15633 matches found
Orckestra C1 CMS 代码问题漏洞
C1 CMS is an open source web content management system CMS based on .NET. A deserialization vulnerability exists in versions of Orckestra C1 CMS prior to 6.13. An authenticated attacker can exploit this vulnerability to execute arbitrary code...
PT-2022-25671 · Openssl +1 · Openssl +1
Name of the Vulnerable Software and Affected Versions: Windscribe affected versions not specified Description: This issue allows local attackers to escalate privileges on affected installations. An attacker must first obtain the ability to execute low-privileged code on the target system in order...
CVE-2022-3236
A code injection vulnerability in the User Portal and Webadmin allows a remote attacker to execute code in Sophos Firewall version v19.0 MR1 and older...
CVE-2022-3236
A code injection vulnerability in the User Portal and Webadmin allows a remote attacker to execute code in Sophos Firewall version v19.0 MR1 and older...
CVE-2022-3236
A code injection vulnerability in the User Portal and Webadmin allows a remote attacker to execute code in Sophos Firewall version v19.0 MR1 and older. Recent assessments: cbeek-r7 at September 06, 2024 6:10pm UTC reported: On September 5th 2024, CISA released a security bulletin highlighting the...
Adobe Bridge Buffer Overflow Vulnerability (CNVD-2022-66015)
Adobe Bridge is a file viewer from Adobe. Adobe Bridge is vulnerable to a buffer overflow vulnerability that stems from an out-of-bounds write vulnerability that could be exploited to execute arbitrary code in the context of the current user...
Ubuntu: Security Advisory (USN-5630-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Adobe Bridge Buffer Overflow Vulnerability (CNVD-2022-64964)
Adobe Bridge is a file viewer from Adobe. Adobe Bridge is vulnerable to a buffer overflow vulnerability that stems from an out-of-bounds write vulnerability that could be exploited to execute arbitrary code in the context of the current user...
Adobe Bridge Buffer Overflow Vulnerability (CNVD-2022-64966)
Adobe Bridge is a file viewer from Adobe. Adobe Bridge is vulnerable to a buffer overflow vulnerability that stems from an out-of-bounds write vulnerability that could be exploited to execute arbitrary code in the context of the current user...
The vulnerability of the Job_ExecuteBefore and Job_ExecuteAfter parameters in the post_profilesettings.php file of the Syncovery backup tool allows a hacker to increase their privileges.
The vulnerability of the JobExecuteBefore and JobExecuteAfter parameters in the postprofilesettings.php file of the Syncovery backup tool is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability can allow a remote attacker to increase their...
Use After Free
qemu:sid is vulnerable to use after free. It allowed a remote attacker to potentially execute HW commands when shared buffers...
No control for the future Airdrop
Lines of code Vulnerability details Impact You can't control the airdrop NFT on this contract PartyGovernance.sol. You can only control the preciousListHash Proof of Concept The execute is check that the precious list preciousTokenIds and preciousTokens is valid or not if...
D-Link DIR-2150 Buffer Overflow Vulnerability
D-Link DIR-2150 is a wireless router device from D-Link. D-Link DIR-2150c is vulnerable to a buffer overflow, which can be exploited by attackers to execute code in the root context...
Adobe InCopy out-of-bounds read vulnerability (CNVD-2023-05233)
Adobe InCopy is an application produced by Adobe for professional word processing. Adobe InCopy 17.3 and 16.4.2 and prior versions contain an out-of-bounds read vulnerability that could be exploited by an attacker to execute arbitrary code in the context of the current user...
D-Link DIR-2150 Operating System Command Injection Vulnerability
The D-Link DIR-2150 is a wireless router device from D-Link.The D-Link DIR-2150 is vulnerable to an operating system command injection vulnerability that could be exploited by an attacker to execute code in the router context...
D-Link DIR-2150 Buffer Overflow Vulnerability (CNVD-2023-21662)
The D-Link DIR-2150 is a wireless router device from D-Link. The D-Link DIR-2150 is vulnerable to a buffer overflow vulnerability that can be exploited by attackers to execute code in the root context...
The vulnerability of the “runc exec --cap” command in the Runc tool for running isolated containers allows a attacker to gain access to confidential data, compromise its integrity, and cause service failures.
The vulnerability of the “runc exec --cap” command in the Runc tool for running isolated containers is related to the default access permissions settings. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...
GraphicsMagick Use-after-free (CVE-2017-11403)
A use-after-free vulnerability exists in GraphicsMagick. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Design/Logic Flaw
Adobe InDesign versions 16.4.2 and earlier and 17.3 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context...
CVE-2022-38412
Adobe Animate version 21.0.11 and earlier and 22.0.7 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the contex...