3284 matches found
CVE-2024-23238
An access issue was addressed with improved access restrictions. This issue is fixed in macOS Sonoma 14.4. An app may be able to edit NVRAM variables...
CVE-2024-27612
Numbas editor before 7.3 mishandles editing of themes and extensions...
CVE-2024-27612
The Numbas editor (versions 7.2 and below ) is vulnerable to Remote Code Execution (RCE) due to the mishandling of theme and extension edits. This Improper Input Validation (CWE-20) allows an attacker to execute arbitrary code on a target system. Proof-of-concept exploits are available, such as t...
CVE-2024-27612
Numbas editor before 7.3 mishandles editing of themes and extensions...
CVE-2024-27612
Numbas editor before 7.3 mishandles editing of themes and extensions...
[SECURITY] Fedora 40 Update: jline2-2.14.6-12.fc40
JLine is a Java library for handling console input. It is similar in functionality to BSD editline and GNU readline. People familiar with the readline/editline capabilities for modern shells such as bash and tcsh will find most of the command editing features of JLine to be familiar...
PT-2024-21967 · Unknown · Numbas Editor
Name of the Vulnerable Software and Affected Versions: Numbas editor versions prior to 7.3 Description: The issue concerns the mishandling of editing themes and extensions in the Numbas editor. Recommendations: For versions prior to 7.3, update to version 7.3 or later to resolve the issue...
BIT-GITLAB-2020-13338
An issue has been discovered in GitLab affecting versions prior to 12.10.13, 13.0.8, 13.1.2. A stored cross-site scripting vulnerability was discovered when editing references...
BIT-MOODLE-2022-40316
The H5P activity attempts report did not filter by groups, which in separate groups mode could reveal information to non-editing teachers about attempts/users in groups they should not have access to...
PT-2024-13874 · Pegasystems · Pega Platform
Name of the Vulnerable Software and Affected Versions: Pega Platform versions 7.1.7 through 23.1.1 Description: The issue is related to an XSS problem when editing or rendering user HTML content. Recommendations: For Pega Platform versions 7.1.7 through 23.1.1, update to a version that includes a...
Pegasystem PEGA Platform Cross-Site Scripting Vulnerability
Pegasystem PEGA Platform is a suite of application development platforms from the US-based Pegasystem. The platform is used to develop applications such as BPM Business Process Management, Case Management, Real-Time Decision Making and CRM Customer Relationship Management. A cross-site scripting...
PT-2024-21973
Name of the Vulnerable Software and Affected Versions CMS Made Simple version 2.2.19 Description The issue is related to Server-Side Template Injection SSTI within the Design Manager, specifically when editing the Breadcrumbs. Recommendations For CMS Made Simple version 2.2.19, consider disabling...
[SECURITY] Fedora 39 Update: gifsicle-1.95-1.fc39
Gifsicle is a command-line tool for creating, editing, and getting information about GIF images and animations. Some more gifsicle features: Batch mode for changing GIFs in place. Prints detailed information about GIFs, including comments. Control over interlacing, comments, looping,...
Adobe Audition heap buffer overflow vulnerability (CNVD-2024-11670)
Adobe Audition is a set of multi-track editing tools from the American company Audobee Adobe. The product is mainly used to include multi-track, waveforms and spectral display of the perfect toolset for audio content mixing, editing and creation. Adobe Audition suffers from a heap buffer overflow...
Multiple vulnerabilities in Adobe Acrobat Reader could lead to remote code execution
Cisco Talos has disclosed more than 30 vulnerabilities in February, including seven in Adobe Acrobat Reader, one of the most popular PDF editing and reading software currently available. Adversaries could exploit these vulnerabilities to trigger the reuse of a previously freed object, thus causin...
CVE-2024-1636
Potential Cross-Site Scripting XSS in the page editing area...
CVE-2024-1636
Potential Cross-Site Scripting XSS in the page editing area...
Cross site scripting
Potential Cross-Site Scripting XSS in the page editing area...