352 matches found
UBUNTU-CVE-2022-2084
Sensitive data could be exposed in world readable logs of cloud-init before version 22.3 when schema failures are reported. This leak could include hashed passwords...
CVE-2021-43755
Adobe After Effects versions 22.0 and earlier and 18.4.2 and earlier are affected by an Out-of-bounds Write vulnerability due to insecure handling of a malicious file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit thi...
Avast Antivirus和AVG Antivirus 资源管理错误漏洞
Avast Antivirus is a suite of antivirus software from the Czech company Avast. A vulnerability exists in Avast Antivirus prior to version 22.1 and AVG Antivirus prior to version 22.1 due to a security restriction not being properly applied by the application in the "Anti Rootkit" driver in...
Freedesktop Poppler 安全漏洞
Freedesktop Poppler is a Freedesktop community C++ class library for generating PDFs, which is inherited from Xpdf PDF reader. A security vulnerability exists in Freedesktop Poppler version v22.03.0, which stems from a logic error in the Hints::Hints function. An attacker exploiting this...
Android Enterprise: Allow cross file copy and paste policy not working as expected after Citrix Endpoint Management upgraded to 22.2.0 (or later).
Customers who's restriction policy setting "Allow cross file copy and paste" is not working as expected after Citrix Endpoint Management CEM upgraded to 22.2.0 or later release...
CVE-2021-0064
Insecure inherited permissions in the IntelR PROSet/Wireless WiFi software installer for Windows 10 before version 22.40 may allow an authenticated user to potentially enable escalation of privilege via local access...
Corel PhotoPaint Standard 2020 缓冲区错误漏洞
Corel PhotoPaint Standard 2020 is a commercial photo editing and pixel-based design program for Corel from Corel Digital Technology Corel Canada. A buffer error vulnerability in CDRRip.dll in Corel PhotoPaint Standard 2020 22.0.0.474 can be exploited by an unauthenticated attacker to execute...
Gibbon 跨站脚本漏洞
Gibbon is a school platform that solves real-world problems that educators encounter every day. A cross-site scripting vulnerability exists in Gibbon application version 22 that allows arbitrary execution of JavaScript code...
Cisco BroadWorks Messaging Server XML External Entity Injection Vulnerability
Cisco BroadWorks Messaging Server is a database server from the American company Cisco Cisco. An XML external entity injection vulnerability exists in Cisco BroadWorks Messaging Server version 22.0. The vulnerability stems from the program not properly handling XML External Entity XXE entries whe...
CVE-2020-24458
Incomplete cleanup in some IntelR PROSet/Wireless WiFi and Killer TM drivers before version 22.0 may allow a privileged user to potentially enable information disclosure and denial of service via adjacent access...
CVE-2020-8767
Uncaught exception in the IntelR 50GbE IP Core for IntelR Quartus Prime before version 20.2 may allow an authenticated user to potentially enable denial of service via local access...
Pixar Renderman Elevation of Privilege Vulnerability
Pixar Renderman is a rendering application used in animation and movie production. A local elevation of privilege vulnerability exists in the Installation Assistant tool in version 22.3.0 of Pixar Renderman for Mac OS X-based platforms. A local attacker can exploit the vulnerability to elevate...
PHICOMM K2 (PSG1218) Input Validation Vulnerability
The PHICOMM K2 PSG1218 is a wireless router product from the Chinese company PHICOMM. An input validation vulnerability exists in PHICOMM K2 PSG1218 versions 22.5.11.5 and earlier. A remote attacker can exploit this vulnerability by sending a request to an ASP script to execute code...
Extreme EXOS Arbitrary File Read Vulnerability
Extreme EXOS is a new generation modular switch operating system from Extreme Networks. An arbitrary file read vulnerability exists in Extreme EXOS versions 16.x, 21.x, and 22.x. An attacker can exploit this vulnerability to read arbitrary files. An attacker can exploit this vulnerability to read...
Extreme EXOS Elevation of Privilege Vulnerability
Extreme EXOS is a new generation modular switch operating system from Extreme Networks. An elevation of privilege vulnerability exists in Extreme EXOS versions 16.x, 21.x, and 22.x. The vulnerability can be exploited to obtain a root shell. An attacker can exploit this vulnerability to obtain a...
Extreme EXOS elevation of privilege vulnerability (CNVD-2017-32702)
Extreme EXOS is a new generation modular switch operating system from Extreme Networks. An elevation of privilege vulnerability exists in Extreme EXOS versions 16.x, 21.x, and 22.x. The vulnerability can be exploited to obtain a root shell. An attacker can exploit this vulnerability to obtain a...
OrientDB Arbitrary Command Execution Vulnerability
OrientDB is a British company Orient a set of open source NoSQL database management system . The system supports ACID transactions , fast indexes and SQL queries and other features . OrientDB 2.22 and previous versions of a security vulnerability , the vulnerability stems from the program fails t...
Pivotal Software Cloud Foundry Foundation BOSH Azure CPI Code Injection Vulnerability
Pivotal Software Cloud Foundry Foundation BOSH Azure CPI is a set of open source tools for deployment and lifecycle management of distributed systems from Pivotal Software, USA. A code injection vulnerability exists in version v22 of Pivotal Software Cloud Foundry Foundation BOSH Azure CPI. An...
