Lucene search
+L

2763 matches found

Zero Day Initiative
Zero Day Initiative
•added 2021/12/21 12:00 a.m.•44 views

Adobe After Effects JPEG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe After Effects. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS3.1AI score0.00303EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/12/21 12:00 a.m.•42 views

Adobe After Effects TIF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe After Effects. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS2.6AI score0.00341EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/12/21 12:00 a.m.•33 views

Adobe After Effects 3GP File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe After Effects. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS2.7AI score0.00303EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/12/21 12:00 a.m.•36 views

Adobe After Effects MOV File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe After Effects. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS3.2AI score0.00303EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/12/21 12:00 a.m.•34 views

Adobe After Effects MP4 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe After Effects. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS2.7AI score0.00303EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/12/21 12:00 a.m.•31 views

Adobe After Effects MOV File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe After Effects. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS3.2AI score0.00303EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/12/21 12:00 a.m.•50 views

Adobe After Effects 3GP File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe After Effects. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS4.4AI score0.00341EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/12/21 12:00 a.m.•33 views

Adobe After Effects MP4 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe After Effects. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS2.7AI score0.00303EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2021/12/20 12:00 a.m.•10 views

The vulnerability of Adobe After Effects’ video and dynamic image editing software relates to the manipulation of the null pointer, allowing attackers to trigger a service failure.

The vulnerability of Adobe After Effects video and dynamic image editing software relates to the handling of the zero pointer. Exploiting this vulnerability can allow a malicious actor to cause a service failure using a specially crafted PDF file...

6.5CVSS6.6AI score0.01374EPSS
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
•added 2021/12/20 12:00 a.m.•18 views

PT-2021-7521 · WordPress · Image Hover Effects Ultimate

Name of the Vulnerable Software and Affected Versions: Image Hover Effects Ultimate plugin for WordPress versions up to, and including, 9.7.3 Description: The issue is related to Stored Cross-Site Scripting via the Title and Description values that can be added to an Image Hover due to insufficie...

6.4CVSS5.1AI score0.00628EPSS
SaveExploits0References9
Talos
Talos
•added 2021/12/20 12:00 a.m.•58 views

Blackmagic Design DaVinci Resolve R3D DPDecoder Service frame parsing uninitialized uuid object vulnerability

Summary When parsing a file that is submitted to the DPDecoder service as a job, the R3D SDK will mistakenly skip over the assignment of a property containing an object referring to a UUID that was parsed from a frame within the video container. Upon destruction of the object that owns it, the...

9.8CVSS9.6AI score0.17945EPSS
SaveExploits1
CNVD
CNVD
•added 2021/12/17 12:00 a.m.•39 views

WordPress Image Hover Effects Ultimate has an unspecified vulnerability

WordPress is a set of blogging platforms developed by the WordPress Wordpress Foundation using the PHP language. The platform supports personal blogging sites on PHP and MySQL servers. WordPress Image Hover Effects Ultimate plugin 9.6.1 and earlier versions have a security vulnerability that can ...

9.8CVSS2.3AI score0.06532EPSS
SaveExploits1References1
OSV
OSV
•added 2021/12/16 9:02 p.m.•50 views

GHSA-Q34H-97WF-8R8J vault-cli contains possible RCE when reading user-defined data

Impact What kind of vulnerability is it? Who is impacted? vault-cli features the ability for rendering templated values as explained in the documentation. When a secret starts with the prefix !template!, vault-cli interprets the rest of the contents of the secret as a Jinja2 template. Jinja2 is a...

8.4CVSS9.3AI score0.05167EPSS
SaveExploits1References8
Github Security Blog
Github Security Blog
•added 2021/12/16 9:02 p.m.•59 views

vault-cli contains possible RCE when reading user-defined data

Impact What kind of vulnerability is it? Who is impacted? vault-cli features the ability for rendering templated values as explained in the documentation. When a secret starts with the prefix !template!, vault-cli interprets the rest of the contents of the secret as a Jinja2 template. Jinja2 is a...

9.1CVSS0.6AI score0.05167EPSS
SaveExploits1References8Affected Software1
VulnCheck KEV
VulnCheck KEV
•added 2021/12/16 12:00 a.m.•7 views

VulnCheck KEV: CVE-2021-36888

Unauthenticated Arbitrary Options Update vulnerability leading to full website compromise discovered in Image Hover Effects Ultimate versions = 9.6.1 WordPress plugin...

9.8CVSS8.2AI score0.06532EPSS
SaveIn wildExploits1References127
OSV
OSV
•added 2021/12/15 7:15 p.m.•18 views

CVE-2021-36888

Unauthenticated Arbitrary Options Update vulnerability leading to full website compromise discovered in Image Hover Effects Ultimate versions = 9.6.1 WordPress plugin...

9.8CVSS5.8AI score0.06532EPSS
SaveExploits1References2
NVD
NVD
•added 2021/12/15 7:15 p.m.•31 views

CVE-2021-36888

Unauthenticated Arbitrary Options Update vulnerability leading to full website compromise discovered in Image Hover Effects Ultimate versions = 9.6.1 WordPress plugin...

9.8CVSS0.06532EPSS
SaveExploits1References2
Prion
Prion
•added 2021/12/15 7:15 p.m.•21 views

Code injection

Unauthenticated Arbitrary Options Update vulnerability leading to full website compromise discovered in Image Hover Effects Ultimate versions = 9.6.1 WordPress plugin...

7.5CVSS9.3AI score0.06532EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2021/12/15 6:06 p.m.•40 views

CVE-2021-36888 WordPress Image Hover Effects Ultimate plugin <= 9.6.1 - Unauthenticated Arbitrary Options Update leading to full website compromise

Unauthenticated Arbitrary Options Update vulnerability leading to full website compromise discovered in Image Hover Effects Ultimate versions = 9.6.1 WordPress plugin...

9.8CVSS9.6AI score0.06532EPSS
SaveExploits1References2
CVE
CVE
•added 2021/12/15 6:06 p.m.•81 views

CVE-2021-36888

The CVE-2021-36888 entry affects the WordPress plugin Image Hover Effects Ultimate (versions

9.8CVSS9.4AI score0.06532EPSS
SaveIn wildExploits1References2Affected Software1
Rows per page
Query Builder