The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to errors in verifying cryptographic signatures. These vulnerabilities allow attackers to exploit their privileges.

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat and Document Cloud, are related to uncontrolled searching processes. Exploiting these vulnerabilities can allow attackers to execute arbitrary code within the...

The vulnerability of the Intel VTune Profiler performance analyzer lies in its uncontrolled search path, which allows attackers to exploit their privileges.

The vulnerability of the Intel VTune Profiler performance analyzer is related to an uncontrolled element in the search process. Exploiting this vulnerability can allow attackers to enhance their privileges...

CVE-2020-12524

Uncontrolled Resource Consumption can be exploited to cause the Phoenix Contact HMIs BTP 2043W, BTP 2070W and BTP 2102W in all versions to become unresponsive and not accurately update the display content Denial of Service...

CVE-2020-12524

CVE-2020-12524 affects Phoenix Contact HMIs BTP 2043W, BTP 2070W and BTP 2102W (all versions). The issue is Uncontrolled Resource Consumption causing the devices to become unresponsive and fail to update display content (Denial of Service). Root cause described as resource exhaustion; attack vect...

CVE-2020-12524 Phoenix Contact BTP Touch Panels uncontrolled resource consumption

Uncontrolled Resource Consumption can be exploited to cause the Phoenix Contact HMIs BTP 2043W, BTP 2070W and BTP 2102W in all versions to become unresponsive and not accurately update the display content Denial of Service...

CVE-2019-14559

Uncontrolled resource consumption in EDK II may allow an unauthenticated user to potentially enable denial of service via network access...

CVE-2019-14559

Uncontrolled resource consumption in EDK II may allow an unauthenticated user to potentially enable denial of service via network access...

CVE-2019-14559

CVE-2019-14559 affects EDK II and is described as uncontrolled resource consumption that may allow an unauthenticated network-access DoS. Connected advisories confirm a memory leak in ArpOnFrameRcvdDpc (EDK II) contributing to the issue, with multiple distributions providing fixes: Debian LTS (ed...

CVE-2020-5668

Uncontrolled resource consumption vulnerability in MELSEC iQ-R Series modules R00/01/02CPU firmware version '19' and earlier, R04/08/16/32/120 EN CPU firmware version '51' and earlier, R08/16/32/120SFCPU firmware version '22' and earlier, R08/16/32/120PCPU firmware version '25' and earlier,...

CVE-2020-5668

Uncontrolled resource consumption vulnerability in MELSEC iQ-R Series modules R00/01/02CPU firmware version '19' and earlier, R04/08/16/32/120 EN CPU firmware version '51' and earlier, R08/16/32/120SFCPU firmware version '22' and earlier, R08/16/32/120PCPU firmware version '25' and earlier,...

CVE-2020-5668

CVE-2020-5668 affects Mitsubishi Electric MELSEC iQ-R Series CPU modules, where a remote unauthenticated attacker can trigger denial-of-service by sending specially crafted SLMP packets. Affected firmware versions include R00/01/02CPU v19 and earlier, R04/08/16/32/120(EN) CPU v51 and earlier, R08...

Mitsubishi Electric MELSEC iQ-R Series (Update D)

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 8.6 ATTENTION : Exploitable remotely/low attack complexity Vendor : Mitsubishi Electric Equipment : MELSEC iQ-R Series Vulnerability : Uncontrolled Resource Consumption 2. RISK EVALUATION Successful exploitation of this vulnerability could cause a...

postgresql: Uncontrolled search path element in logical replication

A flaw was found in PostgreSQL, where it did not properly sanitize the searchpath during logical replication. This flaw allows an authenticated attacker to use this flaw in an attack similar to CVE-2018-1058 to execute an arbitrary SQL command in the user's context for replication. The highest...

The vulnerability of the Adobe Photoshop graphic editor lies in its uncontrolled search path, which allows a hacker to execute arbitrary code in the context of the current user.

The vulnerability of the Adobe Photoshop graphic editor is related to an uncontrolled element in the search process. Exploiting this vulnerability allows a hacker to execute arbitrary code in the context of the current user, using a specially crafted file...

The vulnerability of the professional video editing software Adobe Premiere Pro, related to an uncontrolled search element, allows a hacker to execute arbitrary code in the context of the current user.

The vulnerability of the professional video editing software Adobe Premiere Pro lies in its uncontrolled search process. Exploiting this vulnerability allows an attacker to execute arbitrary code in the context of the current user, using a specially crafted file...

The vulnerability of the Adobe Media Encoder application, related to an uncontrolled search path element, allows a perpetrator to execute arbitrary code in the context of the current user.

The vulnerability of the Adobe Media Encoder application relates to an uncontrolled search path element. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code in the context of the current user, using a specially crafted file...

The vulnerability of the Adobe Creative Cloud Desktop Application’s graphic editor app relates to an uncontrolled search path element, allowing a malicious actor to execute arbitrary code within the context of the current user.

The vulnerability of the Adobe Creative Cloud Desktop Application’s graphic editor app relates to an uncontrolled search path element. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code in the context of the current user, using a specially crafted file...

The vulnerability of Adobe After Effects’ video and dynamic image editing software lies in its uncontrolled search path, allowing attackers to execute arbitrary code within the context of the current user.

The vulnerability of Adobe After Effects video and dynamic image editing software is related to an uncontrolled element in the search process. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, using a specially crafted file...

The vulnerability of Adobe Dreamweaver’s HTML editor lies in the uncontrolled search path element, which allows attackers to escalate their privileges.

The vulnerability of the Adobe Dreamweaver HTML editor is related to an uncontrolled search path element. Exploiting this vulnerability can allow attackers to enhance their privileges...

postgresql: Uncontrolled search path element in logical replication

A flaw was found in PostgreSQL, where it did not properly sanitize the searchpath during logical replication. This flaw allows an authenticated attacker to use this flaw in an attack similar to CVE-2018-1058 to execute an arbitrary SQL command in the user's context for replication. The highest...