1705 matches found
Security Updates for Microsoft Word Products C2R (August 2019)
A Microsoft Word product is missing security updates. It is, therefore, affected by the following vulnerability : - A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability...
The vulnerability of the Corel WordPerfect text document creation and editing software’s Word97Import200.dll library allows a hacker to execute arbitrary code.
The vulnerability of the Corel WordPerfect text document creation and editing software’s Word97Import200.dll library is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current...
Adobe Framemaker Out-of-Bounds Write Vulnerability (CNVD-2022-41732)
Adobe Framemaker is the United States of America Odooby Adobe company's set of page layout software for writing and editing large or complex documents including structured documents. A security vulnerability exists in Adobe Framemaker. An attacker can exploit the vulnerability to execute arbitrar...
Remote code execution in ASP.NET Core
A remote code execution vulnerability exists in ASP.NET Core software when the software fails to handle objects in memory.An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user, aka 'ASP.NET Core Remote Code Execution Vulnerability'...
Multiple Adobe Products Resource Management Error Vulnerability (CNVD-2022-43379)
Adobe Acrobat is a set of tools for editing and converting PDF files.Adobe Acrobat Reader is a PDF viewer. The software is used to print, sign and annotate PDFs. A resource management error vulnerability exists in several Adobe products, which can be exploited by an attacker to execute arbitrary...
The vulnerability of the Adobe Framemaker desktop publishing system, related to reading data beyond the buffer in memory, allows a hacker to execute arbitrary code.
The vulnerability of the desktop publishing system Adobe Framemaker relates to reading beyond the buffer in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code in the context of the current user, using a specially created file...
The vulnerability of the software for working with animations in Adobe Character Animator lies in the ability to write code beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.
The vulnerability of the Adobe Character Animator software for animating graphics is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code in the context of the current user, using a specially crafted SVG file...
The vulnerability of the Adobe Framemaker desktop publishing system, related to writing beyond the buffer boundaries in memory, allows a hacker to execute arbitrary code.
The vulnerability of the Adobe Framemaker desktop publishing system lies in the writing of code beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code in the context of the current user, using a specially created file...
The vulnerability of the Adobe Framemaker desktop publishing system, related to writing beyond the buffer boundaries in memory, allows a hacker to execute arbitrary code.
The vulnerability of the Adobe Framemaker desktop publishing system lies in the writing of code beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code in the context of the current user, using a specially created file...
GHSA-MW6P-49JF-9935 Moodle allows remote attackers to obtain sensitive information from myprofile block by visiting user-context page
Moodle 2.0.x before 2.0.2 allows remote attackers to obtain sensitive information from a myprofile aka My profile block by visiting a user-context page...
Moodle allows remote attackers to obtain sensitive information from myprofile block by visiting user-context page
Moodle 2.0.x before 2.0.2 allows remote attackers to obtain sensitive information from a myprofile aka My profile block by visiting a user-context page...
CVE-2022-1460
An issue has been discovered in GitLab affecting all versions starting from 9.2 before 14.8.6, all versions starting from 14.9 before 14.9.4, all versions starting from 14.10 before 14.10.1. GitLab was not performing correct authorizations on scheduled pipelines allowing a malicious user to run a...
PT-2022-13904 · Gitlab · Gitlab
Name of the Vulnerable Software and Affected Versions: GitLab versions 9.2 through 14.8.5 GitLab versions 14.9 through 14.9.3 GitLab versions 14.10 through 14.10.0 Description: An issue has been discovered in GitLab where it was not performing correct authorizations on scheduled pipelines. This...
Adobe Framemaker 缓冲区错误漏洞
Adobe Framemaker is the United States of America Odooby Adobe company's set of page layout software for writing and editing large or complex documents including structured documents. A security vulnerability exists in Adobe Framemaker. An attacker could exploit the vulnerability to execute...
Adobe Character Animator 缓冲区错误漏洞
Adobe Character Animator, a motion capture and animation tool from Adobe, is vulnerable to an out-of-bounds write vulnerability that could be exploited to execute arbitrary code in the context of the current user...
Vulnerability of the Microsoft Office Graphics Package components in Microsoft Office programs, allowing a hacker to execute arbitrary code
The vulnerability of the Microsoft Office Graphics Package components in Microsoft Office products is related to access to resources through incompatible types. Exploiting this vulnerability could allow an attacker to execute arbitrary code in the context of the current user...
UBUNTU-CVE-2021-42532
XMP Toolkit SDK version 2021.07 and earlier is affected by a stack-based buffer overflow vulnerability potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted file...
CVE-2022-26111
The BeanShell components of IRISNext through 9.8.28 allow execution of arbitrary commands on the target server by creating a custom search or editing an existing/predefined search of the documents. The search components permit adding BeanShell expressions that result in Remote Code Execution in t...
Out-of-bounds write vulnerability in multiple Adobe products (CNVD-2022-52921)
Adobe Acrobat is a set of PDF file editing and conversion tools.Adobe Reader is a set of PDF document reading software. Multiple Adobe products have out-of-bounds write vulnerabilities that can be exploited by an attacker to execute arbitrary code in the context of the current user...
Adobe Photoshop out-of-bounds write vulnerability (CNVD-2022-42167)
Adobe Photoshop is a set of image processing software from Adobe. Adobe Photoshop is vulnerable to an out-of-bounds write vulnerability. An attacker could exploit the vulnerability to execute arbitrary code in the context of the current user...