file: heap-based buffer overflow in cdf_read_property_info in cdf.c

cdfreadpropertyinfo in cdf.c in file through 5.37 does not restrict the number of CDFVECTOR elements, which allows a heap-based buffer overflow 4-byte out-of-bounds write...

jquery: Untrusted code execution via <option> tag in HTML passed to DOM manipulation methods

A flaw was found in jQuery. HTML containing \ elements from untrusted sources are passed, even after sanitizing, to one of jQuery's DOM manipulation methods, which may execute untrusted code. The highest threat from this vulnerability is to data confidentiality and integrity...

CVE-2021-41216 Heap buffer overflow in `Transpose`

TensorFlow is an open source platform for machine learning. In affected versions the shape inference function for Transpose is vulnerable to a heap buffer overflow. This occurs whenever perm contains negative elements. The shape inference function does not validate that the indices in perm are al...

CVE-2021-41226 Heap OOB read in `SparseBinCount`

TensorFlow is an open source platform for machine learning. In affected versions the implementation of SparseBinCount is vulnerable to a heap OOB access. This is because of missing validation between the elements of the values argument and the shape of the sparse output. The fix will be included ...

CVE-2021-41216: Buffer Copy without Checking Size of Input

TensorFlow is an open source platform for machine learning. In affected versions the shape inference function for Transpose is vulnerable to a heap buffer overflow. This occurs whenever perm contains negative elements. The shape inference function does not validate that the indices in perm are al...

go -- multiple vulnerabilities

The Go project reports: debug/macho fails out when loading a file that contains a dynamic symbol table command that indicates a larger number of symbols than exist in the loaded symbol table. Previously, opening a zip with Reader.Open could result in a panic if the zip contained a file whose name...

Mozilla Firefox And Thunderbird Type Confusion Vulnerability

Mozilla Firefox and Thunderbird contain a type confusion vulnerability due to incorrect alias information in the IonMonkey JIT compiler when setting array elements...

The vulnerability of the Redmine project and task management web application, related to insufficient neutralization of special elements in the query, allows a hacker to gain access to confidential data.

The vulnerability of the Redmine project and task management web application relates to the insufficient neutralization of certain elements in the query. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to confidential data...

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine allows attackers to gain access to the system.

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to errors in checking the security of standard elements. Exploiting this vulnerability can allow a malicious actor to gain access to the system remotely...

The vulnerability of the urllib3 module in the Python programming language lies in its insufficient ability to neutralize special elements in requests. This allows attackers to gain access to sensitive data and compromise its integrity.

The vulnerability of the urllib3 method in the Python programming language lies in the insufficient neutralization of special elements in HTTP requests. Exploiting this vulnerability can allow an attacker to gain access to confidential data and compromise its integrity...

Adobe Premiere Elements Multiple Vulnerabilities (APSB21-106)

The version of Adobe Premiere Elements installed on the remote Windows host is prior to build 19.0 20211007.daily.2243969. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB21-106 advisory. - Adobe Premiere Elements 20210809.daily.2242976 and earlier is affected by a...

Vulnerabilities fixed in Adobe Premiere Elements

Adobe has fixed vulnerabilities in Adobe Premiere Elements. A remote malicious party could potentially exploit the vulnerabilities to cause a denial-of-service DoS, or execute arbitrary code execute arbitrary code on the system under the application's privileges. The malicious party to do this mu...

Adobe Premiere Elements 缓冲区错误漏洞

Adobe Premiere Elements is a video editing software application from Adobe. Adobe Premiere Elements 2021 build 19.0 and earlier versions are vulnerable to a memory buffer out-of-bounds access vulnerability. An attacker can exploit this vulnerability to execute arbitrary code...

Adobe Premiere Elements null pointer dereference vulnerability

Adobe Premiere Elements is a video editing software application from Adobe. Adobe Premiere Elements 2021 build 19.0 and earlier versions are vulnerable to a null pointer dereference. An attacker could exploit this vulnerability to cause a memory leak...

Adobe Premiere Elements memory buffer out-of-bounds access vulnerability

Adobe Premiere Elements is a video editing software application from Adobe. Adobe Premiere Elements 2021 build 19.0 and earlier versions are vulnerable to a memory buffer out-of-bounds access vulnerability. An attacker can exploit this vulnerability to execute arbitrary code...

Adobe Premiere Elements Memory Buffer Out-of-Bounds Access Vulnerability (CNVD-2021-91994)

Adobe Premiere Elements is a video editing software application from Adobe. A memory buffer out-of-bounds access vulnerability exists in Adobe Premiere Elements 2021 build 19.0 and earlier versions. An attacker can exploit this vulnerability to execute arbitrary code...

Adobe Premiere Elements null pointer dereference vulnerability (CNVD-2021-91993)

Adobe Premiere Elements is a video editing software application from Adobe. Adobe Premiere Elements 2021 build 19.0 and earlier versions are vulnerable to a null pointer dereference. An attacker could exploit this vulnerability to cause a denial of service for the application...

Adobe Premiere Elements null pointer dereference vulnerability (CNVD-2021-91992)

Adobe Premiere Elements is a video editing software application from Adobe. Adobe Premiere Elements 2021 build 19.0 and earlier versions are vulnerable to a null pointer dereference. An attacker could exploit the vulnerability to cause a denial of service for the application...

Adobe Premiere Elements Memory Buffer Out-of-Bounds Access Vulnerability (CNVD-2021-91991)

Adobe Premiere Elements is a video editing software application from Adobe. Adobe Premiere Elements 2021 build 19.0 and earlier versions are vulnerable to a memory buffer out-of-bounds access vulnerability. An attacker can exploit this vulnerability to execute arbitrary code...

Adobe Premiere Elements Memory Buffer Out-of-Bounds Access Vulnerability (CNVD-2021-91990)

Adobe Premiere Elements is a video editing software application from Adobe. Adobe Premiere Elements 2021 build 19.0 and earlier versions are vulnerable to a memory buffer out-of-bounds access vulnerability. An attacker can exploit this vulnerability to execute arbitrary code...