Lucene search
K

1745 matches found

RedHat Linux
RedHat Linux
added 2022/01/26 3:52 p.m.1 views

xstream: Infinite loop DoS via unsafe deserialization of sun.reflect.annotation.AnnotationInvocationHandler

XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to allocate 100% CPU time on the target system depending on CPU type or parallel execution of such a payload resulting in a denial of service only by...

6.5CVSS7.4AI score0.00138EPSS
Exploits1References5
OSV
OSV
added 2022/01/07 12:21 a.m.2 views

GHSA-566M-QJ78-RWW5 Regular Expression Denial of Service in postcss

The package postcss versions before 7.0.36 or between 8.0.0 and 8.2.13 are vulnerable to Regular Expression Denial of Service ReDoS via getAnnotationURL and loadAnnotation in lib/previous-map.js. The vulnerable regexes are caused mainly by the sub-pattern regex /\s sourceMappingURL=. PoC js var...

5.3CVSS7.1AI score0.00074EPSS
Exploits1References5
BDU FSTEC
BDU FSTEC
added 2021/12/28 12:0 a.m.1 views

The vulnerability of the cloud-based video conversion, annotation, and format conversion application for Adobe Prelude involves an operation that goes beyond buffer boundaries in memory, allowing attackers to execute arbitrary code.

The vulnerability of the cloud-based application for video digitization, annotation, and format conversion in Adobe Prelude involves the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

7.8CVSS0.01147EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/12/20 12:0 a.m.1 views

The vulnerability of the PDF editing software Foxit PhantomPDF and the text viewing software Foxit Reader for Windows operating systems arises from allowing operations beyond the buffer boundaries in memory, enabling attackers to execute arbitrary code.

The vulnerability of the Foxit PhantomPDF PDF editing program and the Foxit Reader text viewing program for Windows operating systems relates to the execution of operations beyond the buffer in memory when processing annotation objects. Exploiting this vulnerability allows a malicious actor to...

10CVSS0.00586EPSS
Exploits0References7Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/12/20 12:0 a.m.1 views

The vulnerability of the PDF editing software Foxit PhantomPDF and the text viewing software Foxit Reader for Windows operating systems arises from allowing operations beyond the buffer boundaries in memory, enabling attackers to execute arbitrary code.

The vulnerability of the Foxit PhantomPDF PDF editing program and the Foxit Reader text viewing program for Windows operating systems is related to the execution of operations outside the buffer in memory when processing annotation objects. Exploiting this vulnerability allows a malicious actor t...

10CVSS0.01999EPSS
Exploits0References8Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/12/20 12:0 a.m.1 views

The vulnerability of the PDF editing software Foxit PhantomPDF and the text viewing software Foxit Reader for Windows operating systems arises from allowing operations beyond the buffer boundaries in memory, enabling attackers to execute arbitrary code.

The vulnerability of the Foxit PhantomPDF PDF editing program and the Foxit Reader text viewing program for Windows operating systems relates to the execution of operations beyond the buffer in memory when processing annotation objects. Exploiting this vulnerability allows a malicious actor to...

10CVSS0.00373EPSS
Exploits0References7Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/12/20 12:0 a.m.1 views

The vulnerability of the PDF editing software Foxit PhantomPDF and the text viewing software Foxit Reader for Windows operating systems arises from allowing operations beyond the buffer boundaries in memory, enabling attackers to execute arbitrary code.

The vulnerability of the Foxit PhantomPDF PDF editing program and the Foxit Reader text viewing program for Windows operating systems relates to the execution of operations beyond the buffer in memory when processing annotation objects. Exploiting this vulnerability allows a malicious actor to...

10CVSS0.00559EPSS
Exploits0References7Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/12/20 12:0 a.m.0 views

The vulnerability of the PDF editing software Foxit PhantomPDF and the text viewing software Foxit Reader for Windows operating systems arises from allowing operations beyond the buffer boundaries in memory, enabling attackers to execute arbitrary code.

The vulnerability of the Foxit PhantomPDF PDF editing program and the Foxit Reader text viewing program for Windows operating systems is related to the execution of operations outside the buffer in memory when processing annotation objects. Exploiting this vulnerability allows a malicious actor t...

10CVSS0.01717EPSS
Exploits0References7Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/12/20 12:0 a.m.0 views

The vulnerability of the PDF editing software Foxit PhantomPDF and the text viewing software Foxit Reader for Windows operating systems arises from allowing operations beyond the buffer boundaries in memory, enabling attackers to execute arbitrary code.

The vulnerability of the Foxit PhantomPDF PDF editing program and the Foxit Reader text viewing program for Windows operating systems relates to the execution of operations beyond the buffer in memory when processing annotation objects. Exploiting this vulnerability allows a malicious actor to...

10CVSS0.01717EPSS
Exploits0References7Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/12/20 12:0 a.m.0 views

The vulnerability of the PDF editing software Foxit PhantomPDF and the text viewing software Foxit Reader for Windows operating systems arises from allowing operations beyond the buffer boundaries in memory, enabling attackers to execute arbitrary code.

The vulnerability of the Foxit PhantomPDF PDF editing program and the Foxit Reader text viewing program for Windows operating systems relates to the execution of operations beyond the buffer in memory when processing annotation objects. Exploiting this vulnerability allows a malicious actor to...

10CVSS0.01717EPSS
Exploits0References7Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/12/17 12:0 a.m.1 views

The vulnerability of the PDF editing software Foxit PhantomPDF and the text viewing software Foxit Reader for Windows operating systems arises from allowing operations beyond the buffer boundaries in memory, enabling attackers to execute arbitrary code.

The vulnerability of the Foxit PhantomPDF PDF editing program and the Foxit Reader text viewing program for Windows operating systems relates to the execution of operations beyond the buffer in memory when processing annotation objects. Exploiting this vulnerability allows a malicious actor to...

10CVSS0.01717EPSS
Exploits0References7Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/12/17 12:0 a.m.0 views

The vulnerability of the PDF editing software Foxit PhantomPDF and the text viewing software Foxit Reader for Windows operating systems arises from allowing operations beyond the buffer boundaries in memory, enabling attackers to execute arbitrary code.

The vulnerability of the Foxit PhantomPDF PDF editing program and the Foxit Reader text viewing program for Windows operating systems relates to the execution of operations beyond the buffer in memory when processing annotation objects. Exploiting this vulnerability allows a malicious actor to...

10CVSS0.01717EPSS
Exploits0References7Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/12/17 12:0 a.m.0 views

The vulnerability of the PDF editing software Foxit PhantomPDF and the text viewing software Foxit Reader for Windows operating systems arises from allowing operations beyond the buffer boundaries in memory, enabling attackers to execute arbitrary code.

The vulnerability of the Foxit PhantomPDF PDF editing program and the Foxit Reader text viewing program for Windows operating systems relates to the execution of operations beyond the buffer in memory when processing annotation objects. Exploiting this vulnerability allows a malicious actor to...

10CVSS0.01717EPSS
Exploits0References7Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/12/16 12:0 a.m.2 views

The vulnerability of the PDF editing software Foxit PhantomPDF and the text viewing software Foxit Reader for Windows operating systems arises from allowing operations beyond the buffer boundaries in memory, enabling attackers to execute arbitrary code.

The vulnerability of the Foxit PhantomPDF PDF editing program and the Foxit Reader text viewing program for Windows operating systems relates to the execution of operations beyond the buffer in memory when processing annotation objects. Exploiting this vulnerability allows a malicious actor to...

10CVSS0.01717EPSS
Exploits0References7Affected Software2
Gitee
Gitee
added 2021/12/08 6:30 p.m.3 views

nuclei-templates

This is a GitHub repository for a community-driven project called "Nuclei Templates". The project provides a collection of templates for the Nuclei engine to find security vulnerabilities in applications. The repository contains various files and workflows for managing and updating the templates,...

7.1AI score
Exploits0
RedHat Linux
RedHat Linux
added 2021/12/02 4:17 p.m.1 views

xstream: Infinite loop DoS via unsafe deserialization of sun.reflect.annotation.AnnotationInvocationHandler

XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to allocate 100% CPU time on the target system depending on CPU type or parallel execution of such a payload resulting in a denial of service only by...

6.5CVSS7.4AI score0.00138EPSS
Exploits1References5
BDU FSTEC
BDU FSTEC
added 2021/12/01 12:0 a.m.1 views

The vulnerability of the cloud-based video conversion, annotation, and format conversion application for Adobe Prelude involves writing data beyond the buffer boundaries into memory, allowing an attacker to execute arbitrary code.

The vulnerability of the cloud-based application for video digitization, annotation, and format conversion in Adobe Prelude involves writing data beyond the buffer boundaries into memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

7.8CVSS0.03055EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/12/01 12:0 a.m.1 views

The vulnerability of the cloud-based video conversion, annotation, and format conversion application for Adobe Prelude involves writing data beyond the buffer boundaries into memory, allowing an attacker to execute arbitrary code.

The vulnerability of the cloud-based application for video digitization, annotation, and format conversion in Adobe Prelude involves writing data beyond the buffer boundaries into memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

7.8CVSS0.03055EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/12/01 12:0 a.m.1 views

The vulnerability of the cloud-based video conversion, annotation, and format conversion application for Adobe Prelude involves a pointer manipulation issue, which allows an attacker to cause a service failure.

The vulnerability of the cloud-based application for video digitization, annotation, and format conversion in Adobe Prelude is related to the handling of a null pointer. Exploiting this vulnerability could allow an attacker to cause service interruptions remotely...

7.1CVSS0.0041EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/12/01 12:0 a.m.1 views

The vulnerability of the cloud-based video conversion, annotation, and format conversion application for Adobe Prelude involves writing data beyond the buffer boundaries into memory, allowing an attacker to execute arbitrary code.

The vulnerability of the cloud-based application for video digitization, annotation, and format conversion in Adobe Prelude involves writing data beyond the buffer boundaries into memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

7.8CVSS0.01803EPSS
Exploits0References4Affected Software1
Rows per page
Query Builder