Adobe Premiere Pro 缓冲区错误漏洞

Adobe Premiere Pro is a timeline-based video editing software from Adobe. Adobe Premiere Pro 15.4 and earlier versions have a memory out-of-bounds access vulnerability that can be exploited by attackers to execute arbitrary code...

Ubuntu: Security Advisory (USN-5071-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-30787

This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.5, Security Update 2021-004 Catalina, Security Update 2021-005 Mojave. An application may be able to cause unexpected system termination or write kernel memory...

Adobe Photoshop Heap Buffer Overflow

The vulnerability of the Adobe Photoshop graphic editor is related to the writing of data beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user...

PDF viewer Heap Buffer Overflow DoS

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to writing beyond the buffer boundaries in memory. Exploiting these vulnerabilities can allow a malicious actor to...

PDF viewer Memory Use Code Execution

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to the use of memory after it is freed. Exploiting these vulnerabilities can allow an attacker to execute arbitrary...

PDF viewer Heap Buffer Overflow DoS

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to writing beyond the buffer limit in memory. Exploiting these vulnerabilities can allow a malicious actor to execut...

UBUNTU-CVE-2021-36057

XMP Toolkit SDK version 2020.1 and earlier is affected by a write-what-where condition vulnerability caused during the application's memory allocation process. This may cause the memory management functions to become mismatched resulting in local application denial of service in the context of th...

PT-2021-6439 · Oracle +1 · Mysql Cluster +1

Name of the Vulnerable Software and Affected Versions: MySQL Cluster versions 7.4.34 and prior MySQL Cluster versions 7.5.24 and prior MySQL Cluster versions 7.6.20 and prior MySQL Cluster versions 8.0.27 and prior Description: The issue is related to an out-of-bounds read in the memory of the...

PowerLogic Energy Meter Buffer Overflow

The vulnerability of the microprogrammed power measurement and energy meter software from PowerLogic, models ION7400, PM8000, and ION9000, lies in the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to trigger a system...

Adobe Framemaker Heap Buffer Overflow RCE

The vulnerability of the Adobe Framemaker desktop publishing system lies in the writing of code beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user...

Google Chrome Extensions API Code Execution

The vulnerability of the Google Chrome browser’s Extensions API relates to the use of memory after it is freed. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code through a specially created website...

CVE-2020-36476

CVE-2020-36476 affects Mbed TLS before 2.24.0 (and before 2.16.8 LTS and before 2.7.17 LTS). The issue is a missing zeroization of plaintext buffers in the TLS code path (mbedtls_ssl_read), which leaves unused application data in memory. Exploitation would rely on memory exposure and could enable...

Security update for fetchmail (moderate)

openSUSE Security Update: Security update for fetchmail Announcement ID: openSUSE-SU-2021:1183-1 Rating: moderate References: 1188034 1188875 Cross-References: CVE-2021-36386 CVSS scores: CVE-2021-36386 NVD : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-36386 SUSE: 5.1...

CVE-2021-35529 Password in Memory Vulnerability in Retail Operations Product and Counterparty Settlement and Billing (CSB)

Insufficiently Protected Credentials vulnerability in client environment of Hitachi ABB Power Grids Retail Operations and Counterparty Settlement Billing CSB allows an attacker or unauthorized user to access database credentials, shut down the product and access or alter. This issue affects:...

CVE-2021-21781

An information disclosure vulnerability exists in the ARM SIGPAGE functionality of Linux Kernel v5.4.66 and v5.4.54. The latest version 5.11-rc4 seems to still be vulnerable. A userland application can read the contents of the sigpage, which can leak kernel memory contents. An attacker can read a...

Adobe Bridge Memory Out-of-Bounds Access Vulnerability (CNVD-2021-63269)

Adobe Bridge is a free digital asset management application from Adobe. 11.1 and earlier versions of Adobe Bridge contain a memory out-of-bounds access vulnerability. An attacker could exploit the vulnerability to execute arbitrary code...

Adobe Bridge Memory Out-of-Bounds Access Vulnerability (CNVD-2021-63266)

Adobe Bridge is a free digital asset management application from Adobe. 11.1 and earlier versions of Adobe Bridge contain a memory out-of-bounds access vulnerability. An attacker could exploit the vulnerability to execute arbitrary code...

Adobe Bridge Memory Out-of-Bounds Access Vulnerability (CNVD-2021-63272)

Adobe Bridge is a free digital asset management application from Adobe. 11.1 and earlier versions of Adobe Bridge contain a memory out-of-bounds access vulnerability. An attacker could exploit the vulnerability to cause a denial of service...

Adobe Bridge Memory Out-of-Bounds Access Vulnerability (CNVD-2021-63267)

Adobe Bridge is a free digital asset management application from Adobe. 11.1 and earlier versions of Adobe Bridge contain a memory out-of-bounds access vulnerability. An attacker could exploit the vulnerability to execute arbitrary code...