CVE-2022-28238: Use After Free

Acrobat Reader DC versions 22.001.20085 and earlier, 20.005.3031x and earlier and 17.012.30205 and earlier are affected by a use-after-free vulnerability in the processing of annotations that could result in arbitrary code execution in the context of the current user. Exploitation of this issue...

CVE-2022-27797: Use After Free

Acrobat Reader DC versions 22.001.20085 and earlier, 20.005.3031x and earlier and 17.012.30205 and earlier are affected by a use-after-free vulnerability in the processing of annotations that could result in arbitrary code execution in the context of the current user. Exploitation of this issue...

CVE-2022-28237: Use After Free

Acrobat Reader DC versions 22.001.20085 and earlier, 20.005.3031x and earlier and 17.012.30205 and earlier are affected by a use-after-free vulnerability in the processing of annotations that could result in arbitrary code execution in the context of the current user. Exploitation of this issue...

CVE-2022-27800: Use After Free

Acrobat Reader DC versions 22.001.20085 and earlier, 20.005.3031x and earlier and 17.012.30205 and earlier are affected by a use-after-free vulnerability in the processing of annotations that could result in arbitrary code execution in the context of the current user. Exploitation of this issue...

CVE-2021-25746 Ingress-nginx directive injection via annotations

A security issue was discovered in ingress-nginx where a user that can create or update ingress objects can use .metadata.annotations in an Ingress object in the networking.k8s.io or extensions API group to obtain the credentials of the ingress-nginx controller. In the default configuration, that...

PT-2022-9683 · Unknown · Ingress-Nginx

Name of the Vulnerable Software and Affected Versions: ingress-nginx affected versions not specified Description: A security issue was discovered in ingress-nginx where a user that can create or update ingress objects can use .metadata.annotations in an Ingress object to obtain the credentials of...

CVE-2021-25746

A flaw was found in the ingress-nginx controller. When a user creates or updates ingress objects, credentials of the ingress-nginx controller can be obtained by accessing .metadata.annotations...

CVE-2021-25746

A security issue was discovered in ingress-nginx where a user that can create or update ingress objects can use .metadata.annotations in an Ingress object in the networking.k8s.io or extensions API group to obtain the credentials of the ingress-nginx controller. In the default configuration, that...

PT-2022-13215

Name of the Vulnerable Software and Affected Versions Openscad affected versions not specified Description A vulnerability was found in Openscad where a .scad file with no trailing newline could cause an out-of-bounds read during parsing of annotations. Recommendations At the moment, there is no...

CVE-2022-28237

Acrobat Reader DC versions 22.001.20085 and earlier, 20.005.3031x and earlier and 17.012.30205 and earlier are affected by a use-after-free vulnerability in the processing of annotations that could result in arbitrary code execution in the context of the current user. Exploitation of this issue...

PT-2022-18597

Name of the Vulnerable Software and Affected Versions Acrobat Reader DC versions 22.001.20085 and earlier Acrobat Reader DC versions 20.005.3031x and earlier Acrobat Reader DC versions 17.012.30205 and earlier Description The issue is a use-after-free vulnerability in the processing of annotation...

PT-2022-18895

Name of the Vulnerable Software and Affected Versions Adobe Acrobat Reader DC versions 22.001.20085 and earlier Adobe Acrobat Reader DC versions 20.005.3031x and earlier Adobe Acrobat Reader DC versions 17.012.30205 and earlier Description A use-after-free vulnerability in the processing of...

PT-2022-18592

Name of the Vulnerable Software and Affected Versions Acrobat Reader DC versions 22.001.20085 and earlier Acrobat Reader DC versions 20.005.3031x and earlier Acrobat Reader DC versions 17.012.30205 and earlier Description A use-after-free vulnerability in the processing of annotations could resul...

PT-2022-18596

Name of the Vulnerable Software and Affected Versions Acrobat Reader DC versions 22.001.20085 and earlier Acrobat Reader DC versions 20.005.3031x and earlier Acrobat Reader DC versions 17.012.30205 and earlier Description The issue is related to a use-after-free vulnerability in the processing of...

PT-2022-18900

Name of the Vulnerable Software and Affected Versions Acrobat Reader DC versions 22.001.20085 and earlier Acrobat Reader DC versions 20.005.3031x and earlier Acrobat Reader DC versions 17.012.30205 and earlier Description A use-after-free vulnerability in the processing of annotations could resul...

Puppet input validation vulnerability

Puppet is a set of configuration management tools based on client/server C/S architecture from Puppet Labs in the United States, which can be used to manage profiles, users, cron tasks, packages, system services, and more. A security vulnerability exists in the Puppet Firewall Module, which stems...

Out-of-bounds Memory Access

chromium:sid is vulnerable to out of bounds memory access. The vulnerability exist in A.scad file with no trailing newline allowing an out-of-bounds read during parsing of annotations...

org.hibernate:hibernate-annotations (3.5.0.beta-1), org.hibernate:hibernate-c3p0 (3.5.0.beta-1) +13 more potentially affected by CVE-2019-14900 via org.hibernate:hibernate-core (3.5.0.beta-1)

org.hibernate:hibernate-core MAVEN version 3.5.0.beta-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-core and may be impacted: - org.hibernate:hibernate-annotations 3.5.0.beta-1 - org.hibernate:hibernate-c3p0 3.5.0.beta-1 -...

br.net.woodstock.rockframework:rockframework-domain (>=1.2.1, <=1.2.2), com.googlecode:jpa-scoped-manager (1.1) +42 more potentially affected by CVE-2019-14900 via org.hibernate:hibernate-core (3.5.0-final)

org.hibernate:hibernate-core MAVEN version 3.5.0-final is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-core and may be impacted: - br.net.woodstock.rockframework:rockframework-domain =1.2.1, =1.9.3, =3.0-rc1, =3.1.18.release,...

org.hibernate:hibernate-annotations (3.5.0-beta-3), org.hibernate:hibernate-c3p0 (3.5.0-beta-3) +12 more potentially affected by CVE-2019-14900 via org.hibernate:hibernate-core (3.5.0-beta-3)

org.hibernate:hibernate-core MAVEN version 3.5.0-beta-3 is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-core and may be impacted: - org.hibernate:hibernate-annotations 3.5.0-beta-3 - org.hibernate:hibernate-c3p0 3.5.0-beta-3 -...