26180 matches found
WordPress Plugin Slider Pro has a security vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...
PT-2024-13000
Name of the Vulnerable Software and Affected Versions bqworks Slider Pro versions 4.8.6 and earlier Description The issue is related to a Missing Authorization vulnerability, which allows exploitation of incorrectly configured access control security levels. Recommendations For versions 4.8.6 and...
CVE-2023-41865: Missing Authorization
Missing Authorization vulnerability in bqworks Slider Pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Slider Pro: from n/a through 4.8.6...
WordPress Push Monkey Pro plugin <= 3.9 - CSRF to Stored XSS vulnerability
CSRF to Stored XSS vulnerability discovered by Muhamad Agil Fachrian Patchstack Alliance in WordPress Plugin Push Monkey Pro – Web Push Notifications and WooCommerce Abandoned Cart versions = 3.9...
WordPress plugin Currency Converter Widget PRO has a cross-site scripting vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripti...
CVE-2024-11760: Improper Neutralization of Input During Web Page Generation
The Currency Converter Widget ⚡ PRO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'currency-converter-widget-pro' shortcode in all versions up to, and including, 1.0.6 due to insufficient input sanitization and output escaping on user supplied attributes. This...
WordPress SeedProd Pro plugin <= 6.18.13 - Remote Code Execution (RCE) vulnerability
Remote Code Execution RCE vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin SeedProd Pro versions = 6.18.13...
WordPress SeedProd Pro plugin < 6.18.13 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Ngô Thái An Patchstack Alliance in WordPress Plugin SeedProd Pro versions 6.18.13...
WordPress SeedProd Pro plugin < 6.18.13 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Trương Hữu Phúc Patchstack Alliance in WordPress Plugin SeedProd Pro versions 6.18.13...
Vulnerability fixed in Adobe Premiere Pro
Adobe has fixed a vulnerability in Premiere Pro Specifically for versions 25.0, 24.6.3 and earlier. The vulnerability is in the way Premiere Pro handles files, leading to a heap-based buffer overflow. This can allow a malicious party to execute arbitrary code when a user opens a maliciously craft...
CVE-2024-53956
Premiere Pro versions 25.0, 24.6.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
CVE-2024-53956
Premiere Pro versions 25.0, 24.6.3 and earlier are affected by a heap-based buffer overflow that could allow arbitrary code execution in the user context. Exploitation requires user interaction (victim must open a malicious file). Multiple sources confirm the issue as CVE-2024-53956 and tie it to...
CVE-2024-53956 Premiere Pro | Heap-based Buffer Overflow (CWE-122)
Premiere Pro versions 25.0, 24.6.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
CVE-2024-53956 Premiere Pro | Heap-based Buffer Overflow (CWE-122)
Premiere Pro versions 25.0, 24.6.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
Barco’s various products have security vulnerabilities
Barco ClickShare CX-30/20 and others are products of Barco Belgium.Barco ClickShare CX-30/20 is a seamless wireless conferencing solution for small and medium-sized meeting rooms.Barco ClickShare C-5/10 is a seamless wireless The Barco ClickShare Bar Pro/Core is an advanced all-in-one video...
CVE-2024-53956: Heap-based Buffer Overflow
Premiere Pro versions 25.0, 24.6.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
PT-2024-36017 · Undefined · Undefined
MS-ISAC CYBERSECURITY ADVISORYMS-ISAC CYBERSECURITY ADVISORY MS-ISAC ADVISORY NUMBER: 2024-134 DATES ISSUED: 12/10/2024 SUBJECT: Multiple Vulnerabilities in Adobe Products Could Allow for Arbitrary Code Execution OVERVIEW: Multiple vulnerabilities have been discovered in Adobe products, the most...
PT-2024-10274 · Adobe · Premiere Pro
Name of the Vulnerable Software and Affected Versions: Adobe Premiere Pro versions 25.0, 24.6.3 and earlier Description: The issue is a Heap-based Buffer Overflow that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction...
Adobe Premiere Pro < 24.6.4 / 25.0 < 25.1 Arbitrary code execution (APSB24-104)
The version of Adobe Premiere Pro installed on the remote Windows host is prior to 24.6.4, 25.1. It is, therefore, affected by a vulnerability as referenced in the APSB24-104 advisory. - Premiere Pro versions 25.0, 24.6.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that...
Adobe Premiere Pro security vulnerabilities
Adobe Premiere Pro is a video editing software developed by Adobe. A security vulnerability exists in Adobe Premiere Pro version 25.0 and prior versions, which stems from the inclusion of a heap-based buffer overflow vulnerability. An attacker can exploit the vulnerability to cause arbitrary code...