Vulnerabilities fixed in Adobe products

Adobe has fixed vulnerabilities in Acrobat, Acrobat Reader, Premiere Elements, Illustrator and FrameMaker. The vulnerabilities allow a malicious person to execute arbitrary code execute within the context of the user or gaining elevated privileges. Adobe has released updates to fix the...

The vulnerability of the VMware Workspace One Access application management platform and the VMware Identity Manager (vIDM) administration console lies in the improper elimination of special elements in the output data, allowing an attacker to redirect users to any domain they choose.

The vulnerability of the VMware Workspace One Access application management platform and the VMware Identity Manager vIDM administration console is related to incorrect elimination of special elements in the output data. Exploiting this vulnerability can allow a malicious actor to redirect a user...

mariadb: assertion failure in compare_order_elements

A flaw was found in the MariaDB Server. It contains a segmentation fault via the component, sql/sqlwindow.cc, impacting availability...

Adobe Premiere Elements 代码问题漏洞

Adobe Premiere Elements is a video editing software application from the American company Adobe. It is a scaled-down version of Adobe Premiere Pro, tailored for novice editors and consumers. Adobe Premiere Elements version 20.0 suffers from a code issue vulnerability that stems from the fact that...

PT-2022-4387 · Adobe · Premiere Elements

Name of the Vulnerable Software and Affected Versions: Adobe Premiere Elements versions 2020v20 and earlier Description: The issue is related to an Uncontrolled Search Path Element, which could lead to Privilege Escalation. An attacker could leverage this to obtain admin privileges using an...

Adobe Releases Security Updates for Multiple Products

Adobe has released security updates to address vulnerabilities in multiple products. An attacker could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the following Adobe Security Bulletins and apply the necessary...

APSB22-43 : Security update available for Adobe Premiere Elements

Adobe has released updates for Adobe Premiere Elements for Windows and macOS. This update addresses a critical vulnerability. Successful exploitation could lead to privilege escalation in the context of the current user...

CVE-2021-46679

A XSS vulnerability exist in Pandora FMS version 756 and below, that allows an attacker to perform javascript code executions via service elements...

Cross site scripting

A XSS vulnerability exist in Pandora FMS version 756 and below, that allows an attacker to perform javascript code executions via service elements...

CVE-2021-46679 Vulnerability XSS in service elements

A XSS vulnerability exist in Pandora FMS version 756 and below, that allows an attacker to perform javascript code executions via service elements...

CVE-2021-46679 Vulnerability XSS in service elements

A XSS vulnerability exist in Pandora FMS version 756 and below, that allows an attacker to perform javascript code executions via service elements...

Artica Pandora FMS 跨站脚本漏洞

Artica Pandora FMS is a monitoring system from the Spanish company Artica. The system monitors networks, servers, virtual infrastructures, applications, etc. in a visual way. A cross-site scripting vulnerability exists in Artica Pandora FMS version 756 and earlier. An attacker can exploit this...

CVE-2021-46679: Improper Neutralization of Input During Web Page Generation

A XSS vulnerability exist in Pandora FMS version 756 and below, that allows an attacker to perform javascript code executions via service elements...

Google Android Code Execution Vulnerability (CNVD-2022-65638)

Google Android is a Linux-based open source operating system from Google. A code execution vulnerability exists in Google Android. The vulnerability arises from a failure of a networked system or product to properly filter specific elements of externally entered data during the construction of a...

The vulnerability of the SAP Business One resource management system allows a perpetrator to execute arbitrary codes.

The vulnerability of the SAP Business One resource management system is related to insufficient cleaning of special elements in the output data used by the incoming component. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

CKEditor 跨站脚本漏洞

CKEditor is an open source, web-based text editor. A cross-site scripting vulnerability exists in CKEditor 5 prior to 35.0.1, which stems from updating source elements with markup from the CKEditor 5 data pipeline after destroying the editor...

QEMU: virtio-net: map leaking on error during receive

A flaw was found in the virtio-net device of QEMU. This flaw was inadvertently introduced with the fix for CVE-2021-3748, which forgot to unmap the cached virtqueue elements on error, leading to memory leakage, use-after-free or other unexpected results. A malicious privileged guest could exploit...

golang: crypto/elliptic: IsOnCurve returns true for invalid field elements

A flaw was found in the elliptic package of the crypto library in golang when the IsOnCurve function could return true for invalid field elements. This flaw allows an attacker to take advantage of this undefined behavior, affecting the availability and integrity of the resource...

GSD-2022-1004591 netfilter: nft_set_pipapo: release elements in clone from abort path

netfilter: nftsetpipapo: release elements in clone from abort path This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.130 by commit...

CVE-2022-22280

Improper Neutralization of Special Elements used in an SQL Command leading to Unauthenticated SQL Injection vulnerability, impacting SonicWall GMS 9.3.1-SP2-Hotfix1, Analytics On-Prem 2.5.0.3-2520 and earlier versions...