Lucene search
+L

730 matches found

OSV
OSV
•added 2018/06/04 6:29 a.m.•8 views

DEBIAN-CVE-2018-11694

An issue was discovered in LibSass through 3.5.4. A NULL pointer dereference was found in the function Sass::Functions::selectorappend which could be leveraged by an attacker to cause a denial of service application crash or possibly have unspecified other impact...

8.8CVSS8.7AI score0.01707EPSS
SaveExploits1References1
OSV
OSV
•added 2018/06/04 6:29 a.m.•11 views

UBUNTU-CVE-2018-11694

An issue was discovered in LibSass through 3.5.4. A NULL pointer dereference was found in the function Sass::Functions::selectorappend which could be leveraged by an attacker to cause a denial of service application crash or possibly have unspecified other impact...

8.8CVSS7.2AI score0.01707EPSS
SaveExploits1References2
OSV
OSV
•added 2018/06/04 6:29 a.m.•19 views

AZL-27684 CVE-2018-11694 affecting package reaper for versions less than 3.1.1-6

An issue was discovered in LibSass through 3.5.4. A NULL pointer dereference was found in the function Sass::Functions::selectorappend which could be leveraged by an attacker to cause a denial of service application crash or possibly have unspecified other impact...

8.8CVSS7.3AI score0.01707EPSS
SaveExploits1References1
CNVD
CNVD
•added 2018/06/04 12:00 a.m.•6 views

LibSaas null pointer dereference vulnerability (CNVD-2018-15181)

LibSaas is a C/C++ implementation of the Sass compiler. A null pointer dereference vulnerability exists in the Sass::Functions::selectorappend function in LibSaas 3.5.4 and earlier. An attacker could exploit this vulnerability to cause a denial of service application crash or possibly other impac...

8.8CVSS8.5AI score0.01707EPSS
SaveExploits1References1
CNVD
CNVD
•added 2018/05/21 12:00 a.m.•15 views

PoDoFo Denial of Service Vulnerability (CNVD-2018-10344)

PoDoFo is an open source , written in C++ using the PDF file format library . A security vulnerability exists in the 'PdfDocument::Append' function in the PdfDocument.cpp file in PoDoFo version 0.9.5. A remote attacker can exploit this vulnerability to cause a denial of service null pointer...

6.5CVSS6.8AI score0.01365EPSS
SaveExploits1References1
Snyk
Snyk
•added 2018/05/18 7:29 p.m.•4 views

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference. An issue was discovered in PoDoFo 0.9.5. The function PdfDocument::Append in PdfDocument.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service NULL pointer dereference and application crash v...

6.5CVSS6.8AI score0.01365EPSS
SaveExploits1References2
NVD
NVD
•added 2018/05/18 7:29 p.m.•24 views

CVE-2018-11256

An issue was discovered in PoDoFo 0.9.5. The function PdfDocument::Append in PdfDocument.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted PDF document...

6.5CVSS6.2AI score0.01365EPSS
SaveExploits1References1
Prion
Prion
•added 2018/05/18 7:29 p.m.•21 views

Null pointer dereference

An issue was discovered in PoDoFo 0.9.5. The function PdfDocument::Append in PdfDocument.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted PDF document...

4.3CVSS6.2AI score0.01365EPSS
SaveExploits1References1Affected Software1
OSV
OSV
•added 2018/05/18 7:29 p.m.•8 views

UBUNTU-CVE-2018-11256

An issue was discovered in PoDoFo 0.9.5. The function PdfDocument::Append in PdfDocument.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted PDF document...

6.5CVSS6.7AI score0.01365EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/05/18 12:00 a.m.•1 views

CVE-2018-11256: NULL Pointer Dereference

An issue was discovered in PoDoFo 0.9.5. The function PdfDocument::Append in PdfDocument.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted PDF document...

6.5CVSS6.5AI score0.01365EPSS
SaveExploits1References2
OSV
OSV
•added 2018/05/17 3:29 p.m.•13 views

CVE-2018-9941

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

8.8CVSS6.2AI score0.03072EPSS
SaveExploits0References2
Prion
Prion
•added 2018/05/17 3:29 p.m.•28 views

Type confusion

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

6.8CVSS8.8AI score0.03072EPSS
SaveExploits0References2Affected Software2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/05/17 12:00 a.m.•3 views

CVE-2018-9941: Incorrect Type Conversion or Cast

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

8.8CVSS8.3AI score0.03072EPSS
SaveExploits0References3
OSV
OSV
•added 2018/05/16 1:29 p.m.•10 views

CVE-2018-10123

p910nd on Inteno IOPSYS 2.0 through 4.2.0 allows remote attackers to read, or append data to, arbitrary files via requests on TCP port 9100...

8.8CVSS5.9AI score0.10381EPSS
SaveExploits5References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/05/16 12:00 a.m.•4 views

CVE-2018-10123: Undefined Security Weakness

p910nd on Inteno IOPSYS 2.0 through 4.2.0 allows remote attackers to read, or append data to, arbitrary files via requests on TCP port 9100...

9CVSS8AI score0.10381EPSS
SaveExploits5References1
CNVD
CNVD
•added 2018/04/28 12:00 a.m.•16 views

Foxit Reader XFA record append remote code execution vulnerability

Foxit Reader is a small PDF document viewer and printing program. Foxit Reader has a security vulnerability in the XFA record append method, which can be exploited by an attacker to execute arbitrary code in the current process context due to a lack of proper validation of user-supplied data...

8.8CVSS7.7AI score0.03072EPSS
SaveExploits0References1
CNVD
CNVD
•added 2017/12/21 12:00 a.m.•16 views

Foxit Reader append method remote code execution vulnerability

Foxit Reader is China's Foxit Foxit Software Corporation, a PDF document reader. A security vulnerability exists in the append method of the XFA Node object in Foxit Reader version 8.3.1.21155, which is caused by the program failing to properly validate user-submitted data. A remote attacker can...

8.8CVSS7.6AI score0.0259EPSS
SaveExploits0References1
OSV
OSV
•added 2017/12/20 2:29 p.m.•16 views

CVE-2017-14827

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.1.21155. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

8.8CVSS6.2AI score0.0259EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/12/20 12:00 a.m.•4 views

CVE-2017-14827: Access of Resource Using Incompatible Type

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.1.21155. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

8.8CVSS8.3AI score0.0259EPSS
SaveExploits0References3
wpexploit
wpexploit
•added 2017/11/10 12:00 a.m.•29 views

UserPro <= 4.9.17 - Authentication Bypass

The userpro plugin has the ability to bypass login authentication for the user 'admin'. If the site does not use the standard username 'admin' it is not affected. 1 - Google Dork inurl:/plugins/userpro 2 - Browse to a site that has the userpro plugin installed. 3 - Append ?upautolog=true to the...

7.5CVSS9.4AI score0.27369EPSS
SaveExploits4References2
Rows per page
Query Builder