16412 matches found
Adobe Bridge Buffer Overflow Vulnerability (CNVD-2022-66015)
Adobe Bridge is a file viewer from Adobe. Adobe Bridge is vulnerable to a buffer overflow vulnerability that stems from an out-of-bounds write vulnerability that could be exploited to execute arbitrary code in the context of the current user...
Ubuntu: Security Advisory (USN-5630-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2022-3236
A code injection vulnerability in the User Portal and Webadmin allows a remote attacker to execute code in Sophos Firewall version v19.0 MR1 and older. Recent assessments: cbeek-r7 at September 06, 2024 6:10pm UTC reported: On September 5th 2024, CISA released a security bulletin highlighting the...
CVE-2022-41229
Jenkins NS-ND Integration Performance Publisher Plugin 4.8.0.134 and earlier does not escape configuration options of the Execute NetStorm/NetCloud Test build step, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...
Adobe Bridge Buffer Overflow Vulnerability (CNVD-2022-64964)
Adobe Bridge is a file viewer from Adobe. Adobe Bridge is vulnerable to a buffer overflow vulnerability that stems from an out-of-bounds write vulnerability that could be exploited to execute arbitrary code in the context of the current user...
The vulnerability of the Job_ExecuteBefore and Job_ExecuteAfter parameters in the post_profilesettings.php file of the Syncovery backup tool allows a hacker to increase their privileges.
The vulnerability of the JobExecuteBefore and JobExecuteAfter parameters in the postprofilesettings.php file of the Syncovery backup tool is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability can allow a remote attacker to increase their...
CVE-2022-41229: Improper Neutralization of Input During Web Page Generation
Jenkins NS-ND Integration Performance Publisher Plugin 4.8.0.134 and earlier does not escape configuration options of the Execute NetStorm/NetCloud Test build step, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...
Adobe Bridge Buffer Overflow Vulnerability (CNVD-2022-64966)
Adobe Bridge is a file viewer from Adobe. Adobe Bridge is vulnerable to a buffer overflow vulnerability that stems from an out-of-bounds write vulnerability that could be exploited to execute arbitrary code in the context of the current user...
Use After Free
qemu:sid is vulnerable to use after free. It allowed a remote attacker to potentially execute HW commands when shared buffers...
Adobe InCopy out-of-bounds read vulnerability (CNVD-2023-05233)
Adobe InCopy is an application produced by Adobe for professional word processing. Adobe InCopy 17.3 and 16.4.2 and prior versions contain an out-of-bounds read vulnerability that could be exploited by an attacker to execute arbitrary code in the context of the current user...
The vulnerability of the “runc exec --cap” command in the Runc tool for running isolated containers allows a attacker to gain access to confidential data, compromise its integrity, and cause service failures.
The vulnerability of the “runc exec --cap” command in the Runc tool for running isolated containers is related to the default access permissions settings. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...
D-Link DIR-2150 Operating System Command Injection Vulnerability
The D-Link DIR-2150 is a wireless router device from D-Link.The D-Link DIR-2150 is vulnerable to an operating system command injection vulnerability that could be exploited by an attacker to execute code in the router context...
D-Link DIR-2150 Buffer Overflow Vulnerability
D-Link DIR-2150 is a wireless router device from D-Link. D-Link DIR-2150c is vulnerable to a buffer overflow, which can be exploited by attackers to execute code in the root context...
No control for the future Airdrop
Lines of code Vulnerability details Impact You can't control the airdrop NFT on this contract PartyGovernance.sol. You can only control the preciousListHash Proof of Concept The execute is check that the precious list preciousTokenIds and preciousTokens is valid or not if...
D-Link DIR-2150 Buffer Overflow Vulnerability (CNVD-2023-21662)
The D-Link DIR-2150 is a wireless router device from D-Link. The D-Link DIR-2150 is vulnerable to a buffer overflow vulnerability that can be exploited by attackers to execute code in the root context...
GraphicsMagick Use-after-free (CVE-2017-11403)
A use-after-free vulnerability exists in GraphicsMagick. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Design/Logic Flaw
Adobe InDesign versions 16.4.2 and earlier and 17.3 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context...
CVE-2022-38412
Adobe Animate version 21.0.11 and earlier and 22.0.7 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the contex...