Lucene search
+L

4277 matches found

Cvelist
Cvelist
added 2022/03/16 2:02 p.m.38 views

CVE-2021-40763 Adobe Character Animator Memory Corruption could lead to Arbitrary code execution

Adobe Character Animator version 4.4 and earlier is affected by a memory corruption vulnerability when parsing a WAF file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability...

7.8CVSS8.1AI score0.0165EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2022/03/16 2:02 p.m.6 views

CVE-2021-40763 Adobe Character Animator Memory Corruption could lead to Arbitrary code execution

Adobe Character Animator version 4.4 and earlier is affected by a memory corruption vulnerability when parsing a WAF file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability...

7.8CVSS7.9AI score0.0165EPSS
SaveExploits0References1
CVE
CVE
added 2022/03/16 2:02 p.m.133 views

CVE-2021-40764

CVE-2021-40764 affects Adobe Character Animator 4.4 and earlier. The vulnerability is a memory corruption flaw when parsing M4A files, potentially allowing arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim must open a crafted file). Docume...

9.3CVSS7.9AI score0.0165EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2022/03/16 2:02 p.m.34 views

CVE-2021-40764 Adobe Character Animator Memory Corruption could lead to Arbitrary code execution

Adobe Character Animator version 4.4 and earlier is affected by a memory corruption vulnerability when parsing a M4A file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability...

7.8CVSS8.1AI score0.0165EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2022/03/16 2:02 p.m.5 views

CVE-2021-40764 Adobe Character Animator Memory Corruption could lead to Arbitrary code execution

Adobe Character Animator version 4.4 and earlier is affected by a memory corruption vulnerability when parsing a M4A file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability...

7.8CVSS7.9AI score0.0165EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2022/03/16 2:02 p.m.6 views

CVE-2021-40766 Adobe Character Animator SVG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

Adobe Character Animator version 4.4 and earlier versions are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction i...

3.3CVSS3.2AI score0.01173EPSS
SaveExploits0References1
CVE
CVE
added 2022/03/16 2:02 p.m.116 views

CVE-2021-40766

Adobe Character Animator 4.4 and earlier versions are affected by an out-of-bounds read vulnerability (CVE-2021-40766) that can disclose memory contents and bypass mitigations such as ASLR. The issue is triggered by parsing certain files and requires user interaction (victim must open a malicious...

4.3CVSS3.5AI score0.01173EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2022/03/16 2:02 p.m.33 views

CVE-2021-40766 Adobe Character Animator SVG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

Adobe Character Animator version 4.4 and earlier versions are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction i...

3.3CVSS4.6AI score0.01173EPSS
SaveExploits0References1
CVE
CVE
added 2022/03/16 2:02 p.m.116 views

CVE-2021-40767

Adobe Character Animator versions 4.4 and earlier are affected by an Access of Memory Location After End of Buffer when parsing a specially crafted file, enabling a crafted-file attacker to cause an application DoS within the current user context. Exploitation requires user interaction (victim op...

5.5CVSS5.4AI score0.01145EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2022/03/16 2:02 p.m.36 views

CVE-2021-40767 Adobe Character Animator Memory Corruption could lead to Application denial-of-service

Adobe Character Animator version 4.4 and earlier is affected by an Access of Memory Location After End of Buffer vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the...

5.5CVSS6AI score0.01145EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2022/03/16 2:02 p.m.36 views

CVE-2021-40768 Adobe Character Animator NULL Pointer Dereference Application denial-of-service

Adobe Character Animator version 4.4 and earlier is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitatio...

5.5CVSS6AI score0.01148EPSS
SaveExploits0References1
CVE
CVE
added 2022/03/16 2:02 p.m.119 views

CVE-2021-40768

Adobe Character Animator 4.4 (and earlier) contains a Null pointer dereference when parsing a specially crafted file, enabling an unauthenticated attacker to cause an application denial-of-service in the context of the current user. Exploitation requires user interaction (victim opens a malicious...

5.5CVSS5.4AI score0.01148EPSS
SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
added 2022/03/16 12:00 a.m.44 views

Nicotine+ DoS on Null Character in Download Request

Denial of service DoS vulnerability in Nicotine+ starting with version 3.0.3 and prior to version 3.2.1 allows a user with a modified Soulseek client to crash Nicotine+ by sending a file download request with a file path containing a null character...

7.5CVSS7.1AI score0.01624EPSS
SaveExploits1References6Affected Software1
OSV
OSV
added 2022/03/16 12:00 a.m.24 views

GHSA-P4V2-R99V-WJC2 Nicotine+ DoS on Null Character in Download Request

Denial of service DoS vulnerability in Nicotine+ starting with version 3.0.3 and prior to version 3.2.1 allows a user with a modified Soulseek client to crash Nicotine+ by sending a file download request with a file path containing a null character...

7.5CVSS7.3AI score0.01624EPSS
SaveExploits1References6
FreeBSD
FreeBSD
added 2022/03/16 12:00 a.m.21 views

py-nicotine-plus -- Denial of service vulnerability

ztauras reports: Denial of service DoS vulnerability in Nicotine+ starting with version 3.0.3 and prior to version 3.2.1 allows a user with a modified Soulseek client to crash Nicotine+ by sending a file download request with a file path containing a null character...

7.5CVSS7.4AI score0.01624EPSS
SaveExploits1References1
OSV
OSV
added 2022/03/15 7:15 p.m.29 views

CVE-2021-45848

Denial of service DoS vulnerability in Nicotine+ 3.0.3 and later allows a user with a modified Soulseek client to crash Nicotine+ by sending a file download request with a file path containing a null character...

7.5CVSS7.4AI score
SaveExploits0References3
Prion
Prion
added 2022/03/15 7:15 p.m.17 views

Design/Logic Flaw

Denial of service DoS vulnerability in Nicotine+ 3.0.3 and later allows a user with a modified Soulseek client to crash Nicotine+ by sending a file download request with a file path containing a null character...

5CVSS7.3AI score0.01624EPSS
SaveExploits1References3Affected Software2
Cvelist
Cvelist
added 2022/03/15 12:00 a.m.43 views

CVE-2021-45848

Denial of service DoS vulnerability in Nicotine+ 3.0.3 and later allows a user with a modified Soulseek client to crash Nicotine+ by sending a file download request with a file path containing a null character...

7.6AI score0.01624EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2022/03/15 12:00 a.m.10 views

PT-2022-12436

Name of the Vulnerable Software and Affected Versions Nicotine+ versions 3.0.3 through 3.2.0 Description A denial of service DoS issue exists, allowing a user with a modified Soulseek client to crash Nicotine+ by sending a file download request with a file path containing a null character. This c...

7.5CVSS7AI score0.01624EPSS
SaveExploits1References13
OSV
OSV
added 2022/03/14 2:16 p.m.6 views

OPENSUSE-SU-2022:0823-1 Security update for protobuf

This update for protobuf fixes the following issues: - CVE-2021-22570: Fix incorrect parsing of nullchar in the proto symbol bsc1195258...

6.5CVSS6.7AI score0.0266EPSS
SaveExploits0References3
Rows per page
Query Builder