4120 matches found
Adobe Character Animator SVG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Character Animator. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within t...
DEBIAN-CVE-2021-32796
xmldom is an open source pure JavaScript W3C standard-based XML DOM Level 2 Core DOMParser and XMLSerializer module. xmldom versions 0.6.0 and older do not correctly escape special characters when serializing elements removed from their ancestor. This may lead to unexpected syntactic changes duri...
UBUNTU-CVE-2021-32796
xmldom is an open source pure JavaScript W3C standard-based XML DOM Level 2 Core DOMParser and XMLSerializer module. xmldom versions 0.6.0 and older do not correctly escape special characters when serializing elements removed from their ancestor. This may lead to unexpected syntactic changes duri...
CVE-2021-32796
CVE-2021-32796 affects the xmldom library where versions
xmldom 安全漏洞
Chris Brody xmldom is an open source application by Chris Brody, a JavaScript implementation of the W3C DOM for Node.js, Rhino, and browsers. xmldom has a security vulnerability in 0.6.0 and earlier versions that stems from an inability to properly escape special characters. A security...
Adobe Character Animator 4.0 < 4.4 Multiple Vulnerabilities (APSB21-59)
The version of Adobe Character Animator installed on the remote Windows host is prior to 4.4. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB21-59 advisory. - Adobe Character Animator version 4.2 and earlier is affected by a memory corruption vulnerability when...
Adobe Character Animator out-of-bounds read vulnerability
Adobe Character Animator is a motion capture and animation tool that provides everyone with an easy-to-use solution for intuitively animating 2D characters, animating in real time, and easily sharing and publishing characters. an out-of-bounds read vulnerability exists in Adobe Character Animator...
Adobe Character Animator Memory Out-of-Bounds Access Vulnerability
Adobe Character Animator is a motion capture and animation tool that provides everyone with an easy-to-use solution for intuitive 2D character animation, real-time animation, and easy sharing and publishing of characters. A memory out-of-bounds access vulnerability exists in Adobe Character...
Adobe Character Animator 缓冲区错误漏洞
Adobe Character Animator is a motion capture and animation tool that provides everyone with an easy-to-use solution for intuitive 2D character animation, real-time animation, and easy sharing and publishing of characters. A memory out-of-bounds access vulnerability exists in Adobe Character...
PT-2021-3940 · Adobe · Character Animator
Name of the Vulnerable Software and Affected Versions: Adobe Character Animator versions 4.2 and earlier Description: The issue is caused by a memory corruption vulnerability when parsing a specially crafted file, allowing an unauthenticated attacker to achieve arbitrary code execution in the...
APSB21-59 Security update available for Adobe Character Animator
Adobe has released an update for Adobe Character Animator for Windows and macOS. This update resolves a critical and an important vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user...
Adobe Character Animator 缓冲区错误漏洞
Adobe Character Animator is a motion capture and animation tool that provides everyone with an easy-to-use solution for intuitively animating 2D characters, animating in real time, and easily sharing and publishing characters. an out-of-bounds read vulnerability exists in Adobe Character Animator...
GHSA-VJV5-GP2W-65VM Encoded URIs can access WEB-INF directory in Eclipse Jetty
Description URIs can be crafted using some encoded characters to access the content of the WEB-INF directory and/or bypass some security constraints. This is a variation of the vulnerability reported in CVE-2021-28164/GHSA-v7ff-8wcx-gmc5. Impact The default compliance mode allows requests with UR...
Argus Surveillance DVR 4.0 Weak Password Encryption
Exploit Title: Argus Surveillance DVR 4.0 - Weak Password Encryption Exploit Author: Salman Asad @deathflash1411 Date: 12.07.2021 Version: Argus Surveillance DVR 4.0 Tested on: Windows 7 x86 Build 7601 & Windows 10 Reference:...
openSUSE 15 Security Update : ceph (openSUSE-SU-2021:1834-1)
The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:1834-1 advisory. - A flaw was found in Red Hat Ceph Storage 4, in the Dashboard component. In response to CVE-2020-27839, the JWT token was moved from...
UBUNTU-CVE-2021-31799
In RDoc 3.11 through 6.x before 6.3.1, as distributed with Ruby through 3.0.1, it is possible to execute arbitrary code via | and tags in a filename...
Huawei EulerOS: Security Advisory for python-rtslib (EulerOS-SA-2021-2164)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
tesseract 资源管理错误漏洞
tesseract is an open source OCR Optical Character Recognition engine. tesseract OCR has a security vulnerability that stems from the fact that Tesseract OCR has oneellconflict use-after-free during strpbrk calls. no details of the vulnerability are currently available...
GHSA-R4GV-VJ59-CCCM Control character injection in console output in github.com/ipfs/go-ipfs
Impact Control characters are not escaped from console output. This can result in hiding input from the user which could result in the user taking an unknown, malicious action. Patches - Patched via https://github.com/ipfs/go-ipfs/pull/7831 in v0.8.0 For more information If you have any questions...
Security update for htmldoc (important)
openSUSE Security Update: Security update for htmldoc Announcement ID: openSUSE-SU-2021:0895-1 Rating: important References: 1184424 Cross-References: CVE-2021-20308 CVSS scores: CVE-2021-20308 NVD : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2021-20308 SUSE: 3.3...