127 matches found
CVE-2021-40787
Adobe Premiere Elements 20210809.daily.2242976 and earlier is affected by a memory corruption vulnerability due to insecure handling of a malicious file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerabilit...
CVE-2021-42526
Adobe Premiere Elements 20210809.daily.2242976 and earlier is affected by a memory corruption vulnerability due to insecure handling of a malicious file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerabilit...
CVE-2021-40779
Adobe Media Encoder version 15.4.1 and earlier is affected by a memory corruption vulnerability due to insecure handling of a malicious file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability...
CVE-2021-20172
All known versions of the Netgear Genie Installer for macOS contain a local privilege escalation vulnerability. The installer of the macOS version of Netgear Genie handles certain files in an insecure way. A malicious actor who has local access to the endpoint on which the software is going to be...
Netgear genie 权限许可和访问控制问题漏洞
Netgear genie, a Netgear program that presents itself as a dashboard, is vulnerable to a permission and access control issue in Netgear Genie Installer for macOS, which stems from the fact that all known versions of Netgear Genie Installer contain a local elevation of privileges vulnerability. Th...
PT-2021-4932 · Adobe · Premiere Pro
Name of the Vulnerable Software and Affected Versions: Adobe Premiere Pro versions 15.4.1 and earlier Description: The issue is related to a memory corruption vulnerability due to insecure handling of a malicious file. This could potentially result in arbitrary code execution in the context of th...
CVE-2021-36078
Adobe Bridge version 11.1 and earlier is affected by a memory corruption vulnerability due to insecure handling of a malicious Bridge file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability...
CVE-2021-36069
Adobe Bridge version 11.1 and earlier is affected by a memory corruption vulnerability due to insecure handling of a malicious Bridge file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability...
CVE-2021-36049
Adobe Bridge version 11.1 and earlier is affected by a memory corruption vulnerability due to insecure handling of a malicious Bridge file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability...
Adobe Captivate 安全漏洞
Adobe Captivate 2019 is a tool that allows us to quickly create and produce interactive content in html. An elevation of privilege vulnerability exists in Adobe Captivate 2019 11.5.5 and earlier versions. The vulnerability stems from creating temporary files in a directory with incorrect...
CVE-2021-33199
In Expression Engine before 6.0.3, addonIcon in Addons/file/mod.file.php relies on the untrusted input value of input-get'file' instead of the fixed file names of icon.png and icon.svg...
CVE-2020-4008
The installer of the macOS Sensor for VMware Carbon Black Cloud prior to 3.5.1 handles certain files in an insecure way. A malicious actor who has local access to the endpoint on which a macOS sensor is going to be installed, may overwrite a limited number of files with output from the sensor...
CVE-2020-4008
CVE-2020-4008 concerns the macOS Sensor for VMware Carbon Black Cloud prior to version 3.5.1, where the installer handles certain files insecurely. This vulnerability could allow a local attacker with access to the endpoint to overwrite a limited set of files with output from the sensor installat...
CVE-2020-6328
SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated CGM file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...
CVE-2020-7668
CVE-2020-7668 affects the Go package github.com/unknwon/cae/tz, where the ExtractTo function does not securely escape file paths in zip archives that contain leading or non-leading "..". This can allow an attacker to add or replace files system-wide. The vulnerability is described across multiple...
ansible: secrets readable after ansible-vault edit
A flaw was found in Ansible Engine when using Ansible Vault for editing encrypted files. When a user executes "ansible-vault edit", another user on the same computer can read the old and new secret, as it is created in a temporary file with mkstemp and the returned file descriptor is closed and t...
CVE-2010-3373
paxtest handles temporary files insecurely...
RhinOS CMS 3.x - Arbitrary File Download
RhinOS CMS 3.x - Arbitrary File Download Exploit Title: RhinOS CMS 3.x - Arbitrary File Download Dork: N/A Date: 2018-10-29 Exploit Author: Ihsan Sencan Vendor Homepage: http://www.saltos.org/ Software Link: https://netix.dl.sourceforge.net/project/rhinos/archived/r1190/RhinOS-en-3.0-1190.win32.e...
CVE-2018-16539
In Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use incorrect access checking in temp file handling to disclose contents of files on the system otherwise not readable...