UBUNTU-CVE-2021-42198

An issue was discovered in swftools through 20201222. A NULL pointer dereference exists in the function swfGetBits located in rfxswf.c. It allows an attacker to cause Denial of Service...

UBUNTU-CVE-2021-42204

An issue was discovered in swftools through 20201222. A heap-buffer-overflow exists in the function swfGetBits located in rfxswf.c. It allows an attacker to cause code execution...

Swftools 缓冲区错误漏洞

Swftools is a set of utilities for working with Adobe Flash files SWF files. An out-of-bounds write vulnerability exists in Swftools 2020-12-22 and prior versions, which stems from a heap buffer overflow in function swfFontExtractDefineTextCallback located in swftext.c. The vulnerability is cause...

Swftools 缓冲区错误漏洞

Swftools is a set of utilities for working with Adobe Flash files SWF files. An out-of-bounds write vulnerability exists in Swftools 2020-12-22 and prior versions, which stems from a heap buffer overflow in the function swfGetD64 located in rfxswf.c. The vulnerability is caused by a heap buffer...

PT-2022-11567

Name of the Vulnerable Software and Affected Versions swftools versions through 20201222 Description An issue exists in the function swf GetBits located in rfxswf.c, which allows an attacker to cause code execution due to a heap-buffer-overflow. Recommendations For versions through 20201222,...

PT-2022-11565

Name of the Vulnerable Software and Affected Versions swftools versions prior to 20201223 Description An issue exists in the function swf DeleteFilter located in swffilter.c, allowing an attacker to cause Denial of Service due to a NULL pointer dereference. Recommendations For versions prior to...

PT-2022-11561

Name of the Vulnerable Software and Affected Versions swftools versions through 20201222 Description An issue exists in the function swf FontExtract DefineTextCallback located in swftext.c, allowing an attacker to cause code execution due to a heap buffer overflow. Recommendations For versions...

PT-2022-11560

Name of the Vulnerable Software and Affected Versions swftools versions prior to 20201223 Description An issue exists in the function swf GetBits located in rfxswf.c, which allows an attacker to cause Denial of Service due to a NULL pointer dereference. Recommendations For versions prior to...

PT-2022-11566

Name of the Vulnerable Software and Affected Versions swftools versions through 20201222 Description An issue exists in the function swf FontExtract DefineTextCallback located in swftext.c, allowing an attacker to cause code execution due to a heap-use-after-free. Recommendations For versions...

Magento 2 Community Edition XSS Vulnerability

A stored cross-site scripting vulnerability exists in the WYSIWYG editor of Magento Open Source prior to 1.9.4.2, and Magento Commerce prior to 1.14.4.2, Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. An authenticated user with privileges to the editor can...

GHSA-FF7R-7RRM-WX6W Magento 2 Community Edition XSS Vulnerability

A stored cross-site scripting vulnerability exists in the WYSIWYG editor of Magento Open Source prior to 1.9.4.2, and Magento Commerce prior to 1.14.4.2, Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. An authenticated user with privileges to the editor can...

CVE-2018-6359

The decompileIF function util/decompile.c in libming through 0.4.8 is vulnerable to a use-after-free, which may allow attackers to cause a denial of service or unspecified other impact via a crafted SWF file...

jplayer Cross Site Scripting vulnerability

Multiple cross-site scripting XSS vulnerabilities in actionscript/Jplayer.as in the Flash SWF component jplayer.swf in jPlayer before 2.3.0 allow remote attackers to inject arbitrary web script or HTML via the 1 jQuery or 2 id parameters, a different vulnerability than CVE-2013-1942 and...

GHSA-3JCQ-CWR7-6332 jplayer Cross Site Scripting vulnerability

Multiple cross-site scripting XSS vulnerabilities in actionscript/Jplayer.as in the Flash SWF component jplayer.swf in jPlayer before 2.3.0 allow remote attackers to inject arbitrary web script or HTML via the 1 jQuery or 2 id parameters, a different vulnerability than CVE-2013-1942 and...

GHSA-633W-W2PF-X84R Apache OpenMeetings Cross-site Scripting vulnerability

Cross-site scripting XSS vulnerability in the SWF panel in Apache OpenMeetings before 3.1.2 allows remote attackers to inject arbitrary web script or HTML via the swf parameter...

Apache OpenMeetings Cross-site Scripting vulnerability

Cross-site scripting XSS vulnerability in the SWF panel in Apache OpenMeetings before 3.1.2 allows remote attackers to inject arbitrary web script or HTML via the swf parameter...

GHSA-64R3-582J-FRQM YUI Cross-site Scripting (XSS) vulnerability

Cross-site scripting XSS vulnerability in uploader.swf in the Uploader component in Yahoo! YUI 3.2.0 through 3.9.1, as used in Moodle through 2.1.10, 2.2.x before 2.2.11, 2.3.x before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.1, and other products, allows remote attackers to inject arbitrary we...

Moodle XSS Vulnerability

Moodle through 2.6.11, 2.7.x before 2.7.11, 2.8.x before 2.8.9, and 2.9.x before 2.9.3 does not properly restrict the availability of Flowplayer, which allows remote attackers to conduct cross-site scripting XSS attacks via a crafted .swf file...

GHSA-2HW6-6RGF-726V Moodle XSS Vulnerability

Moodle through 2.6.11, 2.7.x before 2.7.11, 2.8.x before 2.8.9, and 2.9.x before 2.9.3 does not properly restrict the availability of Flowplayer, which allows remote attackers to conduct cross-site scripting XSS attacks via a crafted .swf file...

Ming buffer overflow vulnerability (CNVD-2022-20528)

Ming is a Flash SWF output library written in C language. A security vulnerability exists in Ming 0.4.8, which can be exploited by an attacker to cause a direct segmentation error and lead to a denial of service...