Archive
16 November 2021
Vulnerabilities first published on this day (UTC), newest first.
49 results · Feed
-
High 7.8
Adobe Prelude M4A file memory corruption vulnerability could lead to remote code execution
Adobe Prelude version 10.1 (and earlier) are affected by a memory corruption vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requir…
-
High 7.8
Adobe Prelude M4A file memory corruption vulnerability could lead to remote code execution
Adobe Prelude version 10.1 (and earlier) are affected by a memory corruption vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requir…
-
High 7.8
Adobe Bridge Memory Corruption could lead to Arbitrary code execution
Adobe Bridge version 11.1.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious M4A file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to …
-
High 7.8
Adobe Indesign Buffer Overflow Could Lead to Remote Code Execution
Adobe InDesign versions 16.4 (and earlier) are affected by a Buffer Overflow vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current u…
-
High 7.8
Adobe Bridge Out-of-bounds read could lead to Arbitrary Code Execution
Adobe Bridge version 11.1.1 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted SGI file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute …
-
High 7.8
Adobe Bridge Use After Free could lead to Arbitrary code execution
Acrobat Bridge versions 11.1.1 and earlier are affected by a use-after-free vulnerability in the processing of Format event actions that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user inte…
-
High 7.8
Adobe Media Encoder memory corruption vulnerability could lead to remote code execution
Adobe Media Encoder version 15.4.1 (and earlier) are affected by a memory corruption vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issu…
-
High 7.8
Adobe Bridge Memory Corruption could lead to Arbitrary code execution
Adobe Bridge version 11.1.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious M4A file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to …
-
Unscored —
Insufficient DRAM address validation in System Management Unit (SMU) may result in a DMA read from invalid DRAM address…
-
Unscored —
Insufficient input validation in the SNP_GUEST_REQUEST command may lead to a potential data abort error and a denial of…
-
Unscored —
AMD System Management Unit (SMU) may experience a heap-based overflow which may result in a loss of resources.
-
Unscored —
Insufficient validation of guest context in the SNP Firmware could lead to a potential loss of guest confidentiality.
-
Unscored —
Insufficient validation of BIOS image length by ASP Firmware could lead to arbitrary code execution.
-
Unscored —
Failure to validate SEV Commands while SNP is active may result in a potential impact to memory integrity.
-
Unscored —
A potential vulnerability exists in AMD Platform Security Processor (PSP) that may allow an attacker to zero any privil…
-
Unscored —
When the AMD Platform Security Processor (PSP) boot rom loads, authenticates, and subsequently decrypts an encrypted FW…
-
Unscored —
A side effect of an integrated chipset option may be able to be used by an attacker to bypass SPI ROM protections, allo…
-
Unscored —
AMD System Management Unit (SMU) contains a potential issue where a malicious user may be able to manipulate mailbox en…
-
Unscored —
Improper input and range checking in the AMD Secure Processor (ASP) boot loader image header may allow an attacker to u…
-
Unscored —
Insufficient ID command validation in the SEV Firmware may allow a local authenticated attacker to perform a denial of …
-
Unscored —
Ruijie RG-UAC commit 9071227 was discovered to contain a vulnerability in the component /current_action.php?action=rebo…
-
Unscored —
Ruijie RG-UAC 6000-E50 commit 9071227 was discovered to contain a cross-site scripting (XSS) vulnerability via the rule…
-
Unscored —
Race condition in ASP firmware could allow less privileged x86 code to perform ASP SMM (System Management Mode) operati…
-
High 7.3
Cross-site scripting (XSS) from image block content in the site frontend
Kirby is an open source file structured CMS. In affected versions Kirby's blocks field stores structured data for each block. This data is then used in block snippets to convert the blocks to HTML for use in your templates. We recommend to escape HTML special…
-
High 7.3
Cross-site scripting (XSS) from writer field content in the site frontend
Kirby is an open source file structured CMS ### Impact Kirby's writer field stores its formatted content as HTML code. Unlike with other field types, it is not possible to escape HTML special characters against cross-site scripting (XSS) attacks, otherwise th…
-
Unscored —
Insufficient validation of the AMD SEV Signing Key (ASK) in the SEND_START command in the SEV Firmware may allow a loca…
-
Unscored —
Insufficient bounds checking in System Management Unit (SMU) may cause invalid memory accesses/updates that could resul…
-
Unscored —
Insufficient input validation in ASP firmware for discrete TPM commands could allow a potential loss of integrity and d…
-
Unscored —
Persistent platform private key may not be protected with a random IV leading to a potential “two time pad attack”.
-
Unscored —
AMD System Management Unit (SMU) may experience an integer overflow when an invalid length is provided which may result…
-
Unscored —
Failure to flush the Translation Lookaside Buffer (TLB) of the I/O memory management unit (IOMMU) may lead an IO device…
-
Unscored —
Improper access controls in System Management Unit (SMU) may allow for an attacker to override performance control tabl…
-
Unscored —
Failure to validate VM_HSAVE_PA during SNP_INIT may result in a loss of memory integrity.
-
Critical 9.8
TIBCO PartnerExpress Click-Jacking vulnerability
The Interior Server and Gateway Server components of TIBCO Software Inc.'s TIBCO PartnerExpress contain a vulnerability that theoretically allows an unauthenticated attacker with network access to execute a clickjacking attack on the affected system. A succes…
-
Critical 9.0
TIBCO PartnerExpress Cross Site Scripting vulnerabilities
The Interior Server and Gateway Server components of TIBCO Software Inc.'s TIBCO PartnerExpress contain easily exploitable Stored and Reflected Cross Site Scripting (XSS) vulnerabilities that allow a low privileged attacker to social engineer a legitimate use…
-
High 7.5
TIBCO PartnerExpress Session Token in URL
The Interior Server and Gateway Server components of TIBCO Software Inc.'s TIBCO PartnerExpress contain an easily exploitable vulnerability that allows an unauthenticated attacker with network access to obtain session tokens for the affected system. A success…
-
Medium 6.2
IBM MQ 7.5, 8.0, 9.0 LTS, 9.1 CD, and 9.1 LTS stores user credentials in plain clear text which can be read by a local …
-
Medium 4.4
IBM Spectrum Scale 5.1.0 through 5.1.1.1 could allow a privileged admin to destroy filesystem audit logging records bef…
-
Critical 9.8CVE-2021-3958 EPSS 15%
SQL Injection Vulnerability in Ipack SCADA Software
Improper Handling of Parameters vulnerability in Ipack Automation Systems Ipack SCADA Software allows : Blind SQL Injection.This issue affects Ipack SCADA Software: from unspecified before 1.1.0.
-
Critical 9.0
Scalable Rowhammering In the Frequency Domain to Bypass TRR Mitigations On Modern DDR4/LPDDR4X Devices
Modern DRAM devices (PC-DDR4, LPDDR4X) are affected by a vulnerability in their internal Target Row Refresh (TRR) mitigation against Rowhammer attacks. Novel non-uniform Rowhammer access patterns, consisting of aggressors with different frequencies, phases, a…