Lucene search
+L

2582 matches found

Zero Day Initiative
Zero Day Initiative
•added 2023/02/09 12:00 a.m.•55 views

Adobe Acrobat Reader DC AcroForm Annotation Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handli...

7.8CVSS7.7AI score0.00355EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/02/09 12:00 a.m.•34 views

Adobe Acrobat Reader DC AcroForm Annotation Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handli...

7.8CVSS7.7AI score0.00355EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/02/09 12:00 a.m.•35 views

Adobe Acrobat Reader DC AcroForm Annotation Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handli...

7.8CVSS7.7AI score0.00508EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2023/01/27 12:00 a.m.•47 views

CVE-2023-22240 ZDI-CAN-19517: Adobe Acrobat Reader DC AcroForm Annotation Out-Of-Bounds Write Remote Code Execution Vulnerability

Adobe Acrobat Reader versions 22.003.20282 and earlier, 22.003.20281 and earlier and 20.005.30418 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction...

7.8CVSS7.9AI score0.00355EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/01/20 12:00 a.m.•45 views

Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

7.8CVSS2.3AI score0.01122EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/01/18 12:00 a.m.•40 views

Adobe Acrobat Reader DC AcroForm Annotation Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handli...

7.8CVSS7.7AI score0.02104EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2023/01/18 12:00 a.m.•37 views

Foxit PDF Reader < 12.1 Vulnerability

According to its version, the Foxit PDF Reader application previously named Foxit Reader installed on the remote Windows host is prior to 12.1. It is, therefore affected by vulnerability: - This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF...

7.8CVSS7.5AI score0.01122EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2023/01/18 12:00 a.m.•39 views

Foxit PDF Editor < 11.2.6 and < 12.1.2 Vulnerability

According to its version, the Foxit PDF Editor application previously named Foxit PhantomPDF installed on the remote Windows host, with versions prior to 11.2.6 and 12.1.2 are vulnerable: - This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF...

7.8CVSS7.7AI score0.01122EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2022/12/13 9:15 p.m.•19 views

CVE-2022-4171

The demon image annotation plugin for WordPress is vulnerable to improper input validation in versions up to, and including 5.0. This is due to the plugin improperly validating the number of characters supplied during an annotation despite there being a setting to limit the number characters inpu...

7.5CVSS5.8AI score0.00743EPSS
SaveExploits0References2
Prion
Prion
•added 2022/12/13 9:15 p.m.•30 views

Input validation

The demon image annotation plugin for WordPress is vulnerable to improper input validation in versions up to, and including 5.0. This is due to the plugin improperly validating the number of characters supplied during an annotation despite there being a setting to limit the number characters inpu...

5CVSS7.6AI score0.00743EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/13 12:00 a.m.•10 views

CVE-2022-4171: Improper Validation of Specified Quantity in Input

The demon image annotation plugin for WordPress is vulnerable to improper input validation in versions up to, and including 5.0. This is due to the plugin improperly validating the number of characters supplied during an annotation despite there being a setting to limit the number characters inpu...

7.5CVSS5.7AI score0.00743EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2022/12/13 12:00 a.m.•12 views

PT-2022-6245 · Foxit · Foxit Pdf Reader

Name of the Vulnerable Software and Affected Versions: Foxit PDF Reader version 12.0.2.12465 Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a malicious file. Th...

10CVSS7.8AI score0.01122EPSS
SaveExploits0References7
CNNVD
CNNVD
•added 2022/12/13 12:00 a.m.•19 views

WordPress plugin demon image annotation security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

7.5CVSS7.4AI score0.00743EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2022/12/13 12:00 a.m.•25 views

PT-2022-26039 · WordPress · Demon Image Annotation Plugin

Name of the Vulnerable Software and Affected Versions: demon image annotation plugin for WordPress versions up to, and including 5.0 Description: The issue arises from improper input validation in the plugin, specifically when handling the number of characters supplied during an annotation. Despi...

7.5CVSS7.5AI score0.00743EPSS
SaveExploits0References5
osv_cve
osv_cve
•added 2022/12/09 6:15 p.m.•20 views

CVE-2022-25629

An authenticated user who has the privilege to add/edit annotations on the Content tab, can craft a malicious annotation that can be executed on the annotations page Annotation Text Column...

5.4CVSS5.8AI score0.00404EPSS
SaveExploits0References1
NVD
NVD
•added 2022/12/09 6:15 p.m.•44 views

CVE-2022-25629

An authenticated user who has the privilege to add/edit annotations on the Content tab, can craft a malicious annotation that can be executed on the annotations page Annotation Text Column...

5.4CVSS0.00404EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/09 12:00 a.m.•8 views

CVE-2022-25629: Improper Neutralization of Input During Web Page Generation

An authenticated user who has the privilege to add/edit annotations on the Content tab, can craft a malicious annotation that can be executed on the annotations page Annotation Text Column...

5.4CVSS5.8AI score0.00404EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2022/12/09 12:00 a.m.•24 views

PT-2022-17421 · Symantec · Messaging Gateway

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue allows an authenticated user with the privilege to add or edit annotations on the Content tab to craft a malicious annotation. This malicious...

5.4CVSS5.2AI score0.00404EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2022/12/09 12:00 a.m.•50 views

CVE-2022-25629

An authenticated user who has the privilege to add/edit annotations on the Content tab, can craft a malicious annotation that can be executed on the annotations page Annotation Text Column...

5.7AI score0.00404EPSS
SaveExploits0References1
Fedora
Fedora
•added 2022/12/03 2:03 a.m.•43 views

[SECURITY] Fedora 37 Update: sonic-visualiser-4.5-3.fc37

Sonic Visualiser is an application for viewing and analyzing the contents of music audio files. The aim of Sonic Visualiser is to be the first program you reach for when want to study a musical recording rather than simply listen to it. As well as a number of features designed to make exploring...

5.4CVSS5.4AI score0.00932EPSS
SaveExploits0
Rows per page
Query Builder