16652 matches found
Adobe Framemaker Memory Out-of-Bounds Access Vulnerability (CNVD-2021-73436)
Adobe FrameMaker is a document processing program used to write and edit large or complex documents, including structured documents.A memory out-of-bounds access vulnerability exists in Adobe Framemaker 2019 Update 8, 2020 Release Update 2 and earlier versions. An attacker could exploit this...
Siemens STAR-CCM+ Viewer Out-of-Bounds Write Vulnerability
Simcenter STAR-CCM+ is a multi-physics computational fluid dynamics CFD software used to simulate products operating under real-world conditions. An out-of-bounds write vulnerability exists in Siemens STAR-CCM+ Viewer, which can be exploited by an attacker to execute code in the context of the...
CVE-2021-37531
SAP NetWeaver Knowledge Management XML Forms versions - 7.10, 7.11, 7.30, 7.31, 7.40, 7.50, contains an XSLT vulnerability which allows a non-administrative authenticated attacker to craft a malicious XSL stylesheet file containing a script with OS-level commands, copy it into a location to be...
CVE-2021-33675
Under certain conditions, SAP Contact Center - version 700, does not sufficiently encode user-controlled inputs. This allows an attacker to exploit a Reflected Cross-Site Scripting XSS vulnerability through phishing and to execute arbitrary code on the victim's browser...
CVE-2021-33675
Under certain conditions, SAP Contact Center - version 700, does not sufficiently encode user-controlled inputs. This allows an attacker to exploit a Reflected Cross-Site Scripting XSS vulnerability through phishing and to execute arbitrary code on the victim's browser...
Buffer overflow
A vulnerability has been identified in APOGEE MBC PPC P2 Ethernet All versions = V2.6.3, APOGEE MEC PPC P2 Ethernet All versions = V2.6.3, APOGEE PXC Compact BACnet All versions = V2.8, APOGEE PXC Modular BACnet All versions = V2.8, TALON TC Compact BACnet All versions V3.5.3, TALON TC Modular...
GPAC Heap Buffer Overflow Vulnerability (CNVD-2021-79754)
GPAC is a multimedia framework for rich media and distributed under the LGPL license. a heap buffer overflow vulnerability exists in the URLGetProtocolType function in GPAC version 1.0.1. An attacker could exploit this vulnerability via specially crafted files to cause a denial of service or...
KLA12297 Multiple vulnerabilities in Microsoft System Center
Multiple vulnerabilities were found in Microsoft System Center. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, gain privileges. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Open Management...
Stack overflow
Stack buffer overflow in the hevcparsevpsextension function in MP4Box in GPAC 1.0.1 allows attackers to cause a denial of service or execute arbitrary code via a crafted file...
CVE-2021-32137
Heap buffer overflow in the URLGetProtocolType function in MP4Box in GPAC 1.0.1 allows attackers to cause a denial of service or execute arbitrary code via a crafted file...
Heap overflow
Heap buffer overflow in the URLGetProtocolType function in MP4Box in GPAC 1.0.1 allows attackers to cause a denial of service or execute arbitrary code via a crafted file...
LSN-0081-1: Kernel Live Patch Security Notice
Maxim Levitsky discovered that the KVM hypervisor implementation for AMD processors in the Linux kernel did not properly prevent a guest VM from enabling AVIC in nested guest VMs. An attacker in a guest VM could use this to write to portions of the host's physical memory.CVE-2021-3653 Maxim...
KLA12280 Multiple vulnerabilities in Google Chrome
Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, obtain sensitive information. Below is a complete list of vulnerabilities: 1. Stack buffer overflow vulnerability in ANGLE can be exploited t...
PT-2021-18898
Name of the Vulnerable Software and Affected Versions macOS versions prior to Big Sur 11.6 macOS Catalina versions prior to Security Update 2021-005 Description A URI parsing issue was addressed with improved parsing, which could allow a local user to execute arbitrary files. Recommendations For...
Cross-site Scripting (XSS)
WordPress is vulnerable to Cross-site Scripting XSS. The issue allows an authenticated but low-privileged user like contributor/author to execute XSS in the editor. This bypasses the restrictions imposed on users who do not have the permission to post unfilteredhtml...
Delta Electronics DOPSoft 2 Out-of-Bounds Write Vulnerability
Delta Electronics DOPSoft is a set of human-machine interface HMI software from Delta Electronics in Taiwan, China. An out-of-bounds write vulnerability exists in Delta Electronics DOPSoft 2, which can be exploited by an attacker to execute code in the context of the current process...
Stack overflow
A stack buffer overflow vulnerability has been reported to affect QNAP device running QTS, QuTScloud, QuTS hero. If exploited, this vulnerability allows attackers to execute arbitrary code. We have already fixed this vulnerability in the following versions of QTS, QuTScloud, QuTS hero: QTS...
PT-2021-27756
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-use-after-free READ 8 crash has been reported. The crash state includes ZEND FETCH OBJ R SPEC CV CONST INLINE HANDLER and ZEND FETCH OBJ R SPEC CV...
JEESNS Stored Cross-Site Scripting Vulnerability (CNVD-2021-74051)
JEESNS is a social management system developed on the JAVA enterprise platform. The vulnerability can be exploited to execute arbitrary Web scripts or HTML via a specially crafted payload in the user name field...