Adobe Bridge Buffer Overflow Vulnerability (CNVD-2022-64964)

Adobe Bridge is a file viewer from Adobe. Adobe Bridge is vulnerable to a buffer overflow vulnerability that stems from an out-of-bounds write vulnerability that could be exploited to execute arbitrary code in the context of the current user...

Adobe Bridge Buffer Overflow Vulnerability (CNVD-2022-64966)

Adobe Bridge is a file viewer from Adobe. Adobe Bridge is vulnerable to a buffer overflow vulnerability that stems from an out-of-bounds write vulnerability that could be exploited to execute arbitrary code in the context of the current user...

Syncovery Job_ExecuteBefore Job_ExecuteAfter Privilege Escalation

The vulnerability of the JobExecuteBefore and JobExecuteAfter parameters in the postprofilesettings.php file of the Syncovery backup tool is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability can allow a remote attacker to increase their...

Use After Free

qemu:sid is vulnerable to use after free. It allowed a remote attacker to potentially execute HW commands when shared buffers...

No control for the future Airdrop

Lines of code Vulnerability details Impact You can't control the airdrop NFT on this contract PartyGovernance.sol. You can only control the preciousListHash Proof of Concept The execute is check that the precious list preciousTokenIds and preciousTokens is valid or not if...

D-Link DIR-2150 Buffer Overflow Vulnerability

D-Link DIR-2150 is a wireless router device from D-Link. D-Link DIR-2150c is vulnerable to a buffer overflow, which can be exploited by attackers to execute code in the root context...

D-Link DIR-2150 Buffer Overflow Vulnerability (CNVD-2023-21662)

The D-Link DIR-2150 is a wireless router device from D-Link. The D-Link DIR-2150 is vulnerable to a buffer overflow vulnerability that can be exploited by attackers to execute code in the root context...

Adobe InCopy out-of-bounds read vulnerability (CNVD-2023-05233)

Adobe InCopy is an application produced by Adobe for professional word processing. Adobe InCopy 17.3 and 16.4.2 and prior versions contain an out-of-bounds read vulnerability that could be exploited by an attacker to execute arbitrary code in the context of the current user...

D-Link DIR-2150 Operating System Command Injection Vulnerability

The D-Link DIR-2150 is a wireless router device from D-Link.The D-Link DIR-2150 is vulnerable to an operating system command injection vulnerability that could be exploited by an attacker to execute code in the router context...

Runc exec Cap Access Confidential Data Compromise Service Failures

The vulnerability of the “runc exec --cap” command in the Runc tool for running isolated containers is related to the default access permissions settings. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

GraphicsMagick Use-after-free (CVE-2017-11403)

A use-after-free vulnerability exists in GraphicsMagick. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Design/Logic Flaw

Adobe InDesign versions 16.4.2 and earlier and 17.3 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context...

CVE-2022-38412

Adobe Animate version 21.0.11 and earlier and 22.0.7 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the contex...

CVE-2022-35193

TestLink v1.9.20 was discovered to contain a SQL injection vulnerability via /lib/execute/execNavigator.php...

CVE-2022-38826

In TOTOLINK T6 V4.1.5cu.709B20210518, there is an execute arbitrary command in cstecgi.cgi...

CVE-2022-38844

CSV Injection in Create Contacts in EspoCRM 7.1.8 allows remote authenticated users to run system commands via creating contacts with payloads capable of executing system commands. Admin user exporting contacts in CSV file may end up executing the malicious system commands on his system...

Adobe InDesign out-of-bounds read vulnerability (CNVD-2022-79423)

Adobe InDesign is a set of typesetting and editing applications from Adobe, which is vulnerable to an out-of-bounds read vulnerability that could be exploited to execute arbitrary code...

PT-2022-22624

Name of the Vulnerable Software and Affected Versions TestLink version 1.9.20 Description The issue is a SQL injection vulnerability. It can be exploited via the /lib/execute/execNavigator.php endpoint. Recommendations For TestLink version 1.9.20, consider restricting access to the...

Adobe InDesign Heap Buffer Overflow Vulnerability (CNVD-2022-79422)

Adobe InDesign is a set of typesetting and editing applications from Adobe, which is vulnerable to a heap buffer overflow that could be exploited to execute arbitrary code...

Ubuntu: Security Advisory (USN-5606-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...