CVE-2020-21654

emlog v6.0 contains a vulnerability in the component admin\template.php, which allows attackers to getshell via a crafted Zip file...

CVE-2021-38097

Corel PDF Fusion 2.6.2.0 is affected by an Out-of-bounds Write vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in...

FlexTV beta 跨站脚本漏洞

FlexTV beta is an open source project. A cross-site scripting vulnerability exists in index.php in the development version of FlexTV beta, which allows remote attackers to inject arbitrary web script or HTML via PHP SELF parameters...

Design/Logic Flaw

Adobe InDesign versions 16.3 and earlier, and 16.3.1 and earlier are affected by an out-of-bounds read vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious TIF fi...

CVE-2021-29360

A buffer overflow vulnerability in FORMATS!ReadUtahRLE+0x37a of Irfanview 4.57 allows attackers to execute arbitrary code via a crafted RLE file...

CVE-2021-40702

Adobe Premiere Elements version 2021.2235820 and earlier is affected by a memory corruption vulnerability due to insecure handling of a malicious psd file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this...

Cross site scripting

Photoshop Elements versions 2021 build 19.0 20210304.m.156367 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a...

SELA heap buffer overflow vulnerability

SELA is a lossless audio codec. a heap buffer overflow vulnerability exists in file::WavFile::writeToFile in wavfile.c in SELA 20200412 and earlier versions. No detailed vulnerability details are currently available...

Swftools 代码问题漏洞

SWFTools is a suite of open source software tools for creating and manipulating SWF files. a null pointer dereference vulnerability exists in the codeparse function in SWFTools code.c. An attacker could exploit this vulnerability to cause a denial of service...

CVE-2020-21596

CVE-2020-21596 affects libde265 1.0.4, with a global buffer overflow in the decode_CABAC_bit function. A crafted file can exploit this, and multiple sources report potential denial of service outcomes (and related issues in the family of libde265 CVEs). Public technical details in connected docum...

The vulnerability of the Chamilo LMS system for electronic teaching and content management arises from the lack of measures taken to protect the website structure. This allows attackers to execute arbitrary codes.

The vulnerability of the main/social/search.php and main/inc/lib/social.lib.php functions of the Chamilo LMS e-learning and content management system exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to execute...

Null pointer dereference

The gfodfdesccopy function in GPAC 1.0.1 allows attackers to cause a denial of service NULL pointer dereference via a crafted file in the MP4Box command...

GPAC 代码问题漏洞

GPAC is a multimedia framework for rich media and is distributed under the LGPL license. a null pointer dereference vulnerability exists in the DumpTrackInfo function in GPAC version 1.0.1. An attacker could exploit this vulnerability to cause a denial of service via a specially crafted file in t...

CVE-2021-38337 RSVPMaker Excel <= 1.1 Reflected Cross-Site Scripting

The RSVPMaker Excel WordPress plugin is vulnerable to Reflected Cross-Site Scripting due to a reflected $SERVER"PHPSELF" value in the /phpexcel/PHPExcel/Shared/JAMA/docs/download.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 1.1...

UBUNTU-CVE-2021-21897

A code execution vulnerability exists in the DLDxf::handleLWPolylineData functionality of Ribbonsoft dxflib 3.17.0. A specially-crafted .dxf file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2021-30789

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 14.7, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7, Security Update 2021-004 Catalina. Processing a maliciously crafted font file may lead to arbitrary code execution...

CVE-2021-30760

An integer overflow was addressed through improved input validation. This issue is fixed in iOS 14.7, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7, Security Update 2021-005 Mojave, Security Update 2021-004 Catalina. Processing a maliciously crafted font file may lead to arbitrary code execution...

Vulnerability of Windows operating systems, related to errors in processing files with extensions .LNK or .PIF, allows a perpetrator to execute arbitrary code.

The vulnerability of Windows operating systems is related to errors in processing files with the extension .LNK or .PIF. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted .LNK or .PIF file...

CVE-2020-22848

A remote code execution RCE vulnerability in the \Playsong.php component of cscms v4.1 allows attackers to execute arbitrary commands...

DRK Odenwaldkreis Testerfassung 操作系统命令注入漏洞

DRK Odenwaldkreis Testerfassung is an open source solution for obtaining and documenting corona antigen rapid test results. DRK Odenwaldkreis Testerfassung March-2021 An operating system command injection vulnerability, which originates in the application's results.php Shell metacharacter injecti...