Lucene search
+L

2913 matches found

BDU FSTEC
BDU FSTEC
added 2021/11/25 12:0 a.m.10 views

The vulnerability of Adobe After Effects’ video and dynamic image editing software relates to the manipulation of the null pointer, allowing attackers to cause service failures.

The vulnerability of Adobe After Effects video and dynamic image editing software relates to the handling of a special pointer. Exploiting this vulnerability can allow an attacker to cause service failures...

5.5CVSS6.6AI score0.0133EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/11/25 12:0 a.m.7 views

The vulnerability of Adobe After Effects’ video and dynamic image editing software lies in the possibility of an operation going beyond the buffer in memory, allowing a hacker to execute arbitrary code.

The vulnerability of Adobe After Effects video and dynamic image editing software relates to the execution of operations beyond buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code on the target system...

7.8CVSS8.1AI score0.01955EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/11/25 12:0 a.m.9 views

The vulnerability of Adobe After Effects’ video and dynamic image editing software lies in the possibility of an operation going beyond the buffer in memory, allowing a hacker to execute arbitrary code.

The vulnerability of Adobe After Effects video and dynamic image editing software relates to the execution of operations beyond buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code on the target system...

7.8CVSS8.1AI score0.01955EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/11/23 12:0 a.m.9 views

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to the use of initially dangerous functions, allowing attackers to gain unauthorized access to protected information.

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat and Document Cloud, are related to reading data beyond the buffer in memory. Exploiting these vulnerabilities can allow an attacker to gain unauthorized access to...

10CVSS6.8AI score0.03086EPSS
SaveExploits0References4Affected Software2
CNVD
CNVD
added 2021/11/21 12:0 a.m.44 views

Adobe Premiere Pro memory corruption vulnerability

Adobe Premiere Pro is a suite of non-linear editing video editing software from Adobe. Adobe Premiere Pro in version 15.4 and earlier is vulnerable to a memory corruption vulnerability that stems from an incorrect restriction on operations within the scope of a memory buffer vulnerability. An...

9.3CVSS3.5AI score0.02395EPSS
SaveExploits0References1
Veracode
Veracode
added 2021/11/18 8:0 a.m.10 views

Cross-site Request Forgery (CSRF)

piranha is vulnerable to cross-site request forgery. The vulnerability exists due to a lack of authorization when deleting a user, deleting a role, editing a post, deleting a media folder etc., when an ID is known...

8.1CVSS3.4AI score0.00441EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2021/11/17 11:42 p.m.65 views

GHSA-PPQ7-88C7-Q879 Cross-Site Request Forgery in PiranhaCMS

In PiranhaCMS, versions 4.0.0-alpha1 to 9.2.0 are vulnerable to cross-site request forgery CSRF when performing various actions supported by the management system, such as deleting a user, deleting a role, editing a post, deleting a media folder etc., when an ID is known...

8.1CVSS8.1AI score0.00441EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2021/11/17 11:42 p.m.38 views

Cross-Site Request Forgery in PiranhaCMS

In PiranhaCMS, versions 4.0.0-alpha1 to 9.2.0 are vulnerable to cross-site request forgery CSRF when performing various actions supported by the management system, such as deleting a user, deleting a role, editing a post, deleting a media folder etc., when an ID is known...

8.1CVSS4.1AI score0.00441EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2021/11/17 9:28 p.m.4 views

DRUPAL-CORE-2021-011

The Drupal project uses the CKEditor library for WYSIWYG editing. CKEditor has released a security update that impacts Drupal, along with a hotfix for that update. Vulnerabilities are possible if Drupal is configured to allow use of the CKEditor library for WYSIWYG editing. An attacker that can...

6.2AI score
SaveExploits0References1
Drupal
Drupal
added 2021/11/17 12:0 a.m.46 views

Drupal core - Moderately critical - Cross Site Scripting - SA-CORE-2021-011

The Drupal project uses the CKEditor library for WYSIWYG editing. CKEditor has released a security update that impacts Drupal, along with a hotfix for that update. Vulnerabilities are possible if Drupal is configured to allow use of the CKEditor library for WYSIWYG editing. An attacker that can...

8.2CVSS6.1AI score0.0147EPSS
SaveExploits0References16
Huntr
Huntr
added 2021/11/11 8:8 a.m.20 views

Cross-site Scripting (XSS) - Stored in snipe/snipe-it

Description Multiple Stored XSS at 'snipeitram3' and 'snipeitcpu4' in the multipart message of POST request when creating a new Asset or editing an existed Asset. Proof of Concept POST /hardware HTTP/1.1 Host: develop.snipeitapp.com Connection: close Content-Length: 2560 Cache-Control: max-age=0...

3.5CVSS5.6AI score0.00731EPSS
SaveExploits1References1
CNVD
CNVD
added 2021/11/10 12:0 a.m.136 views

Microsoft 3D Viewer remote code execution vulnerability

A code injection vulnerability exists in Microsoft 3D Viewer, a simplified and fast graphics editing application from Microsoft Corporation USA. The vulnerability stems from the process of constructing code segments from external input data that is not properly filtered by the network system or...

7.8CVSS3.5AI score0.03821EPSS
SaveExploits0References1
NVD
NVD
added 2021/11/05 4:15 p.m.20 views

CVE-2021-39416

Multiple Cross Site Scripting XSS vulnerabilities exists in Remote Clinic v2.0 in 1 patients/register-patient.php via the a Contact, b Email, c Weight, d Profession, e refcontact, f address, g gender, h age, and i serial parameters; in 2 patients/edit-patient.php via the a Contact, b Email, c...

6.1CVSS0.01093EPSS
SaveExploits1References3
CNVD
CNVD
added 2021/11/05 12:0 a.m.113 views

Adobe Prelude memory corruption vulnerability

Adobe Prelude is a set of video clip editing tools from Adobe. Adobe Prelude has a memory corruption vulnerability that could be exploited to execute arbitrary code in the context of the current user...

9.3CVSS3.3AI score0.01995EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/11/05 12:0 a.m.133 views

Adobe Prelude Memory Corruption Vulnerability (CNVD-2022-02637)

Adobe Prelude is a set of video clip editing tools from Adobe. Adobe Prelude has a memory corruption vulnerability that can be exploited by remote attackers to execute arbitrary code in the context of the current user...

9.3CVSS5.8AI score0.01995EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2021/11/02 12:0 a.m.9 views

The vulnerability of the DJVU reading component in the viewing, creation, and editing of DjVU files by DjVuLibre allows a hacker to cause a service failure by exploiting the issue related to buffer overflows.

The vulnerability of the DJVU reading component in the viewing, creation, and editing of DjVu files in DjVuLibre involves reading data beyond the allowed boundaries of the buffer. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS5.9AI score0.0185EPSS
SaveExploits1References9Affected Software3
CNVD
CNVD
added 2021/10/27 12:0 a.m.27 views

Adobe Premiere Pro Memory Buffer Out-of-Bounds Access Vulnerability (CNVD-2021-92000)

Adobe Premiere Pro is a timeline-based video editing software from Adobe. Adobe Premiere Pro 15.4.1 and earlier versions are vulnerable to a memory buffer out-of-bounds access vulnerability. An attacker can exploit this vulnerability to execute arbitrary code...

7.8CVSS6.4AI score0.01597EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/10/27 12:0 a.m.108 views

Adobe Premiere Elements null pointer dereference vulnerability

Adobe Premiere Elements is a video editing software application from Adobe. Adobe Premiere Elements 2021 build 19.0 and earlier versions are vulnerable to a null pointer dereference. An attacker could exploit this vulnerability to cause a memory leak...

5.5CVSS4.3AI score0.01131EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/10/27 12:0 a.m.46 views

Adobe Premiere Elements null pointer dereference vulnerability (CNVD-2021-91993)

Adobe Premiere Elements is a video editing software application from Adobe. Adobe Premiere Elements 2021 build 19.0 and earlier versions are vulnerable to a null pointer dereference. An attacker could exploit this vulnerability to cause a denial of service for the application...

5.5CVSS4.8AI score0.01131EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/10/27 12:0 a.m.46 views

Adobe Premiere Pro Memory Buffer Out-of-Bounds Access Vulnerability (CNVD-2021-92001)

Adobe Premiere Pro is a timeline-based video editing software from Adobe. Adobe Premiere Pro 15.4.1 and earlier versions are vulnerable to a memory buffer out-of-bounds access vulnerability. An attacker can exploit this vulnerability to execute arbitrary code...

7.8CVSS6.4AI score0.01597EPSS
SaveExploits0References1
Rows per page
Query Builder