5143 matches found
Bentley MicroStation CONNECT Code Execution Vulnerability (CNVD-2022-65026)
Bentley MicroStation CONNECT is a Cad software platform for 2D and 3D design and drafting. A code execution vulnerability exists in Bentley MicroStation CONNECT, which can be exploited by an attacker to execute arbitrary code in the context of the current process...
Bentley MicroStation CONNECT Code Execution Vulnerability (CNVD-2022-65025)
Bentley MicroStation CONNECT is a Cad software platform for 2D and 3D design and drafting. A code execution vulnerability exists in Bentley MicroStation CONNECT, which could be exploited by an attacker to execute arbitrary code on the system...
Bentley MicroStation CONNECT Code Execution Vulnerability (CNVD-2022-65024)
Bentley MicroStation CONNECT is a Cad software platform for 2D and 3D design and drafting. A code execution vulnerability exists in Bentley MicroStation CONNECT, which could be exploited by an attacker to execute arbitrary code on the system...
Bentley MicroStation CONNECT Code Execution Vulnerability (CNVD-2022-65620)
Bentley MicroStation CONNECT is a Cad software platform for 2D and 3D design and drafting.A code execution vulnerability exists in Bentley MicroStation CONNECT, which can be exploited by attackers to execute arbitrary code in the context of the current process...
Cross site scripting
The 3D FlipBook WordPress plugin before 1.12.1 does not have authorisation and CSRF checks when updating its settings, and does not have any sanitisation/escaping, allowing any authenticated users, such as subscriber to put Cross-Site Scripting payloads in all pages with a 3d flipbook...
CVE-2022-0423
CVE-2022-0423 affects the WordPress 3D FlipBook plugin up to version 1.12.0 (versions before 1.12.1). The root cause is missing authorization checks, CSRF protection, and input sanitisation/escaping during settings updates, allowing authenticated users (e.g., subscribers) to perform stored Cross-...
PT-2022-13172
Name of the Vulnerable Software and Affected Versions 3D FlipBook WordPress plugin versions prior to 1.12.1 Description The issue allows any authenticated users to put Cross-Site Scripting payloads in all pages with a 3D flipbook due to the lack of authorisation and CSRF checks when updating...
CVE-2022-0423: Improper Neutralization of Input During Web Page Generation
The 3D FlipBook WordPress plugin before 1.12.1 does not have authorisation and CSRF checks when updating its settings, and does not have any sanitisation/escaping, allowing any authenticated users, such as subscriber to put Cross-Site Scripting payloads in all pages with a 3d flipbook...
3dstereo.com Improper Access Control vulnerability OBB-2424140
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Microsoft Paint 3D Remote Code Execution Vulnerability
Microsoft Paint 3D is a remote code execution vulnerability that can be exploited by attackers to execute arbitrary code on the system...
CVE-2022-23282
Paint 3D Remote Code Execution Vulnerability...
CVE-2022-23282
Paint 3D Remote Code Execution Vulnerability...
Remote code execution
Paint 3D Remote Code Execution Vulnerability...
CVE-2022-23282 Paint 3D Remote Code Execution Vulnerability
...
CVE-2022-23282
CVE-2022-23282 affects Microsoft Paint 3D. Multiple connected sources describe a remote/code execution vulnerability in Paint 3D, typically triggered by processing a crafted file that could allow arbitrary code execution. Details vary across documents (some indicate remote/executable conditions; ...
CVE-2022-23282 Paint 3D Remote Code Execution Vulnerability
...
ROS-20220309-02
The vulnerability in the XSLT parameter of Mozilla Firefox and Focus browsers is related to memory usage after its freeing. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary code A vulnerability in the WebGPU 3D graphics processing and computing softwa...
CVE-2022-23282: Out-of-bounds Write
Paint 3D Remote Code Execution Vulnerability...
March 2022 Patch Tuesday: Microsoft Releases 92 Vulnerabilities with 3 Critical; Adobe Releases 3 Advisories, 6 Vulnerabilities with 5 Critical.
Microsoft Patch Tuesday Summary Microsoft has fixed 92 vulnerabilities, including 21 Microsoft Edge vulnerabilities, in the March 2022 update, with three 3 classified as Critical as they allow Remote Code Execution RCE. This months Patch Tuesday release includes fixes for three 3 publicly disclos...
