CVSS: 9.3EPSS: 1%CPEs: 2EXPL: 0CVE-2021-36079 – Adobe Bridge SGI File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2021-36079
18 Aug 2021 — Adobe Bridge version 11.1 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted .SGI file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Adobe Bridge versiones 11.1 (y anteriores), está afectada por una vulnerabilidad de lectura fuera de límites cuando... • https://helpx.adobe.com/security/products/bridge/apsb21-69.html • CWE-125: Out-of-bounds Read •
CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0CVE-2019-20781
https://notcve.org/view.php?id=CVE-2019-20781
29 Apr 2020 — An issue was discovered in LG Bridge before April 2019 on Windows. DLL Hijacking can occur. Se detectó un problema en LG Bridge antes de Abril de 2019 en Windows. Un Secuestro de DLL puede ocurrir. • https://lgsecurity.lge.com • CWE-427: Uncontrolled Search Path Element •
CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 1CVE-2017-13138 – Bridge - Creative Multipurpose WordPress Theme < 11.2 - Cross-Site Scripting
https://notcve.org/view.php?id=CVE-2017-13138
08 Aug 2017 — DOM based Cross-site scripting (XSS) vulnerability in the Bridge theme before 11.2 for WordPress allows remote attackers to inject arbitrary JavaScript. Una vulnerabilidad Cross-Site Scripting (XSS) basada en DOM en el tema Bridge en versiones anteriores a la 11.2 para WordPress permite que atacantes remotos inyecten JavaScript arbitrario. • http://bridge.qodeinteractive.com/change-log • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •