mariadb: assertion failure in compare_order_elements

A flaw was found in the MariaDB Server. It contains a segmentation fault via the component, sql/sqlwindow.cc, impacting availability...

FXOS CLI Command Execution Root Privilege

The vulnerability of the command-line interface CLI of the networking operating system FXOS exists because measures to neutralize the special elements used in the operating system’s commands have not been taken. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands...

Apache Flume JMSMessageConsumer Code Execution

The vulnerability of the JMSMessageConsumer component in the Apache Flume software for processing large volumes of streaming data exists due to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Adobe Premiere Elements Uncontrolled Search Path

The vulnerability of Adobe Premiere Elements’ video editing software is related to an uncontrolled search path element. Exploiting this vulnerability can allow attackers to enhance their privileges...

golang: crypto/elliptic: IsOnCurve returns true for invalid field elements

A flaw was found in the elliptic package of the crypto library in golang when the IsOnCurve function could return true for invalid field elements. This flaw allows an attacker to take advantage of this undefined behavior, affecting the availability and integrity of the resource...

vRealize Log Insight Data Compromise

The vulnerability of the export function of the vRealize Log Insight management tool exists due to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a malicious actor to compromise the integrity of the protected information...

GO-2022-0588 Cross-site scripting via leaked style elements in github.com/microcosm-cc/bluemonday

The bluemonday HTML sanitizer can leak the contents of a "style" element into HTML output, potentially causing XSS vulnerabilities. The default bluemonday sanitization policies are not vulnerable. Only user-defined policies allowing "select", "style", and "option" elements are affected. Permittin...

Siemens software and hardware Code Execution

Siemens’ software-hardware vulnerabilities exist due to the lack of measures taken to neutralize these special elements. Exploiting these vulnerabilities allows a remote attacker to execute arbitrary code...

Adobe Premiere Elements Privilege Escalation (APSB22-43) (macOS)

The version of Adobe Premiere Elements installed on the remote macOS host is prior to build 20.0 20220702.Git.main.e4f8578. It is, therefore, affected by a vulnerability as referenced in the APSB22-43 advisory. - Adobe Premiere Elements version 2020v20 and earlier is affected by an Uncontrolled...

Adobe Premiere Elements Privilege Escalation (APSB22-43)

The version of Adobe Premiere Elements installed on the remote Windows host is prior to build 20.0 20220702.Git.main.e4f8578. It is, therefore, affected by a vulnerability as referenced in the APSB22-43 advisory. - Adobe Premiere Elements version 2020v20 and earlier is affected by an Uncontrolled...

CVE-2022-34235

Adobe Premiere Elements version 2020v20 and earlier is affected by an Uncontrolled Search Path Element which could lead to Privilege Escalation. An attacker could leverage this vulnerability to obtain admin using an existing low-privileged user. Exploitation of this issue does not require user...

CVE-2022-34235

Adobe Premiere Elements version 2020v20 and earlier is affected by an Uncontrolled Search Path Element which could lead to Privilege Escalation. An attacker could leverage this vulnerability to obtain admin using an existing low-privileged user. Exploitation of this issue does not require user...

Privilege escalation

Adobe Premiere Elements version 2020v20 and earlier is affected by an Uncontrolled Search Path Element which could lead to Privilege Escalation. An attacker could leverage this vulnerability to obtain admin using an existing low-privileged user. Exploitation of this issue does not require user...

CVE-2022-34235 Adobe Premiere Elements Uncontrolled Search Path Element Privilege Escalation

Adobe Premiere Elements version 2020v20 and earlier is affected by an Uncontrolled Search Path Element which could lead to Privilege Escalation. An attacker could leverage this vulnerability to obtain admin using an existing low-privileged user. Exploitation of this issue does not require user...

CVE-2022-34235 Adobe Premiere Elements Uncontrolled Search Path Element Privilege Escalation

Adobe Premiere Elements version 2020v20 and earlier is affected by an Uncontrolled Search Path Element which could lead to Privilege Escalation. An attacker could leverage this vulnerability to obtain admin using an existing low-privileged user. Exploitation of this issue does not require user...

CVE-2022-34235

CVE-2022-34235 affects Adobe Premiere Elements versions 2020v20 and earlier. The issue is an Uncontrolled Search Path Element that could allow Privilege Escalation, enabling an attacker with a low-privileged user to obtain admin privileges without user interaction. The vulnerability is documented...

Microsoft Azure Site Recovery Remote Code Execution Vulnerability (CNVD-2022-84112)

Microsoft Azure Site Recovery is a site recovery DRaaS from Microsoft Corporation for cloud and hybrid cloud architectures. The vulnerability stems from the failure of a network system or product to properly filter special elements of code segments during the construction of external input data. ...

CVE-2022-34235: Uncontrolled Search Path Element

Adobe Premiere Elements version 2020v20 and earlier is affected by an Uncontrolled Search Path Element which could lead to Privilege Escalation. An attacker could leverage this vulnerability to obtain admin using an existing low-privileged user. Exploitation of this issue does not require user...

golang: crypto/elliptic: IsOnCurve returns true for invalid field elements

A flaw was found in the elliptic package of the crypto library in golang when the IsOnCurve function could return true for invalid field elements. This flaw allows an attacker to take advantage of this undefined behavior, affecting the availability and integrity of the resource...

Vulnerabilities fixed in Adobe products

Adobe has fixed vulnerabilities in Acrobat, Acrobat Reader, Premiere Elements, Illustrator and FrameMaker. The vulnerabilities allow a malicious person to execute arbitrary code execute within the context of the user or gaining elevated privileges. Adobe has released updates to fix the...