6843 matches found
Adobe Prelude Buffer Overflow Code Execution
The vulnerability of the cloud-based application for video digitization, annotation, and format conversion in Adobe Prelude involves writing data beyond the buffer boundaries into memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
Adobe Prelude Buffer Overflow Code Execution
The vulnerability of the cloud-based application for video digitization, annotation, and format conversion in Adobe Prelude involves writing data beyond the buffer boundaries into memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
PYSEC-2021-866
This affects all versions of package html-to-csv. When there is a formula embedded in a HTML page, it gets accepted without any validation and the same would be pushed while converting it into a CSV file. Through this a malicious actor can embed or generate a malicious link or execute commands vi...
CVE-2021-23654
This affects all versions of package html-to-csv. When there is a formula embedded in a HTML page, it gets accepted without any validation and the same would be pushed while converting it into a CSV file. Through this a malicious actor can embed or generate a malicious link or execute commands vi...
openbabel:fuzz_obconversion_sdf: Container-overflow in OpenBabel::MDLFormat::ReadV3000Block
Detailed Report: https://oss-fuzz.com/testcase?key=4739930742456320 Project: openbabel Fuzzing Engine: afl Fuzz Target: fuzzobconversionsdf Job Type: aflasanopenbabel Platform Id: linux Crash Type: Container-overflow READ 1 Crash Address: 0x608000000468 Crash State:...
CVE-2021-24641
The Images to WebP WordPress plugin before 1.9 does not have CSRF checks in place when performing some administrative actions, which could result in modification of plugin settings, Denial-of-Service, as well as arbitrary image conversion...
CVE-2021-24641
The Images to WebP WordPress plugin before 1.9 does not have CSRF checks in place when performing some administrative actions, which could result in modification of plugin settings, Denial-of-Service, as well as arbitrary image conversion...
Cross site request forgery (csrf)
The Images to WebP WordPress plugin before 1.9 does not have CSRF checks in place when performing some administrative actions, which could result in modification of plugin settings, Denial-of-Service, as well as arbitrary image conversion...
CVE-2021-24641
CVE-2021-24641 affects the WordPress plugin Images to WebP (versions before 1.9). The vulnerability is a CSRF flaw in certain administrative actions that can lead to modification of plugin settings, Denial-of-Service, and arbitrary image conversion. The issue is documented across multiple sources...
PT-2021-16158
Name of the Vulnerable Software and Affected Versions Images to WebP WordPress plugin versions prior to 1.9 Description The issue concerns the lack of CSRF checks in the plugin when performing certain administrative actions. This could lead to modification of plugin settings, Denial-of-Service, a...
CVE-2021-24641: Cross-Site Request Forgery (CSRF)
The Images to WebP WordPress plugin before 1.9 does not have CSRF checks in place when performing some administrative actions, which could result in modification of plugin settings, Denial-of-Service, as well as arbitrary image conversion...
WordPress Cross-Site Request Forgery Vulnerability
WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports personal blog sites on servers running PHP and MySQL. A cross-site request forgery vulnerability exists in the WordPress plugin that stems from The Images to WebP...
Exploit for Incorrect Conversion between Numeric Types in Linux Linux_Kernel
CVE-2020-27194 my exp for CVE-2020-27194, tested on linux kernel 5.8.14. More details : https://ama2in9.top/2020/12/14/CVE-2020-27194/ reference CVE-2020-8835 pwn2own 2020 ebpf 提权漏洞分析 CVE-2020-8835 pwn2own 2020 ebpf 通过任意读写提权分析...
openbabel:fuzz_obconversion_sdf: Crash in OpenBabel::MDLFormat::ReadAtomBlock
Project: https://github.com/openbabel/openbabel.git Detailed Report: https://oss-fuzz.com/testcase?key=5506188207325184 Project: openbabel Fuzzing Engine: libFuzzer Fuzz Target: fuzzobconversionsdf Job Type: libfuzzerubsanopenbabel Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...
MGASA-2021-0511 Updated python-django-filter packages fix security vulnerability
In django-filter before version 2.4.0, automatically generated 'NumberFilter' instances, whose value was later converted to an integer, were subject to potential DoS from maliciously input using exponential format with sufficiently large exponents...
Linux check_map_func_compatibility Heap Buffer Overflow
The vulnerability of the checkmapfunccompatibility function in Linux operating systems is related to type conversion errors. Exploiting this vulnerability can allow an attacker to gain increased privileges...
Xstream Java Library Code Execution
The vulnerability of the Xstream Java library for converting objects into XML or JSON formats is related to the ability to download files of a dangerous type without limitation. Exploiting this vulnerability could allow an attacker to download and execute arbitrary code by manipulating the...
Adobe Prelude Code Execution
The vulnerability of the cloud-based application for video digitization, annotation, and format conversion in Adobe Prelude is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
Adobe Prelude Buffer Overflow Code Execution
The vulnerability of the cloud-based application for video digitization, annotation, and format conversion in Adobe Prelude involves writing data beyond the buffer boundaries into memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
Google Chrome Microsoft Edge Script Execution DoS
The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to type conversion errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or trigger a denial-of-service attack through a specially created web page...