pdfbox: infinite loop while loading a crafted PDF file

A carefully crafted PDF file can trigger an infinite loop while loading the file. This issue affects Apache PDFBox version 2.0.22 and prior 2.0.x versions...

Nextcloud Desktop Client 信任管理问题漏洞

Nextcloud is an open source suite of self-hosted file synchronization and sharing communication application platform from Nextcloud, Germany.Nextcloud Desktop Client is a desktop client application for Nextcloud. A security vulnerability exists in versions of the Nextcloud Desktop Client prior to...

Adobe Bridge 缓冲区错误漏洞

Adobe Bridge is a free digital asset management application from Adobe. 11.1 and earlier versions of Adobe Bridge contain a memory out-of-bounds access vulnerability. An attacker could exploit the vulnerability to execute arbitrary code...

Adobe XMP Toolkit SDK 输入验证错误漏洞

Adobe XMP Toolkit SDK is a tagging technology from Adobe that allows you to embed data about a file called metadata into the file itself. Adobe XMP Toolkit SDK 2020.1 and earlier versions are vulnerable to improper input validation. An attacker could exploit this vulnerability to execute arbitrar...

Adobe Bridge 缓冲区错误漏洞

Adobe Bridge is a free digital asset management application from Adobe. A memory out-of-bounds access vulnerability exists in Adobe Bridge 11.1 and earlier versions. An attacker can exploit the vulnerability to execute arbitrary code...

Adobe Bridge 缓冲区错误漏洞

Adobe Bridge is a free digital asset management application from Adobe. 11.1 and earlier versions of Adobe Bridge contain an out-of-bounds read vulnerability. An attacker could exploit the vulnerability to read arbitrary file systems...

Adobe Bridge 缓冲区错误漏洞

Adobe Bridge is a free digital asset management application from Adobe. 11.1 and earlier versions of Adobe Bridge contain a memory out-of-bounds access vulnerability. An attacker could exploit the vulnerability to execute arbitrary code...

PT-2021-4984 · Adobe · Bridge

Name of the Vulnerable Software and Affected Versions: Adobe Bridge versions 11.1 and earlier Description: The issue is related to a memory corruption vulnerability due to insecure handling of a malicious Bridge file. This could potentially result in arbitrary code execution in the context of the...

D-Link DSL-2750U安全漏洞

The D-Link DSL-2750U is a wireless N 300 ADSL2 modem router.An unauthorized configuration modification vulnerability exists in the D-Link DSL-2750U ME1.16 and earlier versions. An attacker could use this vulnerability to modify the configuration without authorization...

WordPress 跨站脚本漏洞

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the Calendarplugin plugin of WordPress, which stems...

CVE-2021-38523

NETGEAR R6400 devices before 1.0.1.70 are affected by a stack-based buffer overflow by an authenticated user...

F-secure Safe 安全漏洞

F-secure F-Secure SAFE is a suite of antivirus software from the Finnish company F-Secure F-secure. A security vulnerability exists in F-secure Safe Browser that stems from a flaw in the product implementation. When a user clicks on a malicious link, the browser address bar displays a legitimate...

PT-2021-4480 · Oracle +2 · Mysql Server +1

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 8.0.25 and prior Description: The issue exists due to insufficient input validation in the MySQL Server component. It allows a remote attacker to cause a denial of service. Successful exploitation can result in the abili...

Adobe Connect 安全特征问题漏洞

Adobe Connect is an online video conferencing software. A security feature bypass vulnerability exists in Adobe Connect 11.2.2 and earlier versions. The vulnerability stems from a violation of security design principles. No detailed vulnerability details are available at this time...

AZL-7220 CVE-2021-37618 affecting package exiv2 for versions less than 0.27.5-1

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds read was found in Exiv2 versions v0.27.4 and earlier. The out-of-bounds read is triggered when Exiv2 is used to print the metadata of a crafted image file. A...

Exiv2 缓冲区错误漏洞

Exiv2 is a cross-platform C++ library and command line utility for managing image metadata. An out-of-bounds read vulnerability exists in Exiv2 0.27.4 and earlier versions. An attacker could use this vulnerability to cause a denial of service via a specially crafted image file...

Exiv2 缓冲区错误漏洞

Exiv2 is a cross-platform C library and command-line utility for managing image metadata. an out-of-bounds read vulnerability exists in Exiv2 versions 0.27.4 and earlier. An attacker could exploit the vulnerability via specially crafted image files to cause a denial of service...

CVE-2021-38190

An issue was discovered in the nalgebra crate before 0.27.1 for Rust. It allows out-of-bounds memory access because it does not ensure that the number of elements is equal to the product of the row count and column count...

ProLink PRC2402M 命令注入漏洞

ProLink PRC2402M is a router from ProLink Singapore. A command injection vulnerability exists in the setledonoff function in the adm.cgi binary file of ProLink PRC2402M 1.0.18 and prior versions. An attacker can exploit this vulnerability to cause command injection by passing the ledcmd parameter...

DevExpress XtraReports.UI 代码问题漏洞

DevExpress XtraReports.UI is an assembly from DevExpress, Inc. A security vulnerability exists in DevExpress.XtraReports.UI version 21.1 and earlier, which allows an attacker to execute arbitrary code via insecure deserialization...