PT-2021-6554 · Gpac · Gpac Project On Advanced Content Library

Name of the Vulnerable Software and Affected Versions: GPAC Project on Advanced Content library version 1.0.1 Description: An exploitable integer truncation vulnerability exists within the MPEG-4 decoding functionality. The stri box read function is used when processing atoms using the 'stri'...

UBUNTU-CVE-2021-37695

ckeditor is an open source WYSIWYG HTML editor with rich content support. A potential vulnerability has been discovered in CKEditor 4 Fake Objects package. The vulnerability allowed to inject malformed Fake Objects HTML, which could result in executing JavaScript code. It affects all users using...

CVE-2021-37695

ckeditor is an open source WYSIWYG HTML editor with rich content support. A potential vulnerability has been discovered in CKEditor 4 "Fake Objects" https://ckeditor.com/cke4/addon/fakeobjects package. The vulnerability allowed to inject malformed Fake Objects HTML, which could result in executin...

CVE-2021-36937

Windows Media MPEG-4 Video Decoder Remote Code Execution Vulnerability...

Remote code execution

Windows Media MPEG-4 Video Decoder Remote Code Execution Vulnerability...

CVE-2021-36937 Windows Media MPEG-4 Video Decoder Remote Code Execution Vulnerability

...

CVE-2021-36937

Technical details for CVE-2021-36937 are not publicly available in the provided documents. The initial description notes a Windows Media MPEG-4 Video Decoder RCE, but no concrete product/version/impact details are supplied here. Monitor for updates.

CVE-2021-32809

ckeditor is an open source WYSIWYG HTML editor with rich content support. A potential vulnerability has been discovered in CKEditor 4 Clipboard package. The vulnerability allowed to abuse paste functionality using malformed HTML, which could result in injecting arbitrary HTML into the editor. It...

CVE-2021-32809

ckeditor is an open source WYSIWYG HTML editor with rich content support. A potential vulnerability has been discovered in CKEditor 4 Clipboard package. The vulnerability allowed to abuse paste functionality using malformed HTML, which could result in injecting arbitrary HTML into the editor. It...

CVE-2021-32809

ckeditor is an open source WYSIWYG HTML editor with rich content support. A potential vulnerability has been discovered in CKEditor 4 "Clipboard" https://ckeditor.com/cke4/addon/clipboard package. The vulnerability allowed to abuse paste functionality using malformed HTML, which could result in...

CVE-2021-32808 Cross-site scripting in ckeditor via abuse of undo functionality

ckeditor is an open source WYSIWYG HTML editor with rich content support. A vulnerability has been discovered in the clipboard Widget plugin if used alongside the undo feature. The vulnerability allows a user to abuse undo functionality using malformed widget HTML, which could result in executing...

PT-2021-21815

Name of the Vulnerable Software and Affected Versions CKEditor 4 versions prior to 4.16.2 Description A potential vulnerability has been discovered in the CKEditor 4 Fake Objects package, allowing the injection of malformed Fake Objects HTML, which could result in executing JavaScript code. This...

CVE-2021-37695: Improper Neutralization of Input During Web Page Generation

ckeditor is an open source WYSIWYG HTML editor with rich content support. A potential vulnerability has been discovered in CKEditor 4 Fake Objects package. The vulnerability allowed to inject malformed Fake Objects HTML, which could result in executing JavaScript code. It affects all users using...

CVE-2021-36937: Undefined Security Weakness

Windows Media MPEG-4 Video Decoder Remote Code Execution Vulnerability...

CVE-2021-32809: Improper Control of Generation of Code

ckeditor is an open source WYSIWYG HTML editor with rich content support. A potential vulnerability has been discovered in CKEditor 4 Clipboard package. The vulnerability allowed to abuse paste functionality using malformed HTML, which could result in injecting arbitrary HTML into the editor. It...

Privilege escalation with the form generator

Date : 2021-08-11 CVE ID : CVE-2021-37627 Description It is possible for untrusted users to gain administrator rights with the form generator. Installations are only affected if there are untrusted back end users with access to the form generator. Affected versions Contao 4.0 Contao 4.1 Contao 4....

PT-2021-22200

Name of the Vulnerable Software and Affected Versions Raspberry Pi 3 B+ and 4 B devices through 2021-08-09 Description The issue allows remote attackers to recover speech signals from an LED on the device, via a telescope and an electro-optical sensor, in certain specific use cases where the devi...

CVE-2021-38545: Undefined Security Weakness

Raspberry Pi 3 B+ and 4 B devices through 2021-08-09, in certain specific use cases in which the device supplies power to audio-output equipment, allow remote attackers to recover speech signals from an LED on the device, via a telescope and an electro-optical sensor, aka a "Glowworm" attack. We...

Windows Media MPEG-4 Video Decoder Remote Code Execution Vulnerability

...

PT-2021-27689

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-use-after-free WRITE 4 crash has been reported. The crash occurs in the usbredirparser serialize function, which is called by try serialize in the...