9805 matches found
CVE-2021-39829
Adobe Framemaker versions 2019 Update 8 and earlier and 2020 Release Update 2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim mu...
CVE-2021-39862
Adobe Framemaker versions 2019 Update 8 and earlier and 2020 Release Update 2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this...
in jonschoning/espial
Description It can be possible to perform a clickjacking attack due to the lack of frame restrictions. PoC https://i.ibb.co/QFTZD9j/clickjack.png Impact According to PortSwigger references, it is possible for a page controlled by an attacker to load the website within an iframe. This will enable ...
in kcal-app/kcal
Description it can be possible to perform a clickjacking attack due to the lack of frame restrictions. The application does not set the response header X-Frame-Options: DENY. Proof of Concept Clickjack test page save the script as clickjacking .html and page will render in iframes...
in aces/loris
Description It is possible to perform a clickjacking attack due to the lack of frame restrictions such as X-Frame-Options: DENY Proof of Concept Tested :: https://demo.loris.ca/ https://drive.google.com/file/d/1oSi2JpYnPjjoL6QvhFnsHcTD94KMzKBj/view?usp=sharing Impact Clickjacking is an...
undertow: HTTP2SourceChannel fails to write final frame under some circumstances may lead to DoS
A flaw was found in undertow. The HTTP2SourceChannel fails to write the final frame under some circumstances, resulting in a denial of service. The highest threat from this vulnerability is availability...
netty: Request smuggling via content-length header
A flaw was found in Netty. There is an issue where the content-length header is not validated correctly if the request uses a single Http2HeaderFrame with the endstream set to true. This flaw leads to request smuggling if the request is proxied to a remote peer and translated to HTTP/1.1. The...
undertow: HTTP2SourceChannel fails to write final frame under some circumstances may lead to DoS
A flaw was found in undertow. The HTTP2SourceChannel fails to write the final frame under some circumstances, resulting in a denial of service. The highest threat from this vulnerability is availability...
undertow: HTTP2SourceChannel fails to write final frame under some circumstances may lead to DoS
A flaw was found in undertow. The HTTP2SourceChannel fails to write the final frame under some circumstances, resulting in a denial of service. The highest threat from this vulnerability is availability...
CVE-2021-34740 Cisco Aironet Access Points WLAN Control Protocol Packet Buffer Leak Denial of Service Vulnerability
A vulnerability in the WLAN Control Protocol WCP implementation for Cisco Aironet Access Point AP software could allow an unauthenticated, adjacent attacker to cause a reload of an affected device, resulting in a denial of service DoS condition. This vulnerability is due to incorrect error handli...
PT-2021-20654 · Cisco · Cisco Aironet Access Point
Name of the Vulnerable Software and Affected Versions: Cisco Aironet Access Point AP software affected versions not specified Description: A vulnerability in the WLAN Control Protocol WCP implementation could allow an unauthenticated, adjacent attacker to cause a reload of an affected device,...
CVE-2021-34740
A vulnerability in the WLAN Control Protocol WCP implementation for Cisco Aironet Access Point AP software could allow an unauthenticated, adjacent attacker to cause a reload of an affected device, resulting in a denial of service DoS condition. This vulnerability is due to incorrect error handli...
PT-2021-4741 · Cisco · Cisco Ios Xe +1
Name of the Vulnerable Software and Affected Versions: Cisco IOS Software affected versions not specified Cisco IOS XE Software affected versions not specified Description: A vulnerability in the Link Layer Discovery Protocol LLDP message parser could allow an attacker to trigger a reload of an...
SELA null pointer dereference vulnerability (CNVD-2021-73933)
SELA is a lossless audio codec. A null pointer dereference vulnerability exists in the frame::FrameDecoder::process function in framedecoder.c in SELA 20200412 and earlier versions. An attacker can exploit this vulnerability to cause a denial of service...
CVE-2021-39548
An issue was discovered in sela through 20200412. A NULL pointer dereference exists in the function frame::FrameDecoder::process located in framedecoder.c. It allows an attacker to cause Denial of Service...
CVE-2021-39548
An issue was discovered in sela through 20200412. A NULL pointer dereference exists in the function frame::FrameDecoder::process located in framedecoder.c. It allows an attacker to cause Denial of Service...
CVE-2021-39548
An issue was discovered in sela through 20200412. A NULL pointer dereference exists in the function frame::FrameDecoder::process located in framedecoder.c. It allows an attacker to cause Denial of Service...
CVE-2021-39548: NULL Pointer Dereference
An issue was discovered in sela through 20200412. A NULL pointer dereference exists in the function frame::FrameDecoder::process located in framedecoder.c. It allows an attacker to cause Denial of Service...
PT-2021-10552 · FFmpeg +1 · Ffmpeg +1
Name of the Vulnerable Software and Affected Versions: Ffmpeg version 4.2.1 Description: A Buffer Overflow issue in the filter frame function within libavfilter/vf fieldorder.c allows attackers to cause a Denial of Service or other unspecified impacts. Recommendations: For Ffmpeg version 4.2.1, a...
OpenEXR copyIntoFrameBuffer Buffer Overflow DoS
The vulnerability of the copyIntoFrameBuffer function in software for storing OpenEXR images with a wide dynamic range of brightness is related to writing beyond the buffer’s boundaries. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its...