The vulnerability of the WPC component of the SAP NetWeaver Enterprise Portal software integration platform allows a perpetrator to carry out a cross-site scripting attack.

The vulnerability of the WPC component in the SAP NetWeaver Enterprise Portal software integration platform SAP NW EP is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability could allow a malicious actor to perform a cross-site scripting...

The vulnerability of the Zabbix Frontend universal monitoring system, related to the lack of protective measures for the web page structure, allows attackers to perform cross-site scripting attacks.

The vulnerability of the Zabbix Frontend monitoring system lies in the lack of protection for the web page structure when processing the backurl parameter. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using a specially created malicious link...

The vulnerability of the SAP Enterprise Portal software integration platform lies in its lack of protection for website structures, allowing attackers to view, add, modify, or delete data.

The vulnerability of the SAP Enterprise Portal software integration platform is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to remotely view, add, modify, or delete data...

The vulnerability of the SAP NetWeaver Enterprise Portal software integration platform lies in the lack of security measures for the website structure, allowing attackers to view, add, modify, or delete data.

The vulnerability of the SAP NetWeaver Enterprise Portal software integration platform is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to remotely view, add, modify, or delete data...

The vulnerability of the Create-ProjectManager software management system lies in the lack of protective measures for website structures. This allows attackers to carry out XSS attacks.

The vulnerability of the Create-ProjectManager project management software exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks...

PT-2022-34660 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.143 Description: The issue is related to a potential security problem in the Linux Kernel, where it is assumed that a certain data structure, referred to as skb, remains available after being added to a...

PT-2022-34634 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.68 Description: The issue is related to a potential security problem in the Linux Kernel, where it is assumed that a certain data structure, referred to as skb, remains available after it has been added to...

EC-CUBE Directory traversal vulnerability

Directory traversal vulnerability in EC-CUBE 3 series EC-CUBE 3.0.0 to 3.0.18-p4 and EC-CUBE 4 series EC-CUBE 4.0.0 to 4.1.2 allows a remote authenticated attacker with an administrative privilege to obtain the product's directory structure information...

FreeBSD : squid -- Exposure of sensitive information in cache manager (f9ada0b5-3d80-11ed-9330-080027f5fec9)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the f9ada0b5-3d80-11ed-9330-080027f5fec9 advisory. - Mikhail Evdokimov aka konata reports: Due to inconsistent handling of internal URIs Squid is vulnerab...

Adobe InDesign 16.x < 16.4.3 / 17.x < 17.4 Multiple Vulnerabilities (APSB22-50)

The version of Adobe InDesign installed on the remote host is prior to 16.4.3. It is, therefore, affected by multiple vulnerabilities, as follows: - An out-of-bounds write vulnerability allows arbitrary code execution in the context of the current user. Exploitation of this issue requires user...

Apple macOS TIFF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS. Interaction with the CoreGraphics framework is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within...

CVE-2022-35705

Adobe Bridge version 12.0.2 and earlier and 11.1.3 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context ...

Design/Logic Flaw

Adobe Bridge version 12.0.2 and earlier and 11.1.3 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context ...

CVE-2022-35702

CVE-2022-35702 affects Adobe Bridge 12.0.2 and earlier and 11.1.3 and earlier. It is an out-of-bounds read vulnerability in the file parser that could allow arbitrary code execution in the context of the current user; exploitation requires the user to open a crafted file. Remediation: apply updat...

CVE-2022-35703 Adobe Bridge SVG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

Adobe Bridge version 12.0.2 and earlier and 11.1.3 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context ...

CVE-2022-35705 Adobe Bridge MP4 File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

Adobe Bridge version 12.0.2 and earlier and 11.1.3 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context ...

Adobe Animate Buffer Overflow Vulnerability (CNVD-2023-54550)

Adobe Animate is a multimedia creation and computer animation program developed by Adobe for designing vector graphics and animations. Adobe Animate has a security vulnerability and is affected by an out-of-bounds read vulnerability when parsing carefully crafted files, which could result in...

CVE-2022-38429

Adobe Photoshop versions 22.5.8 and earlier and 23.4.2 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the...

Design/Logic Flaw

Adobe Photoshop versions 22.5.8 and earlier and 23.4.2 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the...

Design/Logic Flaw

Adobe InDesign versions 16.4.2 and earlier and 17.3 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context...