Lucene search
+L

18 matches found

Circl
Circl
•added 2026/03/06 6:04 a.m.•20 views

CVE-2026-28681

creationtimestamp| type| source ---|---|--- 2026-03-06 06:04:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgend7unkc2k 2026-03-06 08:07:03+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mgeu6w36ns2f 2026-03-06 08:09:25+00:00| seen|...

8.1CVSS5.8AI score0.00574EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
•added 2026/01/09 11:25 a.m.•26 views

CVE-2021-28681

Pion WebRTC before 3.0.15 didn't properly tear down the DTLS Connection when certificate verification failed. The PeerConnectionState was set to failed, but a user could ignore that and continue to use the PeerConnection. A WebRTC implementation shouldn't allow the user to continue if verificatio...

5.3CVSS6AI score0.00677EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/23 9:55 a.m.•13 views

CVE-2024-28681

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /dede/plusedit.php...

6.1CVSS6.4AI score0.00242EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/23 1:06 a.m.•12 views

CVE-2022-28681

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader 11.2.1.53537. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

6.1CVSS6AI score0.00894EPSS
SaveExploits0References1
Circl
Circl
•added 2025/02/25 7:23 p.m.•14 views

CVE-2023-28681

creationtimestamp| type| source ---|---|--- 2025-02-25 19:23:41+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5352...

8.2CVSS7.9AI score0.00569EPSS
SaveExploits0References1
NVD
NVD
•added 2024/03/13 4:15 p.m.•23 views

CVE-2024-28681

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /dede/plusedit.php...

6.1CVSS6.5AI score0.00242EPSS
SaveExploits1References1
CVE
CVE
•added 2024/03/13 12:00 a.m.•62 views

CVE-2024-28681

DedeCMS v5.7 is susceptible to a Cross-Site Request Forgery (CSRF) vulnerability affecting the /dede/plus_edit.php API endpoint. This flaw allows an attacker to perform unauthorized actions by tricking a victim into making unintended requests. As a temporary workaround, it is recommended to restr...

6.1CVSS7.4AI score0.00242EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2024/03/13 12:00 a.m.•39 views

CVE-2024-28681

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /dede/plusedit.php...

7.4AI score0.00242EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2024/03/13 12:00 a.m.•15 views

CVE-2024-28681

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /dede/plusedit.php...

7.5AI score0.00242EPSS
SaveExploits1References1
OSV
OSV
•added 2023/04/02 9:15 p.m.•15 views

CVE-2023-28681

Jenkins Visual Studio Code Metrics Plugin 1.7 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...

8.2CVSS7.3AI score0.00569EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2023/03/23 11:26 a.m.•11 views

CVE-2023-28681

Jenkins Visual Studio Code Metrics Plugin 1.7 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...

8.3AI score0.00569EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2023/03/23 11:26 a.m.•40 views

CVE-2023-28681

Jenkins Visual Studio Code Metrics Plugin 1.7 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...

8.5AI score0.00569EPSS
SaveExploits0References1
CVE
CVE
•added 2023/03/23 11:26 a.m.•269 views

CVE-2023-28681

CVE-2023-28681 affects Jenkins Visual Studio Code Metrics Plugin 1.7 and earlier. The vulnerability arises because the plugin’s XML parser is not configured to prevent XML external entity (XXE) attacks, which can allow an attacker to cause the Jenkins controller/server-side processing to reveal s...

8.2CVSS8.2AI score0.00569EPSS
SaveExploits0References1Affected Software1
Circl
Circl
•added 2022/07/18 10:39 p.m.•15 views

CVE-2022-28681

creationtimestamp| type| source ---|---|--- 2022-07-18 22:39:58+00:00| seen| https://t.me/cibsecurity/46495...

6.1CVSS4.7AI score0.00894EPSS
SaveExploits0References1
CVE
CVE
•added 2022/07/18 6:42 p.m.•134 views

CVE-2022-28681

CVE-2022-28681 affects Foxit PDF Reader 11.2.1.53537. The flaw is in the deletePages method: JavaScript actions can read past the end of an allocated object, and, with other vulnerabilities, may enable code execution in the process context. Exploitation requires user interaction (visiting a malic...

6.1CVSS6.4AI score0.00894EPSS
SaveExploits0References2Affected Software2
Kaspersky
Kaspersky
•added 2022/05/09 12:00 a.m.•115 views

KLA12530 Multiple vulnerabilities in Foxit Reader

Multiple vulnerabilities were found in Foxit Reader. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information, cause denial of service. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability can be exploited remotely ...

7.8CVSS8.6AI score0.04607EPSS
SaveExploits1References5
Circl
Circl
•added 2021/03/18 6:36 a.m.•19 views

CVE-2021-28681

creationtimestamp| type| source ---|---|--- 2021-03-18 06:36:54+00:00| seen| https://t.me/cibsecurity/25075...

5.3CVSS5.5AI score0.00677EPSS
SaveExploits1References1
CVE
CVE
•added 2021/03/18 3:20 a.m.•104 views

CVE-2021-28681

CVE-2021-28681 affects Pion WebRTC before 3.0.15. The vulnerability arises when a DTLS connection isn’t properly torn down after certificate verification fails; the PeerConnectionState is set to failed, but a user could continue to use the PeerConnection. Impact reported: data channel communicati...

5.3CVSS5.1AI score0.00677EPSS
SaveExploits1References2Affected Software1
Rows per page
Query Builder