3309 matches found
CVE-2020-21654
emlog v6.0 contains a vulnerability in the component admin\template.php, which allows attackers to getshell via a crafted Zip file...
CVE-2020-21654
emlog v6.0 contains a vulnerability in the component admin\template.php, which allows attackers to getshell via a crafted Zip file...
CVE-2021-38097
Corel PDF Fusion 2.6.2.0 is affected by an Out-of-bounds Write vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in...
FlexTV beta 跨站脚本漏洞
FlexTV beta is an open source project. A cross-site scripting vulnerability exists in index.php in the development version of FlexTV beta, which allows remote attackers to inject arbitrary web script or HTML via PHP SELF parameters...
Design/Logic Flaw
Adobe InDesign versions 16.3 and earlier, and 16.3.1 and earlier are affected by an out-of-bounds read vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious TIF fi...
CVE-2021-29360
A buffer overflow vulnerability in FORMATS!ReadUtahRLE+0x37a of Irfanview 4.57 allows attackers to execute arbitrary code via a crafted RLE file...
CVE-2021-40702
Adobe Premiere Elements version 2021.2235820 and earlier is affected by a memory corruption vulnerability due to insecure handling of a malicious psd file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this...
Cross site scripting
Photoshop Elements versions 2021 build 19.0 20210304.m.156367 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a...
SELA heap buffer overflow vulnerability
SELA is a lossless audio codec. a heap buffer overflow vulnerability exists in file::WavFile::writeToFile in wavfile.c in SELA 20200412 and earlier versions. No detailed vulnerability details are currently available...
Swftools 代码问题漏洞
SWFTools is a suite of open source software tools for creating and manipulating SWF files. a null pointer dereference vulnerability exists in the codeparse function in SWFTools code.c. An attacker could exploit this vulnerability to cause a denial of service...
CVE-2020-21596
CVE-2020-21596 affects libde265 1.0.4, with a global buffer overflow in the decode_CABAC_bit function. A crafted file can exploit this, and multiple sources report potential denial of service outcomes (and related issues in the family of libde265 CVEs). Public technical details in connected docum...
Chamilo LMS Code Execution
The vulnerability of the main/social/search.php and main/inc/lib/social.lib.php functions of the Chamilo LMS e-learning and content management system exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to execute...
Null pointer dereference
The gfodfdesccopy function in GPAC 1.0.1 allows attackers to cause a denial of service NULL pointer dereference via a crafted file in the MP4Box command...
GPAC 代码问题漏洞
GPAC is a multimedia framework for rich media and is distributed under the LGPL license. a null pointer dereference vulnerability exists in the DumpTrackInfo function in GPAC version 1.0.1. An attacker could exploit this vulnerability to cause a denial of service via a specially crafted file in t...
CVE-2021-38337 RSVPMaker Excel <= 1.1 Reflected Cross-Site Scripting
The RSVPMaker Excel WordPress plugin is vulnerable to Reflected Cross-Site Scripting due to a reflected $SERVER"PHPSELF" value in the /phpexcel/PHPExcel/Shared/JAMA/docs/download.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 1.1...
UBUNTU-CVE-2021-21897
A code execution vulnerability exists in the DLDxf::handleLWPolylineData functionality of Ribbonsoft dxflib 3.17.0. A specially-crafted .dxf file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability...
CVE-2021-30789
An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 14.7, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7, Security Update 2021-004 Catalina. Processing a maliciously crafted font file may lead to arbitrary code execution...
CVE-2021-30760
An integer overflow was addressed through improved input validation. This issue is fixed in iOS 14.7, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7, Security Update 2021-005 Mojave, Security Update 2021-004 Catalina. Processing a maliciously crafted font file may lead to arbitrary code execution...
Windows File Execution Arbitrary Code
The vulnerability of Windows operating systems is related to errors in processing files with the extension .LNK or .PIF. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted .LNK or .PIF file...