106,755 results · Clear filters · Feed
-
Medium 5.9
CAI Content Credentials is affected by a Use of a Broken or Risky Cryptographic Algorithm vulnerability that could resu…
-
Medium 5.9
CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that could res…
-
Medium 5.9
CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that could res…
-
Medium 5.5
CAI Content Credentials is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'…
-
Medium 4.0
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security featu…
-
Medium 4.0
CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to applicatio…
-
Medium 4.2
Action Pack: Possible restoration of destroyed sessions in Action Dispatch CacheStore
Action Pack is a framework for handling and responding to web requests. Prior to 8.1.4.1 and 8.0.5.2, ActionDispatch::Session::CacheStore writes a session back to the cache at the end of each request that loaded it, without checking that the session's cache e…
-
Medium 5.3
Active Storage: Possible circumvention of file size limits in Active Storage direct uploads to Google Cloud Storage
Active Storage makes it simple to upload and reference files in cloud services and attach those files to Active Record objects. Prior to 8.1.4.1 and 8.0.5.2, ActiveStorage::Service::GCSService#url_for_direct_upload does not bind the declared content length in…
-
Medium 4.7
Active Storage makes it simple to upload and reference files in cloud services and attach those files to Active Record …
-
Medium 6.1
Action View is a framework for handling view template lookup and rendering and provides view helpers for building HTML.…
-
Medium 6.1
Action View: Possible XSS vulnerability in Action View highlight helper
Action View is a framework for handling view template lookup and rendering and provides view helpers for building HTML. Prior to 8.1.4.1 and 8.0.5.2, ActionView::Helpers::TextHelper#highlight substitutes each matched phrase into the :highlighter string withou…
-
Medium 6.8
Action Pack: Possible sensitive session information leak in Active Storage proxy mode
Action Pack is a framework for handling and responding to web requests. Prior to 8.1.4.1 and 8.0.5.2, When ActionDispatch::Cookies reads a signed or encrypted cookie that was written under a rotated secret (config.action_dispatch.cookies_rotations) or in the …
-
Medium 5.5
Photoshop Desktop | NULL Pointer Dereference (CWE-476)
Photoshop Desktop is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of t…
-
Medium 5.5
Photoshop Desktop | Out-of-bounds Read (CWE-125)
Photoshop Desktop is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in th…
-
Medium 5.5
Photoshop Desktop | Uncontrolled Recursion (CWE-674)
Photoshop Desktop is affected by an Uncontrolled Recursion vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of th…
-
Medium 5.5
Photoshop Desktop | Divide By Zero (CWE-369)
Photoshop Desktop is affected by a Divide By Zero vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue …
-
Medium 5.5
Photoshop Desktop | NULL Pointer Dereference (CWE-476)
Photoshop Desktop is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of t…
-
Medium 5.5
Photoshop Desktop | Out-of-bounds Read (CWE-125)
Photoshop Desktop is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in th…
-
Medium 5.5
Photoshop Desktop | Out-of-bounds Read (CWE-125)
Photoshop Desktop is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in th…
-
Medium 5.5
Photoshop Desktop | NULL Pointer Dereference (CWE-476)
Photoshop Desktop is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of t…
-
Medium 5.5
Audition | NULL Pointer Dereference (CWE-476)
Audition is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue…
-
Medium 5.9
Action Pack: Possible DoS vulnerability in Action Controller Live streaming
Action Pack is a framework for handling and responding to web requests. Prior to 8.1.4.1 and 8.0.5.2, ActionController::Live::Buffer#close pushes its end-of-stream marker onto the response's bounded queue while it holds the buffer's monitor. When the client h…
-
Medium 5.5
Media Encoder | NULL Pointer Dereference (CWE-476)
Media Encoder is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this …
-
Medium 6.1
Action View: Possible XSS vulnerability in Action View strip_tags
Action View is a framework for handling view template lookup and rendering and provides view helpers for building HTML. Prior to 8.1.4.1 and 8.0.5.2, strip_tags in Action View returns its sanitized output marked html_safe, but the underlying sanitizer encodes…
-
Medium 4.7
Action View is a framework for handling view template lookup and rendering and provides view helpers for building HTML.…
-
Medium 5.5
After Effects is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-ser…
-
Medium 5.5
After Effects | Out-of-bounds Read (CWE-125)
After Effects is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a…
-
Medium 5.5
After Effects | Out-of-bounds Read (CWE-125)
After Effects is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a…
-
Medium 5.5
Premiere Pro | NULL Pointer Dereference (CWE-476)
Premiere Pro is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this i…
-
Medium 6.7
Premiere Pro | Buffer Overflow (CWE-120)
Premiere Pro is affected by a Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploit depends on conditions b…
-
Medium 5.3
A memory-management flaw in the server-side JavaScript execution component of MongoDB Server can allow an authenticated…
-
Medium 5.3
MongoDB Server maintains an in-memory table of per-namespace statistics for operations that carry encrypted-field infor…
-
Medium 6.0
An issue in MongoDB Server's query processing component allows an authenticated user with read privileges to cause a de…
-
Medium 5.9
A improper authentication vulnerability in Fortinet FortiOS 7.6.0 through 7.6.6 may allow a remote authenticated attack…
-
Medium 6.0
A use-after-free issue exists in the MongoDB server’s classic query engine plan cache. Under certain query conditions, …
-
Medium 6.1
On affected Arista EOS platforms with Routing Information Protocol version 2 (RIPv2) configured, under certain conditio…
-
Medium 6.7
On affected platforms running Arista EOS under specific link configurations an attacker with direct connectivity to the…
-
Medium 6.9
On affected platforms running Arista EOS with a S-BFD reflector proxy configured, an unauthenticated attacker could sen…
-
Medium 6.9
On affected EOS-based platforms, an attacker who controls a Border Gateway Protocol (BGP) peer can send a crafted BGP m…
-
Medium 6.1
An unauthenticated attacker on an adjacent network segment can bypass MD5 authentication and have unauthorized RIP rout…