Design/Logic Flaw

Adobe Bridge version 11.1.1 and earlier is affected by an out-of-bounds read vulnerability when parsing a crafted .jpe file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user...

Design/Logic Flaw

Adobe Bridge version 11.1.1 and earlier is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user...

Foxit PDF Editor for Mac < 11.1.1 Multiple Vulnerabilities

According to its version, the Foxit PDF Editor for Mac application previously named Foxit PhantomPDF for Mac installed on the remote macOS host is prior to 11.1.1. It is, therefore affected by multiple vulnerabilities: - An out-of-bounds read error exists in Foxit PDF Editor for Mac due to the...

Null pointer dereference

Adobe Bridge version 11.1.1 and earlier is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this...

Design/Logic Flaw

Adobe Bridge version 11.1.1 and earlier is affected by an out-of-bounds read vulnerability when parsing a crafted SGI file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user...

CVE-2021-42725 Adobe Bridge Memory Corruption could lead to Arbitrary code execution

Adobe Bridge version 11.1.1 and earlier is affected by a memory corruption vulnerability due to insecure handling of a malicious M4A file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability...

Adobe Bridge 代码问题漏洞

Adobe Bridge is a free digital asset management application from Adobe. 11.1.1 and earlier versions of Adobe Bridge are vulnerable to a null pointer dereference vulnerability that could be exploited by attackers to cause a memory leak...

Adobe Bridge 缓冲区错误漏洞

Adobe Bridge is a free digital asset management application from Adobe. A memory buffer out-of-bounds access vulnerability exists in Adobe Bridge 11.1.1 and earlier versions. An attacker can exploit this vulnerability to execute arbitrary code...

Adobe Bridge 缓冲区错误漏洞

Adobe Bridge is a free digital asset management application from Adobe. A buffer overflow vulnerability exists in Adobe Bridge 11.1.1 and earlier versions. An attacker can exploit the vulnerability to execute arbitrary code...

Adobe Bridge 11.x < 11.1.2 Multiple Vulnerabilities (APSB21-94)

The version of Adobe Bridge installed on the remote Windows host is prior to 11.1.2. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb21-94 advisory. - Acrobat Bridge versions 11.1.1 and earlier are affected by a use-after-free vulnerability in the processing of...

PT-2021-4916 · Adobe · Bridge

Name of the Vulnerable Software and Affected Versions: Adobe Bridge versions 11.1.1 and earlier Description: The issue is related to a memory corruption vulnerability due to insecure handling of a malicious PSD file. This could potentially result in arbitrary code execution in the context of the...

CVE-2021-39178

Next.js is a React framework. Versions of Next.js between 10.0.0 and 11.0.0 contain a cross-site scripting vulnerability. In order for an instance to be affected by the vulnerability, the next.config.js file must have images.domains array assigned and the image host assigned in images.domains mus...

CVE-2021-39178

Next.js is a React framework. Versions of Next.js between 10.0.0 and 11.0.0 contain a cross-site scripting vulnerability. In order for an instance to be affected by the vulnerability, the next.config.js file must have images.domains array assigned and the image host assigned in images.domains mus...

Siren Investigate Cross-Site Request Forgery Vulnerability

Siren Investigate is a front-end to the Siren platform from Siren Ireland, allowing the creation of dashboards, charts, link analysis, alerts, etc. A cross-site request forgery vulnerability exists in versions of Siren Investigate prior to 11.1.1, which can be exploited by an attacker to specify...

CVE-2021-21358

TYPO3 is an open source PHP based web content management system. In TYPO3 before versions 10.4.14, 11.1.1 it has been discovered that the Form Designer backend module of the Form Framework is vulnerable to cross-site scripting. A valid backend user account with access to the form module is needed...

Cross site scripting

TYPO3 is an open source PHP based web content management system. In TYPO3 before versions 7.6.51, 8.7.40, 9.5.25, 10.4.14, 11.1.1 it has been discovered that content elements of type menu are vulnerable to cross-site scripting when their referenced items get previewed in the page module. A valid...

PT-2021-14433 · Typo3 · Typo3

Name of the Vulnerable Software and Affected Versions: TYPO3 versions prior to 6.2.57 TYPO3 versions prior to 7.6.51 TYPO3 versions prior to 8.7.40 TYPO3 versions prior to 9.5.25 TYPO3 versions prior to 10.4.14 TYPO3 versions prior to 11.1.1 Description: The issue concerns user session identifier...

CVE-2019-4139

IBM Cognos Analytics 11.0, 11.1.0, and 11.1.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID:...

Symantec Endpoint Encryption < 8.x / 9.x < 11.1.1 Unquoted Search Path Local Privilege Escalation (SYM16-006)

The version of the Symantec Endpoint Encryption SEE Drive Encryption Client installed on the remote Windows host is prior to 11.1.1. It is, therefore, affected by a privilege escalation vulnerability due to an unquoted search path in EEDService. A local attacker can exploit this to escalate...