org.hibernate:hibernate-annotations (3.5.0-beta-2), org.hibernate:hibernate-c3p0 (3.5.0-beta-2) +15 more potentially affected by CVE-2019-14900 via org.hibernate:hibernate-core (3.5.0-beta-2)

org.hibernate:hibernate-core MAVEN version 3.5.0-beta-2 is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-core and may be impacted: - org.hibernate:hibernate-annotations 3.5.0-beta-2 - org.hibernate:hibernate-c3p0 3.5.0-beta-2 -...

org.hibernate:hibernate-annotations (3.5.0-cr-1), org.hibernate:hibernate-c3p0 (3.5.0-cr-1) +24 more potentially affected by CVE-2019-14900 via org.hibernate:hibernate-core (3.5.0-cr-1)

org.hibernate:hibernate-core MAVEN version 3.5.0-cr-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-core and may be impacted: - org.hibernate:hibernate-annotations 3.5.0-cr-1 - org.hibernate:hibernate-c3p0 3.5.0-cr-1 -...

org.hibernate:hibernate-annotations (3.5.0-beta-3), org.hibernate:hibernate-c3p0 (3.5.0-beta-3) +12 more potentially affected by CVE-2020-25638 via org.hibernate:hibernate-core (3.5.0-beta-3)

org.hibernate:hibernate-core MAVEN version 3.5.0-beta-3 is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-core and may be impacted: - org.hibernate:hibernate-annotations 3.5.0-beta-3 - org.hibernate:hibernate-c3p0 3.5.0-beta-3 -...

com.googlecode:jpa-scoped-manager (1.0.4), org.hibernate:hibernate-annotations (3.5.0-beta-4) +13 more potentially affected by CVE-2020-25638 via org.hibernate:hibernate-core (3.5.0-beta-4)

org.hibernate:hibernate-core MAVEN version 3.5.0-beta-4 is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-core and may be impacted: - com.googlecode:jpa-scoped-manager 1.0.4 - org.hibernate:hibernate-annotations 3.5.0-beta-4 -...

org.hibernate:hibernate-annotations (3.4.0.cr1), org.hibernate:hibernate-c3p0 (3.3.0.cr1) +14 more potentially affected by CVE-2020-25638 via org.hibernate:hibernate-core (3.3.0.cr1)

org.hibernate:hibernate-core MAVEN version 3.3.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-core and may be impacted: - org.hibernate:hibernate-annotations 3.4.0.cr1 - org.hibernate:hibernate-c3p0 3.3.0.cr1 -...

org.hibernate:hibernate-annotations (3.5.0-cr-1), org.hibernate:hibernate-c3p0 (3.5.0-cr-1) +24 more potentially affected by CVE-2020-25638 via org.hibernate:hibernate-core (3.5.0-cr-1)

org.hibernate:hibernate-core MAVEN version 3.5.0-cr-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-core and may be impacted: - org.hibernate:hibernate-annotations 3.5.0-cr-1 - org.hibernate:hibernate-c3p0 3.5.0-cr-1 -...

nuclei-templates

This is a GitHub repository for a community-curated list of templates for the Nuclei engine to find security vulnerabilities in applications. The repository contains various templates for the Nuclei scanner, which powers the actual scanning engine. The templates are provided by the project's team...

Foxit PhantomPDF Buffer Overflow

The vulnerability of the Foxit PhantomPDF PDF editing program and the Foxit Reader text viewing program for Windows operating systems relates to the execution of operations beyond the buffer in memory when processing annotation objects. Exploiting this vulnerability allows a malicious actor to...

PT-2021-27942

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a stack-buffer-overflow crash. Technical details about the crash include the pdfi annot draw, pdfi do annotations, and pdfi page...

GitLab ExifTool uploaded image command injection

Added: 11/24/2021 Background GitLab is an open-source software development platform with built-in version control and issue tracking. Problem A remote attacker can execute arbitrary commands by uploading a specially crafted image to GitLab, which executes injected Perl code when ExifTool parses...

GitLab ExifTool uploaded image command injection

Added: 11/24/2021 Background GitLab is an open-source software development platform with built-in version control and issue tracking. Problem A remote attacker can execute arbitrary commands by uploading a specially crafted image to GitLab, which executes injected Perl code when ExifTool parses...

Ingress-nginx custom snippets allows retrieval of ingress-nginx serviceaccount token and secrets across all namespaces

Issue Details A security issue was discovered in ingress-nginx where a user that can create or update ingress objects can use the custom snippets feature to obtain all secrets in the cluster. This issue has been rated High CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L, and assigned CVE-2021-25742...

com.googlecode.protobuf-rpc-pro:protobuf-rpc-pro-demo (3.0.0), com.googlecode.protobuf-rpc-pro:protobuf-rpc-pro-duplex (3.0.0) +13 more potentially affected by CVE-2021-37137 via io.netty:netty (3.5.10.final)

io.netty:netty MAVEN version 3.5.10.final is affected by a known vulnerability. The following packages have a transitive dependency on io.netty:netty and may be impacted: - com.googlecode.protobuf-rpc-pro:protobuf-rpc-pro-demo 3.0.0 - com.googlecode.protobuf-rpc-pro:protobuf-rpc-pro-duplex 3.0.0 ...

CVE-2021-34846

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2021-34836

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2021-34846

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

PT-2021-5391 · Foxit · Foxit Phantompdf +1

Name of the Vulnerable Software and Affected Versions: Foxit PhantomPDF and Foxit Reader affected versions not specified Description: The issue is related to an out-of-bounds read in the handling of Annotation objects, which can result from the lack of proper validation of user-supplied data. Thi...

Autodesk Design Review Code Execution

The vulnerability of the PDF syntax analysis implementation in the Autodesk Design Review software for applying electronic annotations is related to a memory reclamation error. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely...

Imagegear suffers from a denial of service vulnerability (CNVD-2021-50962)

ImageGear is a graphic image processing software with scanning, compression, viewing, printing, adding annotations, image editing and other features that enable developers to quickly develop image processing programs. Imagegear suffers from a denial of service vulnerability that can be exploited ...

Imagegear has a denial of service vulnerability

ImageGear is a graphic image processing software with scanning, compression, viewing, printing, adding annotations, image editing and other features that enable developers to quickly develop image processing programs. Imagegear suffers from a denial of service vulnerability that can be exploited ...