MartFury Marketplace – Cross Site Scripting Vulnerability
Posted by info () vulnerability-lab com on Feb 18 Document Title: =============== MartFury Marketplace - Cross Site Scripting Vulnerability References (Source): ==================== https://www.vulnerability-lab.com/get_content.php?id=2282 Release Date:...
Vicidial v2.14-783a – (DB) SQL Injection Web Vulnerability
Posted by info () vulnerability-lab com on Feb 18 Document Title: =============== Vicidial v2.14-783a - (DB) SQL Injection Web Vulnerability References (Source): ==================== https://www.vulnerability-lab.com/get_content.php?id=2312 Release...
WordPress v5.9 – Reflected Cross Site Scripting Web Vulnerability
Posted by info () vulnerability-lab com on Feb 18 Document Title: =============== Wordpress v5.9 - Reflected Cross Site Scripting Web Vulnerability References (Source): ==================== https://www.vulnerability-lab.com/get_content.php?id=2316...
Car Portal Template – (Search) Persistent Web Vulnerability
Posted by info () vulnerability-lab com on Feb 18 Document Title: =============== Car Portal Template - (Search) Persistent Web Vulnerability References (Source): ==================== https://www.vulnerability-lab.com/get_content.php?id=2299 Release...
Multiple Vulnerabilities in Adobe Commerce and Magento Could Allow for Remote Code Execution
Multiple vulnerabilities have been discovered in Adobe Commerce and Magento Open Source, the most severe of which could allow for remote code execution. Adobe Commerce...
CVE-2020-8107
A Process Control vulnerability in ProductAgentUI.exe as used in Bitdefender Antivirus Plus allows an attacker to tamper with product settings via a specially crafted DLL...
ZDI-22-386: Parallels Desktop HDAudio Buffer Overflow Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop. An attacker must first obtain the ability to execute high-privileged code...
ZDI-22-385: Parallels Desktop Service Time-Of-Check Time-Of-Use Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop. An attacker must first obtain the ability to execute low-privileged code...
ZDI-22-384: Microsoft Office Visio EMF EMR_DELETEOBJECT Use-After-Free Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Office Visio. User interaction is required to exploit this vulnerability in...
ZDI-22-383: Microsoft Office Excel XLS File Parsing Untrusted Pointer Dereference Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Microsoft Office Excel. User interaction is required to exploit this vulnerability in...