1591 matches found
SUSE CVE-2019-10182
It was found that icedtea-web though 1.7.2 and 1.8.2 did not properly sanitize paths from elements in JNLP files. An attacker could trick a victim into running a specially crafted application and use this flaw to upload arbitrary files to arbitrary locations in the context of the user...
Adobe After Effects 输入验证错误漏洞
Adobe After Effects is a suite of visual effects and motion graphics software from Adobe. Adobe After Effects is vulnerable to an input validation error, which could be exploited to execute arbitrary code in the context of the current user...
Adobe Animate 缓冲区错误漏洞
Adobe Animate is a Flash animation software from Adobe. Adobe Animate is vulnerable to a stack buffer overflow vulnerability that could be exploited to execute arbitrary code in the context of the current user...
Adobe FrameMaker 输入验证错误漏洞
Adobe Framemaker is a set of page layout software for writing and editing large or complex documents including structured documents from Adobe. Adobe FrameMaker has an input validation error vulnerability that could be exploited by an attacker to execute arbitrary code in the context of the curre...
Adobe Bridge 缓冲区错误漏洞
Adobe Bridge is a file viewer from Adobe. Adobe Bridge is vulnerable to a stack buffer overflow vulnerability that could be exploited to execute arbitrary code in the context of the current user...
Adobe Photoshop 输入验证错误漏洞
Adobe Photoshop is a set of image processing software from the American company Audobee Adobe. The software is mainly used for processing pictures. Adobe Photoshop suffers from an input validation error vulnerability that originates from improper user input validation and can be exploited by an...
CVE-2023-22237
After Affects versions 23.1 and earlier, 22.6.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
Adobe Acrobat Reader 缓冲区错误漏洞
Adobe Acrobat Reader is a PDF viewer from the American company Audobee Adobe. The software is used to print, sign and annotate PDF. Adobe Acrobat Reader has an out-of-bounds write vulnerability that can be exploited by an attacker to execute arbitrary code in the context of the current user...
Adobe Acrobat Reader 输入验证错误漏洞
Adobe Acrobat Reader is the United States of America Audobee Adobe, a PDF viewer. An input validation error vulnerability exists in Adobe Acrobat and Reader, which can be exploited by an attacker to execute arbitrary code in the context of the current user...
Adobe Acrobat Reader 安全漏洞
Adobe Acrobat Reader is the United States of America Audobee Adobe, a PDF viewer. A buffer overflow vulnerability exists in Adobe Acrobat and Reader, which can be exploited by an attacker to execute arbitrary code in the context of the current user...
Adobe Acrobat Reader 安全漏洞
Adobe Acrobat Reader is the United States of America Audobee Adobe, a PDF viewer. A buffer overflow vulnerability exists in Adobe Acrobat and Reader, which can be exploited by an attacker to execute arbitrary code in the context of the current user...
Adobe InCopy Input Validation Error Vulnerability
Adobe InCopy is a text editing software for authoring from Adobe. Adobe InCopy is vulnerable to an input validation error, which can be exploited by attackers to execute arbitrary code in the context of the current user...
Adobe InDesign 缓冲区错误漏洞
Adobe InDesign is a set of typesetting and editing applications from Adobe. Adobe InDesign suffers from a buffer overflow vulnerability that stems from an out-of-bounds write vulnerability that could lead to the execution of arbitrary code in the context of the current user. No detailed...
Adobe InDesign 安全漏洞
Adobe InDesign is a set of typesetting and editing applications from Adobe. Adobe InDesign has a security vulnerability that stems from a heap-based buffer overflow vulnerability that could lead to the execution of arbitrary code in the context of the current user. No details of the vulnerability...
Adobe InCopy 缓冲区错误漏洞
Adobe InCopy is a text editing software for authoring from Adobe, Inc. An out-of-bounds write vulnerability exists in Adobe InCopy, which can be exploited by attackers to execute arbitrary code in the context of the current user...
Default credentials
authentik is an open-source Identity provider focused on flexibility and versatility. In versions prior to 2022.10.4, and 2022.11.4, any authenticated user can create an arbitrary number of accounts through the default flows. This would circumvent any policy in a situation where it is undesirable...
The vulnerability of Adobe Experience Manager’s content and media data management system, which stems from the lack of measures taken to protect the website structure, allows attackers to perform cross-site scripting attacks.
The vulnerability of Adobe Experience Manager’s content and media data management system exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using a specially created link...
The vulnerability of Adobe Experience Manager’s content and media data management system, which stems from the lack of measures taken to protect the website structure, allows attackers to perform cross-site scripting attacks.
The vulnerability of Adobe Experience Manager’s content and media data management system exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using a specially created link...
The vulnerability of Adobe Experience Manager’s content and media data management system, which stems from the lack of measures taken to protect the website structure, allows attackers to perform cross-site scripting attacks.
The vulnerability of Adobe Experience Manager’s content and media data management system exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using a specially created link...
The vulnerability of Adobe Experience Manager’s content and media data management system, which stems from the lack of measures taken to protect the website structure, allows attackers to perform cross-site scripting attacks.
The vulnerability of Adobe Experience Manager’s content and media data management system exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using a specially created link...