Lucene search
K

3164 matches found

ThreatPost
ThreatPost
added 2021/10/14 8:38 p.m.67 views

Rickroll Grad Prank Exposes Exterity IPTV Bug

UPDATE When Township High School District 214 in Illinois got rickrolled all at once across its six different schools just before graduation, it was more than a meticulously executed senior prank. Cybersecurity star-in-the-making and recent high-school graduate Minh Duong found, and was able to...

10CVSS8.1AI score0.00622EPSS
Exploits1References6
Tenable Nessus
Tenable Nessus
added 2021/09/14 12:0 a.m.38 views

EulerOS 2.0 SP2 : openjpeg (EulerOS-SA-2021-2414)

According to the versions of the openjpeg package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in OpenJPEG's encoder. This flaw allows an attacker to pass specially crafted x,y offset input to OpenJPEG to use during...

8.8CVSS6.9AI score0.00417EPSS
Exploits0References4
OSV
OSV
added 2021/09/08 5:15 p.m.0 views

CVE-2021-28569

Adobe Media Encoder version 15.1 and earlier is affected by an Out-of-bounds Read vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to disclose sensitive memory information in the context of the current user. Exploitation of this...

4.3CVSS5.4AI score
Exploits0References1
NVD
NVD
added 2021/09/08 5:15 p.m.14 views

CVE-2021-28569

Adobe Media Encoder version 15.1 and earlier is affected by an Out-of-bounds Read vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to disclose sensitive memory information in the context of the current user. Exploitation of this...

4.3CVSS0.0078EPSS
Exploits0References1
Prion
Prion
added 2021/09/08 5:15 p.m.17 views

Design/Logic Flaw

Adobe Media Encoder version 15.1 and earlier is affected by an Out-of-bounds Read vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to disclose sensitive memory information in the context of the current user. Exploitation of this...

4.3CVSS4AI score0.0078EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2021/09/08 4:20 p.m.17 views

CVE-2021-28569 Adobe Media Encoder VOB file parsing out-of-bounds read could lead to information disclosure vulnerability

Adobe Media Encoder version 15.1 and earlier is affected by an Out-of-bounds Read vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to disclose sensitive memory information in the context of the current user. Exploitation of this...

4.3CVSS4.3AI score0.0078EPSS
Exploits0References1
CVE
CVE
added 2021/09/08 4:20 p.m.59 views

CVE-2021-28569

Adobe Media Encoder 15.1 and earlier are affected by a CVE-2021-28569 Out-of-bounds Read vulnerability when parsing a specially crafted file, enabling memory disclosure in the context of the current user. Exploitation requires user interaction (victim opens a malicious file). The issue is address...

4.3CVSS4AI score0.0078EPSS
Exploits0References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2021/09/07 12:0 a.m.40 views

EulerOS 2.0 SP5 : openjpeg (EulerOS-SA-2021-2341)

According to the versions of the openjpeg package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in OpenJPEG's encoder. This flaw allows an attacker to pass specially crafted x,y offset input to OpenJPEG to use during...

7.8CVSS7.2AI score0.00302EPSS
Exploits0References3
OSV
OSV
added 2021/09/06 11:15 a.m.2 views

CVE-2021-24599

The Email Encoder – Protect Email Addresses WordPress plugin before 2.1.2 has an endpoint that requires no authentication and will render a user supplied value in the HTML response without escaping or sanitizing the data...

6.1CVSS5.8AI score0.00189EPSS
Exploits2References1
Cvelist
Cvelist
added 2021/09/06 11:9 a.m.13 views

CVE-2021-24599 Email Encoder < 2.1.2 - Reflected Cross Site Scripting

The Email Encoder – Protect Email Addresses WordPress plugin before 2.1.2 has an endpoint that requires no authentication and will render a user supplied value in the HTML response without escaping or sanitizing the data...

6.5AI score0.00189EPSS
Exploits2References1
CVE
CVE
added 2021/09/06 11:9 a.m.39 views

CVE-2021-24599

The CVE-2021-24599 entry concerns the WordPress plugin Email Encoder – Protect Email Addresses, affected in versions before 2.1.2. The vulnerability is an unauthenticated endpoint that renders a user-supplied value in the HTML response without escaping or sanitizing, leading to a reflected cross-...

6.1CVSS6.3AI score0.00189EPSS
Exploits2References1Affected Software1
CNNVD
CNNVD
added 2021/09/06 12:0 a.m.2 views

WordPress 插件跨站脚本漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports setting up personal blog sites on PHP and MySQL servers.WordPress plugin is an open source application plugin for WordPress. A cross-site scripting vulnerability exists in the...

6.1CVSS5.9AI score0.00189EPSS
Exploits2References1
OpenVAS
OpenVAS
added 2021/09/04 12:0 a.m.20 views

Huawei EulerOS: Security Advisory for openjpeg (EulerOS-SA-2021-2341)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS6.8AI score0.00302EPSS
Exploits0References2
NVD
NVD
added 2021/09/01 3:15 p.m.17 views

CVE-2021-36070

Adobe Media Encoder version 15.1 and earlier is affected by an improper memory access vulnerability when parsing a crafted .SVG file. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a...

9.3CVSS0.01119EPSS
Exploits0References1
OSV
OSV
added 2021/09/01 3:15 p.m.0 views

CVE-2021-36070

Adobe Media Encoder version 15.1 and earlier is affected by an improper memory access vulnerability when parsing a crafted .SVG file. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a...

7.8CVSS6AI score0.01119EPSS
Exploits0References1
Prion
Prion
added 2021/09/01 3:15 p.m.20 views

Improper access control

Adobe Media Encoder version 15.1 and earlier is affected by an improper memory access vulnerability when parsing a crafted .SVG file. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a...

9.3CVSS7.5AI score0.01119EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2021/09/01 2:34 p.m.59 views

CVE-2021-36070

CVE-2021-36070 is an Adobe Media Encoder vulnerability affecting version 15.1 and earlier. The issue is an improper memory access when parsing a crafted SVG file, allowing code execution in the context of the current user. Exploitation requires user interaction (the victim must open a malicious f...

9.3CVSS7.4AI score0.01119EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2021/09/01 2:34 p.m.15 views

CVE-2021-36070 Adobe Media Encoder Improper Memory Access When Parsing SVG Files Could Lead To Remote Code Execution

Adobe Media Encoder version 15.1 and earlier is affected by an improper memory access vulnerability when parsing a crafted .SVG file. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a...

7.8CVSS7.7AI score0.01119EPSS
Exploits0References1
NVD
NVD
added 2021/08/23 11:15 p.m.14 views

CVE-2021-36013

Adobe Media Encoder version 15.2 and earlier is affected by an Out-of-bounds Read vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue...

7.8CVSS0.02246EPSS
Exploits0References1
OSV
OSV
added 2021/08/23 11:15 p.m.1 views

CVE-2021-36013

Adobe Media Encoder version 15.2 and earlier is affected by an Out-of-bounds Read vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue...

7.8CVSS6.3AI score
Exploits0References1
Rows per page
Query Builder