Vscode-Stripe injection vulnerability

gracegoo-stripe vscode-stripe is an open source application plugin for gracegoo-stripe.Stripe's extensions to Visual Studio Code make it easy to generate sample code, view API request logs, forward events to your application, and use Stripe in the editor. vscode-stripe has an injection...

Esri ArcReader resource management error vulnerability

Esri ArcReader is an application from Esri, USA. A free, easy-to-use desktop mapping application. A security vulnerability exists in Esri ArcReader that allows an unauthenticated attacker to achieve arbitrary code execution in the context of the current user. No details of the vulnerability are...

Esri’s various products have buffer error vulnerabilities

ESRI ArcGIS Enterprise and others are products of Environmental Systems Research Institute ESRI, Inc.ArcGIS Enterprise is a GIS Geographic Information System base software system.Esri Arcgis Server is a Web-oriented enterprise software platform that can be used to provide geolocation services. Es...

Magento Commerce Code Execution

The vulnerability of the Magento Commerce development and management software platform relates to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user...

PDF viewer Memory Use Code Execution

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat and Document Cloud, are related to the use of memory after it is freed. Arbitrary code can be executed in the context of the current user using a specially crafte...

PDF viewer Heap Buffer Overflow DoS

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat and Document Cloud, are related to the remote memory buffer overflow attack. This allows arbitrary code to execute in the context of the current user, using a...

PDF viewer Heap Buffer Overflow DoS

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to the issue of code execution outside the buffer. Exploiting these vulnerabilities can allow a malicious actor to...

PDF viewer Memory Use Code Execution

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat and Document Cloud, are related to the use of memory after it is freed. Arbitrary code can be executed in the context of the current user using a specially crafte...

Information Disclosure

OMERO web is vulnerable to information disclosure. The vulnerability exists because the main webclient page loads various information about the current user such as their id, name and the groups they are in...

APSB21-14 Security Updates Available for Adobe FrameMaker

Adobe has released a security hotfix for Adobe Framemaker. This hotfix addresses a critical vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user...

CVE-2021-21041

Acrobat Reader DC versions versions 2020.013.20074 and earlier, 2020.001.30018 and earlier and 2017.011.30188 and earlier are affected by a use-after-free vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current...

CVE-2021-21045

Acrobat Reader DC versions versions 2020.013.20074 and earlier, 2020.001.30018 and earlier and 2017.011.30188 and earlier are affected by an improper access control vulnerability. An unauthenticated attacker could leverage this vulnerability to elevate privileges in the context of the current use...

CVE-2021-21052 Adobe Animate Out-of-Bounds Write Vulnerability Could Lead To Arbitrary Code Execution

Adobe Animate version 21.0.2 and earlier is affected by an Out-of-bounds Write vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim...

CVE-2021-21045 Acrobat Reader DC Improper Installer Access Control Vulnerability Could Lead To Privilege Escalation

Acrobat Reader DC versions versions 2020.013.20074 and earlier, 2020.001.30018 and earlier and 2017.011.30188 and earlier are affected by an improper access control vulnerability. An unauthenticated attacker could leverage this vulnerability to elevate privileges in the context of the current use...

CVE-2021-21037

Acrobat Reader DC versions versions 2020.013.20074 and earlier, 2020.001.30018 and earlier and 2017.011.30188 and earlier are affected by a Path Traversal vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current...

VulnCheck KEV: CVE-2021-21017

Acrobat Acrobat and Reader contain a heap-based buffer overflow vulnerability that could allow an unauthenticated attacker to achieve code execution in the context of the current user...

Adobe Bridge Buffer Overflow Code Execution

The vulnerability of the Adobe Bridge file manager is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, using a specially crafted file...

Adobe Animate Code Execution

The vulnerability of the Adobe Animate software for creating multimedia and computer animations is related to an uncontrolled element in the search process. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, using a specially craft...

Adobe Lightroom Classic Code Execution

The vulnerability of Adobe Lightroom Classic’s graphic editor is related to an uncontrolled element in the search process. Exploiting this vulnerability could allow a hacker to execute arbitrary code within the context of the current user...

Adobe Prelude Uncontrolled Search Path

The vulnerability of the cloud-based application for video digitization, annotation, and format conversion in Adobe Prelude is related to an uncontrollable element in the search process. Exploiting this vulnerability could allow a attacker to execute arbitrary code in the context of the current...