Lucene search
K

5836 matches found

Zero Day Initiative
Zero Day Initiative
added 2023/07/26 12:0 a.m.23 views

Foxit PDF Reader AcroForm Doc Object Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of D...

7.8CVSS6.8AI score0.00413EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/07/26 12:0 a.m.28 views

Foxit PDF Reader AcroForm Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS5.9AI score0.00389EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/07/26 12:0 a.m.23 views

Foxit PDF Reader AcroForm Doc Object Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS5.9AI score0.004EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2023/07/26 12:0 a.m.4 views

The vulnerability of the Windows Authentication component of the Windows operating system allows a perpetrator to carry out a DoS attack.

The vulnerability of the Windows Authentication component of the Windows operating system is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute a DoS attack...

6.8CVSS7.1AI score0.01589EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2023/07/26 12:0 a.m.1 views

The vulnerability in the implementation of the Drag and Drop application interface of the Firefox browser allows a hacker to execute arbitrary code.

The vulnerability of the Drag and Drop application interface in Firefox browsers is related to insufficient data validation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS7.6AI score0.00263EPSS
Exploits0References7Affected Software6
Zero Day Initiative
Zero Day Initiative
added 2023/07/26 12:0 a.m.26 views

Foxit PDF Reader AcroForm signature Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

7.8CVSS6.7AI score0.00413EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/07/26 12:0 a.m.25 views

Foxit PDF Reader Doc Object Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS5.9AI score0.004EPSS
Exploits0References1
Veracode
Veracode
added 2023/07/19 4:2 a.m.18 views

Cross-site Scripting (XSS)

clevertap-cordova is vulnerable to Cross-site Scripting XSS. The vulnerability exists because the library does not properly validate the data from the deep links, allowing an attacker to inject and execute malicious javascript...

9.3CVSS6.6AI score0.00672EPSS
Exploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/07/19 12:0 a.m.6 views

Vulnerability of the Microsoft Office Graphics Package components in Microsoft Office programs, allowing a hacker to execute arbitrary code

The vulnerability of the Microsoft Office Graphics Package components in Microsoft Office products is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

7.8CVSS7.7AI score0.0062EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2023/07/18 12:0 a.m.2 views

Vulnerability of Google Chrome and Microsoft Edge browser installers, allowing attackers to increase their privileges

The vulnerability of Google Chrome and Microsoft Edge browsers is related to insufficient data validation. Exploiting this vulnerability can allow attackers to enhance their privileges...

7.8CVSS7.2AI score0.00454EPSS
Exploits0References6Affected Software4
BDU FSTEC
BDU FSTEC
added 2023/07/18 12:0 a.m.3 views

The vulnerability of the Extensions API of Google Chrome and Microsoft Edge browsers allows a malicious actor to install any extension they desire.

The vulnerability of the Extensions API for Google Chrome and Microsoft Edge is related to insufficient data validation. Exploiting this vulnerability could allow an attacker to install any desired extension by using a specially created HTML page...

5CVSS5.8AI score0.00621EPSS
Exploits0References9Affected Software5
BDU FSTEC
BDU FSTEC
added 2023/07/17 12:0 a.m.7 views

The vulnerability of the Remote Procedure Call (RPC) technology in Windows operating systems allows a perpetrator to trigger a service failure.

The vulnerability of the Remote Procedure Call RPC technology in Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

6.8CVSS6.9AI score0.0142EPSS
Exploits0References3
Packet Storm
Packet Storm
added 2023/07/17 12:0 a.m.404 views

Clarity PPM 14.3.0.298 Cross Site Scripting

================================================================================================================================== Title : Insufficient input validation , in CA PPM 14.3 allows remote attackers to execute stored cross-site scripting attacks. | Author : Kaizen | Tested on : windows...

7.1AI score0.00499EPSS
Exploits2
Github Security Blog
Github Security Blog
added 2023/07/15 9:30 p.m.27 views

CleverTap Cordova plugin vulnerable to Cross-site Scripting

CleverTap Cordova Plugin version 2.6.2 allows a remote attacker to execute JavaScript code in any application that is opened via a specially constructed deeplink by an attacker. This is possible because the plugin does not correctly validate the data coming from the deeplinks before using them...

9.3CVSS7AI score0.00672EPSS
Exploits1References5Affected Software1
NVD
NVD
added 2023/07/15 7:15 p.m.16 views

CVE-2023-2507

CleverTap Cordova Plugin version 2.6.2 allows a remote attacker to execute JavaScript code in any application that is opened via a specially constructed deeplink by an attacker. This is possible because the plugin does not correctly validate the data coming from the deeplinks before using them...

9.3CVSS0.00672EPSS
Exploits1References3
OSV
OSV
added 2023/07/15 7:15 p.m.18 views

CVE-2023-2507

CleverTap Cordova Plugin version 2.6.2 allows a remote attacker to execute JavaScript code in any application that is opened via a specially constructed deeplink by an attacker. This is possible because the plugin does not correctly validate the data coming from the deeplinks before using them...

6.1CVSS6.9AI score
Exploits0References3
Prion
Prion
added 2023/07/15 7:15 p.m.22 views

Code injection

CleverTap Cordova Plugin version 2.6.2 allows a remote attacker to execute JavaScript code in any application that is opened via a specially constructed deeplink by an attacker. This is possible because the plugin does not correctly validate the data coming from the deeplinks before using them...

5.8CVSS6.2AI score0.00672EPSS
Exploits1References2Affected Software1
Zero Day Initiative
Zero Day Initiative
added 2023/07/13 12:0 a.m.18 views

Kofax Power PDF JP2 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kofax Power PDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JP2...

7.8CVSS6.8AI score0.00345EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/07/13 12:0 a.m.15 views

Kofax Power PDF TIF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kofax Power PDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of TIF...

7.8CVSS6.8AI score0.00345EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/07/13 12:0 a.m.17 views

Kofax Power PDF JP2 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kofax Power PDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JP2...

7.8CVSS6.8AI score0.00345EPSS
Exploits0References1
Rows per page
Query Builder