mySCADA myPRO

1. EXECUTIVE SUMMARY CVSS v3 8.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: mySCADA Equipment: myPRO Vulnerability: Command Injection 2. RISK EVALUATION Successful exploitation of this vulnerability could allow arbitrary operating system commands injection. 3. TECHNICAL...

Magento Commerce Code Execution

The vulnerability of the Magento Commerce software development and management platform is related to the lack of measures taken to neutralize special elements used in the operating system. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Magento Commerce Code Execution

The vulnerability of the Magento Commerce software development and management platform is related to the lack of measures taken to neutralize special elements used in the operating system. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

OESA-2022-1585 golang security update

The Go Programming Language. Security Fixes: Rat.SetString in math/big in Go before 1.16.14 and 1.17.x before 1.17.7 has an overflow that can lead to Uncontrolled Memory Consumption.CVE-2022-23772 Curve.IsOnCurve in crypto/elliptic in Go before 1.16.14 and 1.17.x before 1.17.7 can incorrectly...

CVE-2022-24770

"gradio" is an open source framework for building interactive machine learning models and demos. Prior to version 2.8.11, "gradio" suffers from Improper Neutralization of Formula Elements in a CSV File. The "gradio" library has a flagging functionality which saves input/output data into a CSV fil...

CVE-2022-24770: Improper Neutralization of Formula Elements in a CSV File

gradio is an open source framework for building interactive machine learning models and demos. Prior to version 2.8.11, gradio suffers from Improper Neutralization of Formula Elements in a CSV File. The gradio library has a flagging functionality which saves input/output data into a CSV file on t...

CVE-2021-40786

Adobe Premiere Elements 20210809.daily.2242976 and earlier is affected by a memory corruption vulnerability due to insecure handling of a malicious file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerabilit...

CVE-2021-42526

Adobe Premiere Elements 20210809.daily.2242976 and earlier is affected by a memory corruption vulnerability due to insecure handling of a malicious file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerabilit...

CVE-2021-40787

Adobe Premiere Elements 20210809.daily.2242976 and earlier is affected by a memory corruption vulnerability due to insecure handling of a malicious file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerabilit...

CVE-2021-42527

Adobe Premiere Elements 20210809.daily.2242976 and earlier is affected by a memory corruption vulnerability due to insecure handling of a malicious file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerabilit...

CVE-2021-40785

Adobe Premiere Elements 20210809.daily.2242976 and earlier is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user...

CVE-2021-42527

Adobe Premiere Elements 20210809.daily.2242976 and earlier is affected by a memory corruption vulnerability due to insecure handling of a malicious file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerabilit...

CVE-2021-40785

Adobe Premiere Elements 20210809.daily.2242976 and earlier is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user...

CVE-2021-40789

Adobe Premiere Elements 20210809.daily.2242976 and earlier is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user...

CVE-2021-40788

Adobe Premiere Elements 20210809.daily.2242976 and earlier is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user...

CVE-2021-40788

Adobe Premiere Elements 20210809.daily.2242976 and earlier is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user...

CVE-2021-40787

Adobe Premiere Elements 20210809.daily.2242976 and earlier is affected by a memory corruption vulnerability due to insecure handling of a malicious file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerabilit...

CVE-2021-42526

Adobe Premiere Elements 20210809.daily.2242976 and earlier is affected by a memory corruption vulnerability due to insecure handling of a malicious file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerabilit...

CVE-2021-40786

Adobe Premiere Elements 20210809.daily.2242976 and earlier is affected by a memory corruption vulnerability due to insecure handling of a malicious file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerabilit...

CVE-2021-40789

Adobe Premiere Elements 20210809.daily.2242976 and earlier is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user...