Lucene search
+L

2924 matches found

CNVD
CNVD
added 2023/11/20 12:0 a.m.28 views

Adobe Audition Out-of-Bounds Read Vulnerability (CNVD-2023-88659)

Adobe Audition is a set of multi-track editing tools from the American company Audobee Adobe. The product is mainly used to include multi-track, waveforms and spectral display of the perfect toolset for audio content mixing, editing and creation. An out-of-bounds read vulnerability exists in Adob...

7.8CVSS7.6AI score0.00352EPSS
SaveExploits0References1
CNVD
CNVD
added 2023/11/20 12:0 a.m.38 views

Adobe Audition Out-of-Bounds Read Vulnerability (CNVD-2023-88658)

Adobe Audition is a set of multi-track editing tools from the American company Audobee Adobe. The product mainly uses a comprehensive toolset that includes multi-track, waveform and spectral display to mix, edit and create audio content. An out-of-bounds read vulnerability exists in Adobe Auditio...

7.8CVSS5.7AI score0.00352EPSS
SaveExploits0References1
CNVD
CNVD
added 2023/11/20 12:0 a.m.44 views

Adobe Audition Uninitialized Pointer Access Vulnerability (CNVD-2023-88660)

Adobe Audition is a set of multi-track editing tools from the American company Audobee Adobe. The product mainly uses a comprehensive toolset that includes multi-track, waveform and spectral display to mix, edit and create audio content. A security vulnerability exists in Adobe Audition version...

5.5CVSS5.9AI score0.00358EPSS
SaveExploits0References1
CNVD
CNVD
added 2023/11/20 12:0 a.m.21 views

Adobe Audition Out-of-Bounds Read Vulnerability (CNVD-2023-88661)

Adobe Audition is a set of multi-track editing tools from the American company Audobee Adobe. The product is mainly used to include multi-track, waveforms and spectral display of the perfect toolset for audio content mixing, editing and creation. An out-of-bounds read vulnerability exists in Adob...

5.5CVSS5.3AI score0.00358EPSS
SaveExploits0References1
CNVD
CNVD
added 2023/11/20 12:0 a.m.46 views

Adobe Premiere Pro Out-of-Bounds Write Vulnerability (CNVD-2023-95450)

Adobe Premiere Pro is a set of non-linear editing video editing software from the American company Audobee Adobe. Adobe Premiere Pro suffers from an out-of-bounds write vulnerability that can be exploited by an attacker to execute code in the context of the current user...

7.8CVSS7.4AI score0.0032EPSS
SaveExploits0References1
CNVD
CNVD
added 2023/11/20 12:0 a.m.56 views

Adobe Premiere Pro Uninitialized Pointer Access Vulnerability

Adobe Premiere Pro is a set of non-linear editing video editing software from the American company Audobee Adobe. Adobe Premiere Pro has an uninitialized pointer access vulnerability that can be exploited by an attacker to obtain sensitive information...

3.3CVSS6.7AI score0.00337EPSS
SaveExploits0References1
CNVD
CNVD
added 2023/11/20 12:0 a.m.49 views

Adobe Premiere Pro Post-Release Reuse Vulnerability

Adobe Premiere Pro is a set of non-linear editing video editing software from the American company Audobee Adobe. Adobe Premiere Pro suffers from a post-release reuse vulnerability that can be exploited by an attacker to execute code in the context of the current user...

7.8CVSS7.3AI score0.00389EPSS
SaveExploits0References1
CNVD
CNVD
added 2023/11/17 12:0 a.m.63 views

Adobe Premiere Pro Buffer Overflow Vulnerability (CNVD-2023-95451)

Adobe Premiere Pro is a video editing software developed by Adobe for non-linear editing. A buffer overflow vulnerability exists in Adobe Premiere Pro, which can be exploited by an attacker to overflow a buffer and execute arbitrary code on the system or cause the application to crash...

7.8CVSS8.3AI score0.00382EPSS
SaveExploits0References1
AlmaLinux
AlmaLinux
added 2023/11/14 12:0 a.m.38 views

Moderate: emacs security update

GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing features, a scripting language elisp, and the capability to read e-mail and news. Security Fixes: emacs: command execution via shell metacharacters CVE-2022-48337 emacs: command injection...

9.8CVSS7.3AI score0.01603EPSS
SaveExploits0References6
Prion
Prion
added 2023/11/09 4:15 p.m.25 views

Design/Logic Flaw

application-collabora is an integration of Collabora Online in XWiki. As part of the application use cases, depending on the rights that a user has over a document, they should be able to open the office attachments files in view or edit mode. Currently, if a user opens an attachment file in edit...

4CVSS7AI score0.00523EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2023/11/09 3:32 p.m.41 views

CVE-2023-46743 The same file cannot be opened with different rights

application-collabora is an integration of Collabora Online in XWiki. As part of the application use cases, depending on the rights that a user has over a document, they should be able to open the office attachments files in view or edit mode. Currently, if a user opens an attachment file in edit...

7.3CVSS7.3AI score0.00523EPSS
SaveExploits1References1
OSV
OSV
added 2023/11/09 3:32 p.m.25 views

CVE-2023-46743 The same file cannot be opened with different rights

application-collabora is an integration of Collabora Online in XWiki. As part of the application use cases, depending on the rights that a user has over a document, they should be able to open the office attachments files in view or edit mode. Currently, if a user opens an attachment file in edit...

7.3CVSS5AI score0.00523EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2023/11/06 8:40 p.m.7 views

CVE-2023-5352 Awesome Support < 6.1.5 - Insufficient permission check in wpas_edit_reply

The Awesome Support WordPress plugin before 6.1.5 does not correctly authorize the wpaseditreply function, allowing users to edit posts for which they do not have permission...

4.6AI score0.00405EPSS
SaveExploits2References1
CVE
CVE
added 2023/11/06 8:40 p.m.85 views

CVE-2023-5352

The CVE-2023-5352 entry relates to the WordPress plugin Awesome Support prior to version 6.1.5, where an insufficient authorization check in the wpas_edit_reply function allows a user to edit posts for which they lack permission. Affected versions are prior to 6.1.5; the issue is documented with ...

4.3CVSS4.5AI score0.00405EPSS
SaveExploits2References1Affected Software1
OSV
OSV
added 2023/11/04 11:15 p.m.5 views

CVE-2023-46381

LOYTEC LINX-151, LINX-212, LVIS-3ME12-A1, LIOB-586, LIOB-580 V2, LIOB-588, L-INX Configurator devices all versions lack authentication for the preinstalled version of LWEB-802 via an lweb802pre/ URI. An unauthenticated attacker can edit any project or create a new project and control its GUI...

8.2CVSS5.8AI score0.07381EPSS
SaveExploits2References5
Prion
Prion
added 2023/11/04 11:15 p.m.18 views

Authentication flaw

LOYTEC LINX-212 firmware 6.2.4 and LVIS-3ME12-A1 firmware 6.2.2 and LIOB-586 firmware 6.2.3 devices lack authentication for the preinstalled version of LWEB-802 via an lweb802pre/ URI. An unauthenticated attacker can edit any project or create a new project and control its GUI...

6.4CVSS7.6AI score0.07381EPSS
SaveExploits2References3Affected Software3
Positive Technologies
Positive Technologies
added 2023/11/04 12:0 a.m.8 views

PT-2023-29990 · Loytec · Linx Configurator +7

Name of the Vulnerable Software and Affected Versions: LOYTEC LINX-151 affected versions not specified LOYTEC LINX-212 version 6.2.4 LOYTEC LVIS-3ME12-A1 version 6.2.2 LOYTEC LIOB-586 version 6.2.3 LOYTEC LIOB-580 V2 affected versions not specified LOYTEC LIOB-588 affected versions not specified...

8.2CVSS7AI score0.07381EPSS
SaveExploits2References7
OSV
OSV
added 2023/11/02 2:15 p.m.8 views

CVE-2023-29043

Presentations may contain references to images, which are user-controlled, and could include malicious script code that is being processed when editing a document. Script code embedded in malicious documents could be executed in the context of the user editing the document when performing certain...

6.1CVSS5.8AI score0.00331EPSS
SaveExploits0References2
NVD
NVD
added 2023/11/02 2:15 p.m.38 views

CVE-2023-29043

Presentations may contain references to images, which are user-controlled, and could include malicious script code that is being processed when editing a document. Script code embedded in malicious documents could be executed in the context of the user editing the document when performing certain...

6.1CVSS6.2AI score0.00331EPSS
SaveExploits0References2
Prion
Prion
added 2023/11/02 2:15 p.m.23 views

Code injection

Presentations may contain references to images, which are user-controlled, and could include malicious script code that is being processed when editing a document. Script code embedded in malicious documents could be executed in the context of the user editing the document when performing certain...

5.8CVSS6.2AI score0.00331EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder