Multiple Adobe Products Resource Management Error Vulnerability (CNVD-2022-52920)

Adobe Acrobat is a set of PDF file editing and conversion tools.Adobe Reader is a set of PDF document reading software. Multiple Adobe products have resource management error vulnerabilities that can be exploited by an attacker to execute arbitrary code in the context of the current user...

Out-of-bounds read vulnerability in multiple Adobe products (CNVD-2022-52924)

Adobe Acrobat is a set of PDF file editing and conversion tools.Adobe Acrobat Reader is a PDF viewer. Multiple Adobe products have out-of-bounds read vulnerabilities that can be exploited by attackers to cause sensitive memory leaks...

Aethon TUG Home Base Server 跨站脚本漏洞

Aethon TUG Home Base Server is a robotics server from Aethon, Inc. It is used to control and communicate with autonomous mobile robots. Aethon TUG Home Base Server has a cross-site scripting vulnerability that originates when creating or editing a new report, the Reports tab of the Fleet Manageme...

The vulnerability of Adobe After Effects’ video and dynamic image editing software lies in its ability to read data beyond the buffer in memory, allowing attackers to gain unauthorized access to protected information.

The vulnerability of Adobe After Effects video and dynamic image editing software relates to reading beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of Adobe Premiere Elements software-related video editing programs, related to the manipulation of the null pointer, allows attackers to trigger a service failure.

The vulnerability of Adobe Premiere Elements software-related video editing programs is related to the handling of the null pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2022-1006

The Advanced Booking Calendar WordPress plugin before 1.7.1 does not sanitise and escape the id parameter when editing Calendars, which could allow high privilege users such as admin to perform SQL injection attacks...

Sql injection

The Advanced Booking Calendar WordPress plugin before 1.7.1 does not sanitise and escape the id parameter when editing Calendars, which could allow high privilege users such as admin to perform SQL injection attacks...

WordPress plugin Advanced Booking Calendar SQL注入漏洞

WordPress is a set of blogging platforms developed by the Wordpress Foundation using the PHP language. WordPress plugin is an application plugin for WordPress. WordPress Advanced Booking Calendar before plugin version 1.7.1 is vulnerable to a SQL injection vulnerability that stems from The plugin...

Adrotate < 5.8.23 - Admin+ XSS via Group Name

The plugin does not escape Group Names, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed Create/edit a group and put the following payload in the Name field: " style=animation-name:rotation...

The vulnerability of the CKEditor’s WYSIWYG page processing module allows attackers to carry out cross-site scripting attacks.

The vulnerability of the CKEditor’s WYSIWYG page editing module is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks remotely...

XWiki Platform 安全漏洞

Xwiki Platform is a suite of wiki platforms for creating web collaboration applications from the French company Xwiki. XWiki Platform suffers from a security vulnerability that stems from the fact that a simple user can create global SSX/JSX without specific permissions: theoretically, only users...

The vulnerability of the randomize_iparp function in the edit_packet.c component of the editing and replaying utility Pcap Tcpreplay allows a hacker to cause a service failure.

The vulnerability of the randomizeiparp function in the editpacket.c component of the Pcap editing and replay utility Tcpreplay is related to writing beyond buffer boundaries. Exploiting this vulnerability allows a malicious actor to cause service interruptions using a specially created pcap file...

The vulnerability of the Clipboard editing plugin for the CKEditor WYSIWYG editor allows a hacker to compromise data integrity.

The vulnerability of the Clipboard editing plugin of the CKEditor editor is related to improper handling of code generation. Exploiting this vulnerability allows an attacker to compromise data integrity remotely...

CVE-2022-26198

Notable v1.8.4 does not filter text editing, allowing attackers to execute arbitrary code via a crafted payload injected into the Title text field...

CVE-2022-26198

Notable CVE-2022-26198 affects Notable 1.8.4. The issue is that the Title field allows crafted payloads due to lack of filtering of text editing, enabling arbitrary code execution. There is no exploit detail in the provided data. Remediation guidance from PT-2022-17717 recommends disabling the Ti...

CVE-2022-26198

Notable v1.8.4 does not filter text editing, allowing attackers to execute arbitrary code via a crafted payload injected into the Title text field...

PT-2022-17717 · Notable · Notable

Name of the Vulnerable Software and Affected Versions: Notable version 1.8.4 Description: The issue allows attackers to execute arbitrary code via a crafted payload injected into the Title text field, due to a lack of filtering for text editing. Recommendations: For Notable version 1.8.4, conside...

Sound Exchange libsox sphere.c start_read() heap-based buffer overflow vulnerability

Talos Vulnerability Report TALOS-2021-1434 Sound Exchange libsox sphere.c startread heap-based buffer overflow vulnerability March 23, 2022 CVE Number CVE-2021-40426 SUMMARY A heap-based buffer overflow vulnerability exists in the sphere.c startread functionality of Sound Exchange libsox 14.4.2 a...

CVE-2022-25578

taocms v3.0.2 allows attackers to execute code injection via arbitrarily editing the .htaccess file...

Drupal Multiple Vulnerabilities in Third-party Library (SA-CORE-2022-005) - Windows

Drupal is prone to multiple vulnerabilities in a third-party library. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...