Lucene search
K

8 matches found

SUSE CVE
SUSE CVE
added 2023/10/18 1:2 a.m.2 views

SUSE CVE-2023-45151

Nextcloud server is an open source home cloud platform. Affected versions of Nextcloud stored OAuth2 tokens in plaintext which allows an attacker who has gained access to the server to potentially elevate their privilege. This issue has been addressed and users are recommended to upgrade their...

8.8CVSS6.8AI score0.0069EPSS
Exploits0References3
OSV
OSV
added 2023/10/16 6:41 p.m.20 views

CVE-2023-45151 OAuth2 client_secret stored in plain text in the Nextcloud database

Nextcloud server is an open source home cloud platform. Affected versions of Nextcloud stored OAuth2 tokens in plaintext which allows an attacker who has gained access to the server to potentially elevate their privilege. This issue has been addressed and users are recommended to upgrade their...

6.5CVSS8.4AI score0.0069EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2023/10/16 12:0 a.m.4 views

PT-2023-6441 · Nextcloud +2 · Nextcloud +2

Name of the Vulnerable Software and Affected Versions: Nextcloud versions prior to 25.0.8 Nextcloud versions prior to 26.0.3 Nextcloud versions prior to 27.0.1 Description: The issue is related to the storage of OAuth2 tokens in plaintext in Nextcloud, allowing an attacker who has gained access t...

9.8CVSS5.6AI score0.00824EPSS
Exploits6References97
Positive Technologies
Positive Technologies
added 2023/08/10 12:0 a.m.1 views

PT-2023-5259 · Nextcloud +2 · Nextcloud Server +2

Name of the Vulnerable Software and Affected Versions: Nextcloud Server versions 25.0.0 through 25.0.8 Nextcloud Server versions 26.0.0 through 26.0.3 Nextcloud Server versions 27.0.0 through 27.0.0 Description: The issue is related to improper access control in Nextcloud Server, which provides...

9.8CVSS5.9AI score0.00824EPSS
Exploits6References94
Positive Technologies
Positive Technologies
added 2022/06/14 12:0 a.m.2 views

PT-2022-3015 · Adobe · Illustrator

Name of the Vulnerable Software and Affected Versions: Adobe Illustrator versions 26.0.2 and earlier Adobe Illustrator versions 25.4.5 and earlier Description: The issue is related to an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current...

7.8CVSS7.7AI score0.00175EPSS
Exploits0References9
OSV
OSV
added 2022/03/11 6:15 p.m.0 views

CVE-2022-23187

Adobe Illustrator version 26.0.3 and earlier is affected by a buffer overflow vulnerability due to insecure handling of a crafted file, potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted...

7.8CVSS8AI score0.01192EPSS
Exploits0References1
Prion
Prion
added 2022/03/11 6:15 p.m.17 views

Buffer overflow

Adobe Illustrator version 26.0.3 and earlier is affected by a buffer overflow vulnerability due to insecure handling of a crafted file, potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted...

9.3CVSS7.8AI score0.01192EPSS
Exploits0References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2022/03/09 12:0 a.m.50 views

Adobe Illustrator 26.x < 26.1.0 A Vulnerability (APSB22-15) (deprecated)

The version of Adobe Illustrator installed on the remote Windows host is prior to 26.1.0. It is, therefore, affected by a vulnerability as referenced in the apsb22-15 advisory. - Adobe Illustrator version 26.0.3 and earlier is affected by a buffer overflow vulnerability due to insecure handling o...

8.1AI score0.01192EPSS
Exploits0References3
Rows per page
Query Builder