CVE-2021-40709

Adobe Photoshop versions 21.2.11 and earlier and 22.5 and earlier are affected by a Buffer Overflow vulnerability when parsing a specially crafted SVG file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user...

CVE-2021-39823

Adobe svg-native-viewer 8182d14dfad5d1e10f53ed830328d7d9a3cfa96d and earlier versions are affected by a heap buffer overflow vulnerability due to insecure handling of a malicious .svg file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is...

Buffer overflow

Adobe Photoshop versions 21.2.11 and earlier and 22.5 and earlier are affected by a Buffer Overflow vulnerability when parsing a specially crafted SVG file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user...

Heap overflow

Adobe svg-native-viewer 8182d14dfad5d1e10f53ed830328d7d9a3cfa96d and earlier versions are affected by a heap buffer overflow vulnerability due to insecure handling of a malicious .svg file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is...

CVE-2021-40709 Adobe Photoshop Buffer Overflow leads to Arbitrary Code Execution

Adobe Photoshop versions 21.2.11 and earlier and 22.5 and earlier are affected by a Buffer Overflow vulnerability when parsing a specially crafted SVG file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user...

CVE-2021-40709 Adobe Photoshop Buffer Overflow leads to Arbitrary Code Execution

Adobe Photoshop versions 21.2.11 and earlier and 22.5 and earlier are affected by a Buffer Overflow vulnerability when parsing a specially crafted SVG file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user...

CVE-2021-40709

CVE-2021-40709 affects Adobe Photoshop 21.2.11 and earlier and 22.5 and earlier, due to a buffer overflow when parsing a specially crafted SVG file. An unauthenticated attacker could achieve arbitrary code execution in the context of the current user, with user interaction required (victim must o...

CVE-2021-39823 svg-native-viewer Heap Buffer overflow Vulnerability

Adobe svg-native-viewer 8182d14dfad5d1e10f53ed830328d7d9a3cfa96d and earlier versions are affected by a heap buffer overflow vulnerability due to insecure handling of a malicious .svg file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is...

CVE-2021-39823

CVE-2021-39823 affects Adobe SVG-Native-Viewer (8182d14dfad5d1e10f53ed830328d7d9a3cfa96d and earlier). It is a heap buffer overflow caused by insecure handling of a malicious SVG file, potentially allowing arbitrary code execution in the current user’s context. Exploitation requires user interact...

CVE-2021-40104

An issue was discovered in Concrete CMS through 8.5.5. There is an SVG sanitizer bypass...

CVE-2021-40104

An issue was discovered in Concrete CMS through 8.5.5. There is an SVG sanitizer bypass...

Security feature bypass

An issue was discovered in Concrete CMS through 8.5.5. There is an SVG sanitizer bypass...

CVE-2021-40104

Concrete CMS

CVE-2021-40104

An issue was discovered in Concrete CMS through 8.5.5. There is an SVG sanitizer bypass...

Cross-site Scripting in peertube

peertube is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'. It was found that one could upload a SVG image and then send the url of that to other users and when they open the link we can get their complete session keys as the session keys stored i...

GHSA-F2C5-997W-7F5C Cross-site Scripting in peertube

peertube is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'. It was found that one could upload a SVG image and then send the url of that to other users and when they open the link we can get their complete session keys as the session keys stored i...

PeerTube Cross-Site Scripting Vulnerability

PeerTube is a decentralized video sharing service platform. Peertube has a cross-site scripting vulnerability in versions prior to v3.4.0, which stems from the application's lack of user input data validation and filtering of the data at the input location, and could be used by an attacker to...

Adobe Photoshop 21.x < 21.2.12 / 22.x < 22.5.1 Vulnerability (APSB21-84)

The version of Adobe Photoshop installed on the remote Windows host is prior to 21.2.12/22.5.1. It is, therefore, affected by a vulnerability as referenced in the apsb21-84 advisory. - Adobe Photoshop versions 21.2.11 and earlier and 22.5 and earlier are affected by a Buffer Overflow vulnerabilit...

Adobe Photoshop 21.x < 21.2.12 / 22.x < 22.5.1 Vulnerability (macOS APSB21-84)

The version of Adobe Photoshop installed on the remote macOS or Mac OS X host is prior to 21.2.12/22.5.1. It is, therefore, affected by a vulnerability as referenced in the apsb21-84 advisory. - Adobe Photoshop versions 21.2.11 and earlier and 22.5 and earlier are affected by a Buffer Overflow...

in sbrl/pepperminty-wiki

Unrestricted Upload of File with Dangerous Type allows javascript injection Uploaded files represent a significant risk to applications. The first step in many attacks is to get some code to the system to be attacked. Then the attack only needs to find a way to get the code executed. Using a file...