Baza CVE

Przepełnienie całkowite w Photoshop Desktop umożliwia zdalne wykonanie kodu po otwarciu złośliwego pliku.

Błąd autoryzacji w Illustratorze umożliwia wykonanie dowolnego kodu po otwarciu złośliwego pliku.

Wykorzystanie luki w Photoshop Desktop umożliwia zdalne wykonanie kodu po otwarciu złośliwego pliku.

Brak sprawdzenia uprawnień w MicroXR Blobstore umożliwia dostęp do plików innych aplikacji.

A stack-based buffer overflow vulnerability exists in the httpd component of RE210 AC750 due to improper bounds checking in the splitString function when processing an uploaded…

Roo-Code through 3.54.0 contains an auto-approve bypass vulnerability in the shell command parsing logic that allows attackers to execute denied shell commands by exploiting the omission…

Błąd w Roo-Code umożliwia obejście auto-zatwierdzania i wykonanie zabronionych poleceń.

Code execution can occur in versions of the MLflow platform running version 0.0.1 or newer, enabling a maliciously crafted model artifact to execute arbitrary code on an end user's system…

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security…

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could leverage this vulnerability to gain elevated access to…

Błąd autoryzacji w Adobe Commerce umożliwia eskalację uprawnień i dostęp do wrażliwych danych.

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could leverage this vulnerability to gain elevated access to…

Błąd przejścia ścieżki w Adobe Commerce umożliwia dostęp do nieautoryzowanych plików.

Błąd autoryzacji w Adobe Commerce pozwala na obejście zabezpieczeń i nieautoryzowany dostęp.

Nieprawidłowa weryfikacja podpisu kryptograficznego w Skype for Business umożliwia spoofing.

Wykorzystanie uwierzytelniania po stronie klienta w Skype for Business umożliwia podszywanie się w sieci.

Niedobór całkowity w Skype for Business umożliwia atakującemu odmowę usługi w sieci.

Atak SSRF w Skype for Business umożliwia nieautoryzowanemu atakującemu ujawnienie informacji w sieci.

In kvm_iommu_map_sg of iommu.c, there is a possible use after free due to a missing permission check. This could lead to local escalation of privilege with no additional execution…

In multiple functions of alloc.c, there is a possible unauthorized read/write access due to a race condition. This could lead to local escalation of privilege with no additional execution…

In multiple functions of SmsController.java, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with no…

In multiple functions of iommu.c, there is a possible out of bounds read/write due to improper input validation. This could lead to local escalation of privilege with no additional…

In multiple locations, there is a possible memory safety issue due to integer overflow. This could lead to local escalation of privilege with no additional execution privileges required.

In stpropnci_process_std of stpropnci_std.cc, there is a possible memory safety issue due to a missing bounds check. This could lead to local escalation of privilege with no additional…

In forEachLine of MountRegistry.cpp, there is a possible out of bounds read due to a buffer overflow. This could lead to local escalation of privilege with no additional execution…