Lucene search
+L

1134 matches found

Vulnrichment
Vulnrichment
added 2021/08/20 6:10 p.m.8 views

CVE-2021-36006 Adobe Photoshop MP4 File Parsing Uninitialized Variable Information Disclosure Vulnerability

Adobe Photoshop versions 21.2.9 and earlier and 22.4.2 and earlier are affected by an Improper input validation vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to disclose arbitrary memory information in the context of the current...

3.3CVSS6.4AI score0.01752EPSS
SaveExploits0References1
CVE
CVE
added 2021/08/20 6:10 p.m.70 views

CVE-2021-36007

Adobe Prelude (10.0 and earlier) is affected by an information-disclosure issue caused by an uninitialized variable during MP4 file parsing. An unauthenticated attacker could disclose memory contents in the context of the current user, and exploitation requires the user to open a malicious file o...

6.8CVSS3.7AI score0.01475EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/08/20 6:10 p.m.32 views

CVE-2021-36007 Adobe Prelude MP4 File Parsing Uninitialized Variable Information Disclosure Vulnerability

Adobe Prelude version 10.0 and earlier are affected by an uninitialized variable vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to disclose arbitrary memory information in the context of the current user. Exploitation of this iss...

3.3CVSS4.7AI score0.01475EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2021/08/20 6:10 p.m.11 views

CVE-2021-36007 Adobe Prelude MP4 File Parsing Uninitialized Variable Information Disclosure Vulnerability

Adobe Prelude version 10.0 and earlier are affected by an uninitialized variable vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to disclose arbitrary memory information in the context of the current user. Exploitation of this iss...

3.3CVSS6.4AI score0.01475EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2021/08/09 12:0 a.m.37 views

EulerOS 2.0 SP8 : libwebp (EulerOS-SA-2021-2305)

According to the versions of the libwebp package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in libwebp in versions before 1.0.1. An out-of-bounds read was found in function ShiftBytes. The highest threat from this...

9.8CVSS7.2AI score0.0223EPSS
SaveExploits0References4
Zero Day Initiative
Zero Day Initiative
added 2021/07/28 12:0 a.m.47 views

Adobe Media Encoder MP4 File Parsing Uninitialized Variable Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Media Encoder. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS4.1AI score0.01865EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/07/28 12:0 a.m.51 views

Adobe Photoshop MP4 File Parsing Uninitialized Variable Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Photoshop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

3.3CVSS3.7AI score0.01752EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/07/28 12:0 a.m.49 views

Adobe After Effects MP4 File Parsing Uninitialized Variable Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe After Effects. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS4AI score0.01768EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/07/15 12:0 a.m.61 views

Adobe Bridge MP4 File Parsing Uninitialized Variable Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Bridge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...

3.3CVSS4.1AI score0.01805EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2021/07/02 12:0 a.m.49 views

EulerOS Virtualization for ARM 64 3.0.2.0 : libwebp (EulerOS-SA-2021-2104)

According to the versions of the libwebp package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - A flaw was found in libwebp. An out-of-bounds read was found in function ChunkAssignData. The highest threat from this...

9.8CVSS7.5AI score0.02662EPSS
SaveExploits0References9
BDU FSTEC
BDU FSTEC
added 2021/06/18 12:0 a.m.7 views

The vulnerability of the libwebp library lies in its ability to encode and decode WebP images, which involves the use of an uninitialized variable. This allows attackers to execute arbitrary code.

The vulnerability of the libwebp library for encoding and decoding WebP images is related to the use of an uninitialized variable. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

10CVSS8.1AI score0.0223EPSS
SaveExploits0References13Affected Software5
Veracode
Veracode
added 2021/06/11 10:54 a.m.24 views

Denial Of Service (DoS)

qt5-qtimageformats is vulnerable to denial of service. An unitialized variable is used in function ReadSymbol. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

9.8CVSS2.3AI score0.0223EPSS
SaveExploits0References11Affected Software2
Tenable Nessus
Tenable Nessus
added 2021/06/10 12:0 a.m.34 views

SUSE SLES11 Security Update : php53 (SUSE-SU-2019:14158-1)

The remote SUSE Linux SLES11 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2019:14158-1 advisory. - When using the gdImageCreateFromXbm function in the GD Graphics Library aka LibGD 2.2.5, as used in the PHP GD extension in PHP versions 7.1...

7.1CVSS6AI score0.0442EPSS
SaveExploits3References10
RedHat Linux
RedHat Linux
added 2021/06/08 10:42 p.m.8 views

libwebp: use of uninitialized value in ReadSymbol()

A flaw was found in libwebp. An unitialized variable is used in function ReadSymbol. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

9.8CVSS7.3AI score0.0223EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2021/05/04 8:21 p.m.47 views

CVE-2018-25014

A flaw was found in libwebp. An unitialized variable is used in function ReadSymbol. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

9.8CVSS1.8AI score0.0223EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2021/04/16 12:0 a.m.24 views

openSUSE: Security Advisory for connman (openSUSE-SU-2021:0416-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

8.8CVSS7.6AI score0.01301EPSS
SaveExploits0References2
Code423n4
Code423n4
added 2021/04/04 12:0 a.m.7 views

lastUpdatedDay not initialized

Email address [email protected] Handle gpersoon Eth address gpersoon.eth Vulnerability details The variable lastUpdatedDay in IncentiveDistribution.sol is not properly initialized. This means the function updateDayTotals will end up in a very large loop which will lead to an out of gas error. Eve...

6.9AI score
SaveExploits0
VulnCheck KEV
VulnCheck KEV
added 2021/01/21 12:0 a.m.5 views

VulnCheck KEV: CVE-2018-8627

An information disclosure vulnerability exists when Microsoft Excel software reads out of bound memory due to an uninitialized variable, which could disclose the contents of memory, aka "Microsoft Excel Information Disclosure Vulnerability." This affects Microsoft Office, Office 365 ProPlus,...

5.5CVSS6.7AI score0.08185EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2020/12/01 12:0 a.m.15 views

Debian: Security Advisory (DLA-2473-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.3CVSS6.1AI score0.0198EPSS
SaveExploits1References4
OSV
OSV
added 2020/11/20 7:15 p.m.19 views

CVE-2020-20739

imvips2dz in /libvips/libvips/deprecated/imvips2dz.c in libvips before 8.8.2 has an uninitialized variable which may cause the leakage of remote server path or stack address...

5.3CVSS6.8AI score
SaveExploits0References4
Rows per page
Query Builder