270 matches found
Rust acc_reader crate has an unspecified vulnerability
Rust accreader crate is a structure that provides an AccReader that wraps an arbitrary instance of std::io::Read and provides an implementation of std::io::Seek for it. memory location. No details of the vulnerability are currently available...
Unspecified vulnerability in Rust bronzedb-protocol crate
Rust bronzedb-protocol crate is browndb is a kv database. It is a re-export crate. a security vulnerability exists in Rust bronzedb-protocol crate, which stems from the fact that ReadKVExt can read data from an uninitialized memory location. No detailed vulnerability details are available at this...
Rust ash crate has an unspecified vulnerability
Rust ash crate is a very lightweight Vulkan wrapper. a security vulnerability exists in versions of Rust ash crate prior to 0.33.1, which stems from the fact that util::readspv can read data from an uninitialized memory location. No details of the vulnerability are currently available...
Mozilla Rust messagepack-rs crate file reading vulnerability (CNVD-2022-04510)
Rust is a general-purpose, compiled programming language from the Mozilla Foundation. rust messagepack-rs crate has a security vulnerability in versions prior to 2021-01-26, which can be exploited by attackers to deserializebinary to read data from an uninitialized memory location...
Adobe Prelude < 22.1.1 Multiple Vulnerabilities (APSB21-114)
The version of Adobe Prelude installed on the remote Windows host is prior to 22.1.1. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB21-114 advisory. - Adobe Prelude version 22.1.1 and earlier is affected by an Out-of-bounds Write vulnerability due to insecure...
CVE-2021-43021: Access of Memory Location After End of Buffer
Adobe Premiere Rush version 1.5.16 and earlier is affected by a memory corruption vulnerability due to insecure handling of a malicious EXR file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability...
openSUSE 15 Security Update : go1.17 (openSUSE-SU-2021:3833-1)
The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:3833-1 advisory. - ImportedSymbols in debug/macho for Open or OpenFat in Go before 1.16.10 and 1.17.x before 1.17.3 Accesses a Memory Location After the End...
CVE-2021-41771
ImportedSymbols in debug/macho for Open or OpenFat in Go before 1.16.10 and 1.17.x before 1.17.3 Accesses a Memory Location After the End of a Buffer, aka an out-of-bounds slice situation...
Design/Logic Flaw
ImportedSymbols in debug/macho for Open or OpenFat in Go before 1.16.10 and 1.17.x before 1.17.3 Accesses a Memory Location After the End of a Buffer, aka an out-of-bounds slice situation...
CVE-2021-41771
CVE-2021-41771 is an out-of-bounds read in the Go standard library, specifically ImportedSymbols in debug/macho when parsing malformed binaries with Open/OpenFat. This can cause a panic or denial of service by reading beyond a buffer. Technical details in connected advisories confirm the issue af...
Adobe Media Encoder Multiple Vulnerabilities (APSB21-99) - Windows
Adobe Media Encoder is prone to multiple vulnerabilities. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you...
Adobe’s Surprise Security Bulletin Dominated by Critical Patches
Adobe has dropped a mammoth out-of-band security update this week, addressing 92 vulnerabilities across 14 products. The majority of the disclosed bugs are critical-severity problems, and most allow arbitrary code execution ACE. Privilege escalation, denial-of-service and memory leaks/information...
Adobe Photoshop 22.x < 22.5.2 Multiple Vulnerabilities (macOS APSB21-109)
The version of Adobe Photoshop installed on the remote macOS or Mac OS X host is prior to 22.5.2. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb21-109 advisory. - Adobe Photoshop version 22.5.1 and earlier versions is affected by an Access of Memory Location Afte...
Adobe Framemaker Buffer Overflow Vulnerability (CNVD-2021-102812)
Adobe Framemaker is the United States of America Odooby Adobe company's set of page layout software for writing and editing large or complex documents including structured documents. Adobe Framemaker suffers from a buffer error vulnerability that originates when a networked system or product...
Adobe InDesign RCE Vulnerabilities (APSB21-73) - Mac OS X
Adobe Indesign is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:indesignserver";...
Adobe InDesign RCE Vulnerabilities (APSB21-73) - Mac OS X
Adobe Indesign is prone to multiple vulnerabilities. This VT has been deprecated as a duplicate of the VT SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
Adobe InDesign 16.0 < 16.4.0 Multiple Arbitrary code execution (APSB21-73)
The version of Adobe InDesign installed on the remote Windows host is prior to 16.4.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB21-73 advisory. - Access of Memory Location After End of Buffer CWE-788 CVE-2021-40727 - Adobe InDesign versions 16.3 and earlier,...
Adobe InDesign RCE Vulnerabilities (APSB21-73) - Windows
Adobe Indesign is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:indesignserver";...
Siemens IFC adapter in NX out-of-bounds read vulnerability
NX software is an integrated toolset that helps develop design, simulation and manufacturing solutions by supporting all aspects of product development. An out-of-bounds read vulnerability exists in Siemens IFC adapter in NX, which can be exploited by an attacker to cause a denial of service...
CVE-2021-40142
In OPC Foundation Local Discovery Server LDS before 1.04.402.463, remote attackers can cause a denial of service DoS by sending carefully crafted messages that lead to Access of a Memory Location After the End of a Buffer...