6851 matches found
Adobe Captivate 代码问题漏洞
Adobe Captivate 2019 is a screen recording software. An uncontrolled search path element vulnerability exists in Adobe Captivate 2019 11.5.1.499 and earlier versions. An attacker can exploit the vulnerability to elevate privileges...
Adobe Illustrator 代码问题漏洞
Adobe Illustrator 2020 is a vector graphics editor. An uncontrolled search path element vulnerability exists in Adobe Illustrator 2020 25.0 and earlier versions. An attacker can exploit the vulnerability to execute arbitrary code...
Adobe Incopy 代码问题漏洞
Adobe InCopy is a professional word processing program from Adobe that is integrated with Adobe InDesign. An uncontrolled search path element vulnerability exists in Adobe InCopy 15.1.3 and earlier versions. An attacker can exploit this vulnerability to execute arbitrary code...
EyesOfNetwork 5.3 Remote Code Execution / Privilege Escalation
Exploit Title: EyesOfNetwork 5.3 - RCE & PrivEsc Date: 10/01/2021 Exploit Author: Audencia Business SCHOOL Red Team Vendor Homepage: https://www.eyesofnetwork.com/en Software Link: http://download.eyesofnetwork.com/EyesOfNetwork-5.3-x8664-bin.iso Version: 5.3 Authentified Romote Code Execution fl...
Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2021-1022)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS 2.0 SP9 : curl (EulerOS-SA-2021-1022)
According to the versions of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP wildcard match...
The vulnerability of the OpenSSL library used in the WildFly server, related to uncontrolled resource consumption, allows attackers to cause service failures or gain full access to the system.
The vulnerability of the OpenSSL library used by the WildFly server is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures or gain full access to the system...
CVE-2018-1000891
Bitcoin SV before 0.1.1 allows uncontrolled resource consumption when receiving messages with invalid checksums...
CVE-2018-1000892
Bitcoin SV before 0.1.1 allows uncontrolled resource consumption when receiving sendheaders messages...
CVE-2018-1000893
Bitcoin SV before 0.1.1 allows uncontrolled resource consumption when deserializing transactions...
Design/Logic Flaw
Bitcoin SV before 0.1.1 allows uncontrolled resource consumption when receiving sendheaders messages...
postgresql: Uncontrolled search path element in logical replication
A flaw was found in PostgreSQL, where it did not properly sanitize the searchpath during logical replication. This flaw allows an authenticated attacker to use this flaw in an attack similar to CVE-2018-1058 to execute an arbitrary SQL command in the user's context for replication. The highest...
The vulnerability of the Dovecot mail server, caused by uncontrolled recursion, allows attackers to trigger a service failure.
The vulnerability of the Dovecot mail server arises due to an uncontrolled recursion. Exploiting this vulnerability allows a malicious actor, operating remotely, to cause service failures through a specially crafted email message...
Pulse Secure VPN Remote Code Execution Exploit
The Pulse Connect Secure appliance versions prior to 9.1R9 suffer from an uncontrolled gzip extraction vulnerability which allows an attacker to overwrite arbitrary files, resulting in remote code execution as root. Admin credentials are required for successful exploitation...
The vulnerability of the Undertow web server, related to uncontrolled resource consumption, allows attackers to cause service failures.
The vulnerability of the Undertow web server is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...
Pulse Secure VPN Remote Code Execution
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Pulse Secure VPN gzip RCE', 'Description' = %q The Pulse Connect Secure appliance before 9.1R9 suffers from an uncontrolled gzip extraction...
postgresql: Uncontrolled search path element in CREATE EXTENSION
A flaw was found in PostgreSQL, where some PostgreSQL extensions did not use the searchpath safely in their installation script. This flaw allows an attacker with sufficient privileges to trick an administrator into executing a specially crafted script during the extension's installation or updat...
Security Bulletin: Open Source Security issues for NPS console.
Summary Fixed Open Source issues for listed CVEs for NPS console. Vulnerability Details CVEID: CVE-2018-19838 DESCRIPTION: LibSass is vulnerable to a denial of service, caused by a stack-based buffer overflow in the IMPLEMENTASTOPERATORS expansion in ast.cpp. By persuading a victim to open a...
EulerOS 2.0 SP5 : libproxy (EulerOS-SA-2020-2550)
According to the version of the libproxy packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - url::recvline in url.cpp in libproxy 0.4.x through 0.4.15 allows a remote HTTP server to trigger uncontrolled recursion via a response composed o...
