CVE-2020-6334

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated SKP file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

CVE-2020-6334

CVE-2020-6334 concerns SAP 3D Visual Enterprise Viewer (v9) where parsing of SKP files can trigger a use-after-free in a sandbox subprocess, allowing remote code execution. The vulnerability occurs when the software processes a manipulated SKP file from untrusted sources, with exploit requiring u...

CVE-2020-6335

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated HPGL file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

CVE-2020-6335

SAP 3D Visual Enterprise Viewer 9 contains a vulnerability in the hpgl plugin that parses HPGL files. The issue arises from improper input validation leading to a write past the end of an allocated buffer (out-of-bounds write), enabling arbitrary code execution in the context of the affected proc...

Binary Vulnerability in Shenzhen Xunlei.com Culture Co.

Light Viewer is a professional image viewing software. Shenzhen Xunlei.com Culture Co., Ltd LightShadow Viewer has a binary vulnerability that can be exploited by attackers to cause a denial of service...

Binary Vulnerability in Shenzhen Xunlei.com Culture Co. Light and Shadow Viewing (CNVD-2020-58859)

Light Viewer is a professional image viewing software. Shenzhen Xunlei.com Culture Co., Ltd LightShadow Viewer has a binary vulnerability that can be exploited by attackers to cause a denial of service...

Binary Vulnerability in Shenzhen Xunlei.com Culture Co. Light and Shadow Viewing (CNVD-2020-58858)

Light Viewer is a professional image viewing software. Shenzhen Xunlei.com Culture Co., Ltd LightShadow Viewer has a binary vulnerability that can be exploited by attackers to cause a denial of service...

Binary Vulnerability in Shenzhen Xunlei.com Culture Co. Light and Shadow Viewing (CNVD-2020-58860)

Light Viewer is a professional image viewing software. Shenzhen Xunlei.com Culture Co., Ltd LightShadow Viewer has a binary vulnerability that can be exploited by attackers to cause a denial of service...

GHSA-V9WP-8R97-V6XG Cross-Site Scripting in jquery.json-viewer

Versions of jquery.json-viewer prior to 1.3.0 are vulnerable to Cross-Site Scripting XSS. The package insufficiently sanitizes user input when creating links, and concatenates the user input in an tag. This allows attackers to create malicious links with JSON payloads such as: "foo":...

Ignite Realtime Openfire Cross-Site Scripting Vulnerability (CNVD-2020-50966)

Ignite Realtime Openfire is a real-time collaboration RTC server licensed under the open source Apache license. A cross-site scripting vulnerability exists in Ignite Realtime Openfire 4.5.1, which can be exploited by an attacker via the "searchName", "searchValue", " searchDescription",...

Ignite Realtime Openfire Cross-Site Scripting Vulnerability (CNVD-2020-50967)

Ignite Realtime Openfire is a real-time collaboration RTC server licensed under the open source Apache license. Ignite Realtime Openfire 4.5.1 suffers from a cross-site scripting vulnerability that can be exploited by an attacker via "searchName", "searchValue", " searchDescription",...

CVE-2020-24602

Ignite Realtime Openfire 4.5.1 has a reflected Cross-site scripting vulnerability which allows an attacker to execute arbitrary malicious URL via the vulnerable GET parameter searchName", "searchValue", "searchDescription", "searchDefaultValue","searchPlugin", "searchDescription" and...

CVE-2020-24602

Ignite Realtime Openfire 4.5.1 has a reflected Cross-site scripting vulnerability which allows an attacker to execute arbitrary malicious URL via the vulnerable GET parameter searchName", "searchValue", "searchDescription", "searchDefaultValue","searchPlugin", "searchDescription" and...

CVE-2020-24604

A Reflected XSS vulnerability was discovered in Ignite Realtime Openfire version 4.5.1. The XSS vulnerability allows remote attackers to inject arbitrary web script or HTML via the GET request "searchName", "searchValue", "searchDescription", "searchDefaultValue","searchPlugin", "searchDescriptio...

Cross site scripting

Ignite Realtime Openfire 4.5.1 has a reflected Cross-site scripting vulnerability which allows an attacker to execute arbitrary malicious URL via the vulnerable GET parameter searchName", "searchValue", "searchDescription", "searchDefaultValue","searchPlugin", "searchDescription" and...

CVE-2020-24604

A Reflected XSS vulnerability was discovered in Ignite Realtime Openfire version 4.5.1. The XSS vulnerability allows remote attackers to inject arbitrary web script or HTML via the GET request "searchName", "searchValue", "searchDescription", "searchDefaultValue","searchPlugin", "searchDescriptio...

CVE-2020-24602

Ignite Realtime Openfire 4.5.1 has a reflected Cross-site scripting vulnerability which allows an attacker to execute arbitrary malicious URL via the vulnerable GET parameter searchName", "searchValue", "searchDescription", "searchDefaultValue","searchPlugin", "searchDescription" and...

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to the issue of operations occurring outside the buffer in memory. This allows attackers to gain unauthorized access to protected information.

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat and Document Cloud, are related to the execution of operations beyond the buffer boundaries in memory. Exploiting these vulnerabilities can allow unauthorized...

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to the issue of operations occurring outside the buffer in memory. This allows attackers to gain unauthorized access to protected information.

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat and Document Cloud, are related to the execution of operations beyond the buffer boundaries in memory. Exploiting these vulnerabilities can allow unauthorized...

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to memory usage after it is freed. This allows attackers to execute arbitrary code.

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to the use of memory after it is freed. Exploiting these vulnerabilities can allow an attacker to execute arbitrary...