CVE-2025-0903 PDF-XChange Editor RTF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

PDF-XChange Editor RTF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target...

CVE-2025-0903

creationtimestamp| type| source ---|---|--- 2025-01-31 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-070/ 2025-02-11 20:16:23+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhwhzunjxm2h...

CVE-2024-0903

The User Feedback – Create Interactive Feedback Form, User Surveys, and Polls in Seconds plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'pagesubmitted' 'link' value in all versions up to, and including, 1.0.13 due to insufficient input sanitization and output escaping...

CVE-2024-0903

CVE-2024-0903 affects the WordPress plugin “User Feedback – Create Interactive Feedback Form, User Surveys, and Polls in Seconds.” It is a Stored XSS vulnerability in the page_submitted/link value caused by insufficient input sanitization and output escaping in all versions up to 1.0.13. Unauthen...

WordPress User Feedback Plugin <= 1.0.13 is vulnerable to Cross Site Scripting (XSS)

Software User Feedback Type Plugin Vulnerable versions = 1.0.13 Fixed in 1.0.14 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-0903 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID f85f155284e8 Credits Grzegorz Niedziela...

MAL-2024-254 Malicious code in wlwz-2312-0903 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4ab31a643dc7cb7ddf1a3bee062b7df04075d8c08511a157393b8c7235c04bde Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-0903 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4ab31a643dc7cb7ddf1a3bee062b7df04075d8c08511a157393b8c7235c04bde Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2019-0903

creationtimestamp| type| source ---|---|--- 2023-06-14 21:10:03+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-12-04 08:41:57+00:00| seen| https://t.me/arpsyndicate/1159 2024-12-24 20:29:13+00:00| seen| https://feedsin.space/feed/CISAKevBot/items/2971431 2025-02-23 02:10:22+00:00|...

Rocky Linux 9 : webkit2gtk3 (RLSA-2023:0903)

The remote Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2023:0903 advisory. - A type confusion issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.2.1, iOS 16.3.1 and iPadOS 16.3.1, Safari 16.3. Processing...

AlmaLinux 9 : webkit2gtk3 (ALSA-2023:0903)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2023:0903 advisory. - A type confusion issue was addressed with improved checks. CVE-2023-23529 Note that Nessus has not tested for this issue but has instead relied only on the...

Important: Red Hat Security Advisory: webkit2gtk3 security update

An update for webkit2gtk3 is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...

RHEL 9 : webkit2gtk3 (RHSA-2023:0903)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:0903 advisory. WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fixes: webkitgtk: processing maliciously crafted web...

K91125274: RubyGems vulnerability CVE-2017-0903

Security Advisory Description RubyGems versions between 2.0.0 and 2.6.13 are vulnerable to a possible remote code execution vulnerability. YAML deserialization of gem specifications can bypass class white lists. Specially crafted serialized objects can possibly be used to escalate to remote code...

CVE-2023-0903

The CVE-2023-0903 entry concerns SourceCodester Employee Task Management System v1.0. The vulnerability resides in edit-task.php where manipulating the task_id parameter enables SQL injection, giving remote attackers the ability to affect the database. The issue has been characterized as high-sev...

SUSE CVE-2017-0903

RubyGems versions between 2.0.0 and 2.6.13 are vulnerable to a possible remote code execution vulnerability. YAML deserialization of gem specifications can bypass class white lists. Specially crafted serialized objects can possibly be used to escalate to remote code execution...

Ubuntu: Security Advisory (USN-3685-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2022-0903

A call stack overflow bug in the SAML login feature in Mattermost server in versions up to and including 6.3.2 allows an attacker to crash the server via submitting a maliciously crafted POST body...

CVE-2022-0903 Stack overflow in SAML login in Mattermost

A call stack overflow bug in the SAML login feature in Mattermost server in versions up to and including 6.3.2 allows an attacker to crash the server via submitting a maliciously crafted POST body...

CVE-2022-0903 Stack overflow in SAML login in Mattermost

A call stack overflow bug in the SAML login feature in Mattermost server in versions up to and including 6.3.2 allows an attacker to crash the server via submitting a maliciously crafted POST body...

CVE-2022-0903

CVE-2022-0903 describes a call stack overflow bug in Mattermost Server’s SAML login feature. In versions up to and including 6.3.2, a maliciously crafted POST body can trigger a stack overflow, causing the server to crash (Denial of Service). Affected: Mattermost Server, SAML login handler; Impac...