Lucene search
+L

2914 matches found

BDU FSTEC
BDU FSTEC
added 2022/04/25 12:0 a.m.9 views

The vulnerability of Adobe After Effects’ video and dynamic image editing software lies in buffer overflows in the stack, allowing attackers to execute arbitrary code.

The vulnerability of Adobe After Effects video and dynamic image editing software relates to buffer overflow in the stack. Exploiting this vulnerability allows an attacker to execute arbitrary code on the target system using a specially crafted file...

7.8CVSS8.2AI score0.02332EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/04/25 12:0 a.m.7 views

The vulnerability of Adobe After Effects’ video and dynamic image editing software lies in buffer overflows in the stack, allowing attackers to execute arbitrary code.

The vulnerability of Adobe After Effects video and dynamic image editing software relates to buffer overflow in the stack. Exploiting this vulnerability allows an attacker to execute arbitrary code on the target system using a specially crafted file...

7.8CVSS8.2AI score0.03803EPSS
SaveExploits0References3Affected Software1
CNVD
CNVD
added 2022/04/19 12:0 a.m.15 views

Multiple Adobe products stack buffer overflow vulnerabilities

Adobe Acrobat is a set of PDF file editing and conversion tools. The software is used to print, sign and annotate PDFs.Several Adobe products are vulnerable to stack buffer overflow, which can be exploited by attackers to execute arbitrary code in the context of the current user...

6.3AI score
SaveExploits0
CNVD
CNVD
added 2022/04/19 12:0 a.m.18 views

Multiple Adobe products out-of-bounds write vulnerability (CNVD-2022-46967)

Adobe Acrobat is a set of PDF file editing and conversion tools. Adobe Reader is a set of PDF document reading software. Several Adobe products have out-of-bounds write vulnerabilities, attackers can use the vulnerability in the context of the current user to execute arbitrary code...

9.3CVSS5AI score0.10108EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/04/18 12:0 a.m.100 views

Out-of-bounds write vulnerability in multiple Adobe products (CNVD-2022-46974)

Adobe Acrobat is a set of tools for editing and converting PDF files.Adobe Acrobat Reader is a PDF viewer. The software is used to print, sign and annotate PDFs. An out-of-bounds write vulnerability exists in several Adobe products, which can be exploited by an attacker to execute arbitrary code ...

9.3CVSS7.9AI score0.10626EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2022/04/18 12:0 a.m.23 views

The vulnerabilities of PDF viewing and editing programs from Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, Adobe Acrobat 2020, Adobe Acrobat Reader 2020 are related to the manipulation of the null pointer pointer, allowing attackers to cause service interruptions.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 are related to the use of a null pointer. Exploiting these...

3.3CVSS6.7AI score0.03629EPSS
SaveExploits0References3
CNVD
CNVD
added 2022/04/15 12:0 a.m.12 views

Multiple Adobe Products Resource Management Error Vulnerability (CNVD-2022-52920)

Adobe Acrobat is a set of PDF file editing and conversion tools.Adobe Reader is a set of PDF document reading software. Multiple Adobe products have resource management error vulnerabilities that can be exploited by an attacker to execute arbitrary code in the context of the current user...

9.3CVSS7.4AI score0.03796EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/04/15 12:0 a.m.15 views

Out-of-bounds read vulnerability in multiple Adobe products (CNVD-2022-52924)

Adobe Acrobat is a set of PDF file editing and conversion tools.Adobe Acrobat Reader is a PDF viewer. Multiple Adobe products have out-of-bounds read vulnerabilities that can be exploited by attackers to cause sensitive memory leaks...

4.3CVSS6.6AI score0.01757EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2022/04/12 12:0 a.m.8 views

Aethon TUG Home Base Server 跨站脚本漏洞

Aethon TUG Home Base Server is a robotics server from Aethon, Inc. It is used to control and communicate with autonomous mobile robots. Aethon TUG Home Base Server has a cross-site scripting vulnerability that originates when creating or editing a new report, the Reports tab of the Fleet Manageme...

8.2CVSS5.7AI score0.00563EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2022/04/12 12:0 a.m.9 views

The vulnerability of Adobe After Effects’ video and dynamic image editing software lies in its ability to read data beyond the buffer in memory, allowing attackers to gain unauthorized access to protected information.

The vulnerability of Adobe After Effects video and dynamic image editing software relates to reading beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

5.5CVSS6.4AI score0.01832EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/04/12 12:0 a.m.6 views

The vulnerability of Adobe Premiere Elements software-related video editing programs, related to the manipulation of the null pointer, allows attackers to trigger a service failure.

The vulnerability of Adobe Premiere Elements software-related video editing programs is related to the handling of the null pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS5.9AI score0.01131EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2022/04/11 3:15 p.m.7 views

CVE-2022-1006

The Advanced Booking Calendar WordPress plugin before 1.7.1 does not sanitise and escape the id parameter when editing Calendars, which could allow high privilege users such as admin to perform SQL injection attacks...

7.2CVSS7.2AI score0.01461EPSS
SaveExploits2References3
Prion
Prion
added 2022/04/11 3:15 p.m.17 views

Sql injection

The Advanced Booking Calendar WordPress plugin before 1.7.1 does not sanitise and escape the id parameter when editing Calendars, which could allow high privilege users such as admin to perform SQL injection attacks...

6.5CVSS7.2AI score0.01461EPSS
SaveExploits2References2Affected Software1
wpexploit
wpexploit
added 2022/04/11 12:0 a.m.130 views

Adrotate < 5.8.23 - Admin+ XSS via Group Name

The plugin does not escape Group Names, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed Create/edit a group and put the following payload in the Name field: " style=animation-name:rotation...

4.8CVSS2.2AI score0.00588EPSS
SaveExploits2
CNNVD
CNNVD
added 2022/04/11 12:0 a.m.7 views

WordPress plugin Advanced Booking Calendar SQL注入漏洞

WordPress is a set of blogging platforms developed by the Wordpress Foundation using the PHP language. WordPress plugin is an application plugin for WordPress. WordPress Advanced Booking Calendar before plugin version 1.7.1 is vulnerable to a SQL injection vulnerability that stems from The plugin...

7.2CVSS6AI score0.01461EPSS
SaveExploits2References3
CNNVD
CNNVD
added 2022/04/08 12:0 a.m.9 views

XWiki Platform 安全漏洞

Xwiki Platform is a suite of wiki platforms for creating web collaboration applications from the French company Xwiki. XWiki Platform suffers from a security vulnerability that stems from the fact that a simple user can create global SSX/JSX without specific permissions: theoretically, only users...

8.1CVSS7.7AI score0.00792EPSS
SaveExploits1References3
BDU FSTEC
BDU FSTEC
added 2022/04/08 12:0 a.m.14 views

The vulnerability of the CKEditor’s WYSIWYG page processing module allows attackers to carry out cross-site scripting attacks.

The vulnerability of the CKEditor’s WYSIWYG page editing module is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks remotely...

8.2CVSS6.5AI score0.0147EPSS
SaveExploits0References7Affected Software5
BDU FSTEC
BDU FSTEC
added 2022/04/05 12:0 a.m.10 views

The vulnerability of the randomize_iparp function in the edit_packet.c component of the editing and replaying utility Pcap Tcpreplay allows a hacker to cause a service failure.

The vulnerability of the randomizeiparp function in the editpacket.c component of the Pcap editing and replay utility Tcpreplay is related to writing beyond buffer boundaries. Exploiting this vulnerability allows a malicious actor to cause service interruptions using a specially created pcap file...

7.1CVSS6.8AI score0.00653EPSS
SaveExploits1References6Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/04/05 12:0 a.m.12 views

The vulnerability of the Clipboard editing plugin for the CKEditor WYSIWYG editor allows a hacker to compromise data integrity.

The vulnerability of the Clipboard editing plugin of the CKEditor editor is related to improper handling of code generation. Exploiting this vulnerability allows an attacker to compromise data integrity remotely...

5.4CVSS6.5AI score0.01188EPSS
SaveExploits0References5Affected Software2
Cvelist
Cvelist
added 2022/03/26 11:18 p.m.21 views

CVE-2022-26198

Notable v1.8.4 does not filter text editing, allowing attackers to execute arbitrary code via a crafted payload injected into the Title text field...

9.8AI score0.01582EPSS
SaveExploits1References1
Rows per page
Query Builder