.1 and earlier, and 27.0 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user...
Adobe Illustrator Multiple Vulnerabilities (APSB22-60) - Windows
Adobe Illustrator is prone to multiple vulnerabilities. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you c...
PT-2022-6005 · Adobe · Illustrator
Name of the Vulnerable Software and Affected Versions: Adobe Illustrator versions 26.5.1 and earlier Adobe Illustrator versions 27.0 and earlier Description: The issue is related to an out-of-bounds read vulnerability in Adobe Illustrator, which could lead to the disclosure of sensitive memory...
PT-2022-6007 · Adobe · Illustrator
Name of the Vulnerable Software and Affected Versions: Adobe Illustrator versions 26.5.1 and earlier Adobe Illustrator versions 27.0 and earlier Description: The issue is related to an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage...
PT-2022-18696 · Pexip · Pexip Infinity
Name of the Vulnerable Software and Affected Versions: Pexip Infinity versions 27.0 through 27.2 Description: The issue allows remote attackers to trigger a software abort via HTTP. Recommendations: For versions 27.0 through 27.2, update to version 27.3 or later to resolve the issue...
Pexip Infinity has an unspecified vulnerability (CNVD-2022-20148)
Pexip Infinity Pexip Video Conferencing Cloud Collaboration Platform is a video conferencing cloud collaboration platform from the Norwegian company Pexip. The product provides high quality and secure cloud conferencing capabilities.A security vulnerability exists in versions of Pexip Infinity...
Rockwell Automation 1336 PLUS Drive 27.0 A, 230V 1336S-A007 Smart MCC
Binary data 754071.prm...
Rockwell Automation 1336 PLUS II Drv 27.0 A, 230V 1336F-AQF75 Smart MCC
Binary data 754141.prm...
Fedora 19 : firefox-27.0-1.fc19 / xulrunner-27.0-1.fc19 (2014-2051)
See following page for changes: http://www.mozilla.org/en-US/firefox/27.0/releasenotes/ Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible witho...
CVE-2014-1490
Race condition in libssl in Mozilla Network Security Services NSS before 3.15.4, as used in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, SeaMonkey before 2.24, and other products, allows remote attackers to cause a denial of service use-after-free or possibl...