Adobe Premiere Elements Multiple Vulnerabilities (APSB21-106) (macOS)

The version of Adobe Premiere Elements installed on the remote macOS host is prior to build 19.0 20211007.daily.2243969. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB21-106 advisory. - Adobe Premiere Elements 20210809.daily.2242976 and earlier is affected by a...

Adobe Premiere Elements Arbitrary Code Execution (APSB21-78) (macOS)

The version of Adobe Premiere Elements installed on the remote macOS host is prior to build 19.0 20210809.daily.2242976. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB21-78 advisory. - Adobe Premiere Elements version 2021.2235820 and earlier is affected by a memo...

CVE-2024-49928: Out-of-bounds Read

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: avoid reading out of bounds when loading TX power FW elements Because the loop-expression will do one more time before getting false from cond-expression, the original code copied one more entry size beyond valid...

The vulnerability of the sqlo_preds_contradiction component in the Virtuoso-opensource web application development platform allows a attacker to trigger a service failure.

The vulnerability of the sqlopredscontradiction component in the Virtuoso-opensource web application development platform is related to the improper elimination of special elements used in SQL commands. Exploiting this vulnerability can allow an attacker to trigger a service failure using special...

The vulnerability of the bif_mod component in the Virtuoso-opensource web application development platform allows a attacker to trigger a service failure.

The vulnerability of the bifmod component in the Virtuoso-opensource web application development platform is related to improper elimination of special elements used in SQL commands. Exploiting this vulnerability can allow an attacker to trigger a service failure using specially created SQL...

The vulnerability of the gpf_notice component in the Virtuoso-opensource web application development platform allows a attacker to trigger a service failure.

The vulnerability of the gpfnotice component in the Virtuoso-opensource web application development platform is related to improper elimination of special elements used in SQL commands. Exploiting this vulnerability can allow an attacker to trigger a service failure using specially created SQL...

The vulnerability of the sinv_check_exp component in the Virtuoso-opensource web application development platform allows a attacker to trigger a service failure.

The vulnerability of the sinvcheckexp component in the Virtuoso-opensource web application development platform is related to improper elimination of special elements used in SQL commands. Exploiting this vulnerability can allow an attacker to trigger a service failure using specially created SQL...

The vulnerability of Microsoft DeepSpeed’s optimization library, related to the failure to take measures to neutralize special elements used in the operating system’s command set, allows attackers to execute arbitrary code.

The vulnerability of Microsoft DeepSpeed’s optimization library relates to the lack of measures taken to neutralize special elements used in the operating system’s command set. Exploiting this vulnerability can allow attackers to execute arbitrary code...

The vulnerability of the sqlc_make_policyTrig component in the Virtuoso-opensource web application development platform allows a attacker to cause a service failure.

The vulnerability of the sqlcmakepolicyTrig component in the Virtuoso-opensource web application development platform is related to improper elimination of special elements used in SQL commands. Exploiting this vulnerability can allow a malicious actor to trigger a service failure using specially...

The vulnerability of the artm_div_int component in the Virtuoso-opensource web application development platform allows a attacker to trigger a service failure.

The vulnerability of the artmdivint component in the Virtuoso-opensource web application development platform is related to improper elimination of special elements used in SQL commands. Exploiting this vulnerability can allow a malicious actor to trigger a service failure using specially created...

The vulnerability of the sqlc_union_dt_wrap component in the Virtuoso-opensource web application development platform allows a attacker to cause a service failure.

The vulnerability of the sqlcuniondtwrap component in the Virtuoso-opensource web application development platform is related to improper elimination of special elements used in SQL commands. Exploiting this vulnerability can allow an attacker to trigger a service failure using specially created...

The vulnerability of the sch_name_to_object component in the Virtuoso-opensource web application development platform allows a attacker to trigger a service failure.

The vulnerability of the schnametoobject component in the Virtuoso-opensource web application development platform is related to improper elimination of special elements used in SQL commands. Exploiting this vulnerability can allow an attacker to trigger a service failure using specially created...

The vulnerability in the XMLSignatureUtil class of the Keycloak identity and access management software allows a hacker to circumvent existing security restrictions and gain increased privileges.

The vulnerability of the XMLSignatureUtil class in the software for managing identification and access control in Keycloak relates to the improper processing of signed elements of the cryptographic signature. Exploiting this vulnerability can allow a malicious actor to circumvent existing securit...

The vulnerability of the __libc_malloc component in the Virtuoso-opensource web application development platform allows a attacker to cause a service failure.

The vulnerability of the libcmalloc component in the Virtuoso-opensource web application development platform is related to improper elimination of special elements used in SQL commands. Exploiting this vulnerability can allow an attacker to cause service failures using specially created SQL...

The vulnerability of the psiginfo component in the Virtuoso-opensource web application development platform allows a attacker to trigger a service failure.

The vulnerability of the psiginfo component in the Virtuoso-opensource web application development platform is related to improper elimination of special elements used in SQL commands. Exploiting this vulnerability can allow a malicious actor to trigger a service failure using specially created S...

CVE-2024-49244 WordPress SV Product Import Export for WooCommerce plugin <= 1.0.0 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in vrinsoft CSV Product Import Export for WooCommerce csv-wc-product-import-export.This issue affects CSV Product Import Export for WooCommerce: from n/a through = 1.0.0...

Teltonika Remote Management System and RUT Model Routers Improper Neutralization of Special Elements Used in an OS Command (CVE-2023-32350)

Versions 00.07.00 through 00.07.03 of Teltonika's RUT router firmware contain an operating system OS command injection vulnerability in a Lua service. An attacker could exploit a parameter in the vulnerable function that calls a user-provided package name by instead providing a package with a...

CVE-2024-49271

: Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Unlimited Elements Unlimited Elements For Elementor Free Widgets, Addons, Templates allows : Command Injection.This issue affects Unlimited Elements For Elementor Free Widgets, Addons, Templates: from n/a...

CVE-2024-49271

Deserialization of Untrusted Data vulnerability in Unlimited Elements Unlimited Elements For Elementor Free Widgets, Addons, Templates unlimited-elements-for-elementor allows Command Injection.This issue affects Unlimited Elements For Elementor Free Widgets, Addons, Templates: from n/a through =...

CVE-2024-49271

CVE-2024-49271 affects the WordPress plugin Unlimited Elements For Elementor (Free Widgets, Addons, Templates). Reports indicate an Improper Neutralization of Special Elements Used in a Template Engine leading to Remote Code Execution/Command Injection in versions