Swftools Null Pointer Dereference Vulnerability (CNVD-2022-62216)

Swftools is a set of utilities for working with Adobe Flash files SWF files. A null pointer dereference vulnerability exists in Swftools 2020-12-22 and earlier versions, which stems from the presence of a NULL pointer dereference in the function swfDeleteFilter located in swffilter.c. The...

CVE-2021-42202

An issue was discovered in swftools through 20201222. A NULL pointer dereference exists in the function swfDeleteFilter located in swffilter.c. It allows an attacker to cause Denial of Service...

CVE-2021-42202

An issue was discovered in swftools through 20201222. A NULL pointer dereference exists in the function swfDeleteFilter located in swffilter.c. It allows an attacker to cause Denial of Service...

CVE-2021-42198

An issue was discovered in swftools through 20201222. A NULL pointer dereference exists in the function swfGetBits located in rfxswf.c. It allows an attacker to cause Denial of Service...

UBUNTU-CVE-2021-42201

An issue was discovered in swftools through 20201222. A heap-buffer-overflow exists in the function swfGetD64 located in rfxswf.c. It allows an attacker to cause code execution...

UBUNTU-CVE-2021-42198

An issue was discovered in swftools through 20201222. A NULL pointer dereference exists in the function swfGetBits located in rfxswf.c. It allows an attacker to cause Denial of Service...

UBUNTU-CVE-2021-42204

An issue was discovered in swftools through 20201222. A heap-buffer-overflow exists in the function swfGetBits located in rfxswf.c. It allows an attacker to cause code execution...

UBUNTU-CVE-2021-42199

An issue was discovered in swftools through 20201222. A heap buffer overflow exists in the function swfFontExtractDefineTextCallback located in swftext.c. It allows an attacker to cause code execution...

Swftools 缓冲区错误漏洞

Swftools is a set of utilities for working with Adobe Flash files SWF files. An out-of-bounds write vulnerability exists in Swftools 2020-12-22 and prior versions, which stems from a heap buffer overflow in function swfFontExtractDefineTextCallback located in swftext.c. The vulnerability is cause...

Swftools 缓冲区错误漏洞

Swftools is a set of utilities for working with Adobe Flash files SWF files. An out-of-bounds write vulnerability exists in Swftools 2020-12-22 and prior versions, which stems from a heap buffer overflow in the function swfGetD64 located in rfxswf.c. The vulnerability is caused by a heap buffer...

GHSA-FF7R-7RRM-WX6W Magento 2 Community Edition XSS Vulnerability

A stored cross-site scripting vulnerability exists in the WYSIWYG editor of Magento Open Source prior to 1.9.4.2, and Magento Commerce prior to 1.14.4.2, Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. An authenticated user with privileges to the editor can...

Magento 2 Community Edition XSS Vulnerability

A stored cross-site scripting vulnerability exists in the WYSIWYG editor of Magento Open Source prior to 1.9.4.2, and Magento Commerce prior to 1.14.4.2, Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. An authenticated user with privileges to the editor can...

CVE-2018-6359

The decompileIF function util/decompile.c in libming through 0.4.8 is vulnerable to a use-after-free, which may allow attackers to cause a denial of service or unspecified other impact via a crafted SWF file...

GHSA-3JCQ-CWR7-6332 jplayer Cross Site Scripting vulnerability

Multiple cross-site scripting XSS vulnerabilities in actionscript/Jplayer.as in the Flash SWF component jplayer.swf in jPlayer before 2.3.0 allow remote attackers to inject arbitrary web script or HTML via the 1 jQuery or 2 id parameters, a different vulnerability than CVE-2013-1942 and...

jplayer Cross Site Scripting vulnerability

Multiple cross-site scripting XSS vulnerabilities in actionscript/Jplayer.as in the Flash SWF component jplayer.swf in jPlayer before 2.3.0 allow remote attackers to inject arbitrary web script or HTML via the 1 jQuery or 2 id parameters, a different vulnerability than CVE-2013-1942 and...

GHSA-633W-W2PF-X84R Apache OpenMeetings Cross-site Scripting vulnerability

Cross-site scripting XSS vulnerability in the SWF panel in Apache OpenMeetings before 3.1.2 allows remote attackers to inject arbitrary web script or HTML via the swf parameter...

Apache OpenMeetings Cross-site Scripting vulnerability

Cross-site scripting XSS vulnerability in the SWF panel in Apache OpenMeetings before 3.1.2 allows remote attackers to inject arbitrary web script or HTML via the swf parameter...

GHSA-64R3-582J-FRQM YUI Cross-site Scripting (XSS) vulnerability

Cross-site scripting XSS vulnerability in uploader.swf in the Uploader component in Yahoo! YUI 3.2.0 through 3.9.1, as used in Moodle through 2.1.10, 2.2.x before 2.2.11, 2.3.x before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.1, and other products, allows remote attackers to inject arbitrary we...

GHSA-2HW6-6RGF-726V Moodle XSS Vulnerability

Moodle through 2.6.11, 2.7.x before 2.7.11, 2.8.x before 2.8.9, and 2.9.x before 2.9.3 does not properly restrict the availability of Flowplayer, which allows remote attackers to conduct cross-site scripting XSS attacks via a crafted .swf file...

Moodle XSS Vulnerability

Moodle through 2.6.11, 2.7.x before 2.7.11, 2.8.x before 2.8.9, and 2.9.x before 2.9.3 does not properly restrict the availability of Flowplayer, which allows remote attackers to conduct cross-site scripting XSS attacks via a crafted .swf file...