28 matches found
CVE-2021-47070 uio_hv_generic: Fix another memory leak in error handling paths
In the Linux kernel, the following vulnerability has been resolved: uiohvgeneric: Fix another memory leak in error handling paths Memory allocated by 'vmbusallocring' at the beginning of the probe function is never freed in the error handling path. Add the missing 'vmbusfreering' call. Note that ...
CVE-2023-47070
Adobe After Effects version 24.0.2 and earlier and 23.6 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious fi...
CVE-2023-47070
Adobe After Effects is affected by an out-of-bounds write vulnerability in versions 24.0.2 and earlier and 23.6 and earlier that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim must open a malicious file). Updates released as...
Adobe After Effects < 23.6.2 / 24.0.0 < 24.0.3 Multiple Vulnerabilities (APSB23-66) (macOS)
The version of Adobe After Effects installed on the remote macOS host is prior to 23.6.2, 24.0.3. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB23-66 advisory. - Adobe After Effects version 24.0.2 and earlier and 23.6 and earlier are affected by an out-of-bounds...
Adobe After Effects < 23.6.2 / 24.0.0 < 24.0.3 Multiple Vulnerabilities (APSB23-66)
The version of Adobe After Effects installed on the remote Windows host is prior to 23.6.2, 24.0.3. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB23-66 advisory. - Adobe After Effects version 24.0.2 and earlier and 23.6 and earlier are affected by an out-of-bound...
CVE-2022-47070
CVE-2022-47070 affects NVS365 V01 Network Video Server. The root cause is Incorrect Access Control: after a wrong password input, a request is sent twice and the second response exposes password information. NVD metrics assign CVSSv3.1 base score 7.5 (HIGH) with network attack vector, low attack ...
CVE-2022-47070
NVS365 V01 is vulnerable to Incorrect Access Control. After entering a wrong password, the url will be sent to the server twice. In the second package, the server will return the correct password information...
crazysales.com.au XSS vulnerability
Vulnerable URL: https://www.crazysales.com.au/search//%3C!'/!%22/!/'//%22/--!%3E%3CInput/Type=Text%20AutoFocus%20/;%20OnFocus=confirm/OPENBUGBOUNTY/%20//%3E%3CSvg%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 01.12.2017 Vulnerability type:| XSS Vulnerability status:...