Lucene search
+L

8199 matches found

Zero Day Initiative
Zero Day Initiative
•added 2021/05/07 12:00 a.m.•57 views

Foxit Reader U3D File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of U3D...

7.8CVSS4AI score0.02819EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/05/07 12:00 a.m.•35 views

Foxit Reader Annotation Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

7.8CVSS2.2AI score0.02755EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/05/07 12:00 a.m.•43 views

Foxit Reader Annotation Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

7.8CVSS2.2AI score0.02767EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/05/07 12:00 a.m.•47 views

Foxit Reader XFA relayout Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of XFA...

7.8CVSS2.3AI score0.04401EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/05/07 12:00 a.m.•46 views

Foxit Reader U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling ...

3.3CVSS2AI score0.02023EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/05/07 12:00 a.m.•45 views

Foxit Reader U3D File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of U3D...

7.8CVSS3.7AI score0.02819EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/05/07 12:00 a.m.•41 views

Foxit Reader U3D File Parsing Double Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of U3D...

7.8CVSS3.7AI score0.02819EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/05/07 12:00 a.m.•39 views

Foxit Reader XFA Form Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of XFA...

7.8CVSS2.1AI score0.02761EPSS
SaveExploits0References1
CNVD
CNVD
•added 2021/05/07 12:00 a.m.•62 views

Adobe Acrobat Reader DC out-of-bounds write vulnerability

Adobe Acrobat Reader is a PDF viewer. The software is used to print, sign and annotate PDFs. Adobe Acrobat Reader DC is vulnerable to an out-of-bounds write vulnerability that could be exploited by an attacker to execute arbitrary code in the context of the current user...

7.8CVSS3.6AI score0.04714EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2021/05/07 12:00 a.m.•18 views

Foxit Reader 资源管理错误漏洞

Foxit Reader is a Chinese Foxit Foxit company's a PDF document reader. A security vulnerability exists in Foxit Reader XFA Forms. The vulnerability stems from the failure to verify the existence of an object before performing an operation on it. An attacker can exploit this vulnerability by...

7.8CVSS5.8AI score0.02767EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2021/05/07 12:00 a.m.•18 views

Foxit Reader 安全漏洞

Foxit Reader is a Chinese Foxit Foxit company's a PDF document reader. A security vulnerability exists in Foxit Reader app.media. The vulnerability stems from a lack of proper validation of user-supplied data. An attacker can exploit this vulnerability by tricking a user into visiting a malicious...

7.8CVSS5.8AI score0.04287EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2021/05/06 2:15 p.m.•8 views

CVE-2021-28128

In Strapi through 3.6.0, the admin panel allows the changing of one's own password without entering the current password. An attacker who gains access to a valid session can use this to take over an account by changing the password...

8.1CVSS7.7AI score0.0128EPSS
SaveExploits1References4
OSV
OSV
•added 2021/05/06 1:15 p.m.•39 views

CVE-2020-28010

Exim 4 before 4.94.2 allows Out-of-bounds Write because the main function, while setuid root, copies the current working directory pathname into a buffer that is too small on some common platforms...

7.8CVSS9.5AI score0.00417EPSS
SaveExploits1References2
OSV
OSV
•added 2021/05/06 1:15 p.m.•6 views

DEBIAN-CVE-2020-28010

Exim 4 before 4.94.2 allows Out-of-bounds Write because the main function, while setuid root, copies the current working directory pathname into a buffer that is too small on some common platforms...

7.8CVSS7.7AI score0.00417EPSS
SaveExploits1References1
AlpineLinux
AlpineLinux
•added 2021/05/06 3:17 a.m.•85 views

CVE-2020-28010

Exim 4 before 4.94.2 allows Out-of-bounds Write because the main function, while setuid root, copies the current working directory pathname into a buffer that is too small on some common platforms...

7.8CVSS7.7AI score0.00417EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2021/05/06 3:17 a.m.•50 views

CVE-2020-28010

Exim 4 before 4.94.2 allows Out-of-bounds Write because the main function, while setuid root, copies the current working directory pathname into a buffer that is too small on some common platforms...

8.7AI score0.00417EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/05/06 12:00 a.m.•5 views

CVE-2020-28010: Out-of-bounds Write

Exim 4 before 4.94.2 allows Out-of-bounds Write because the main function, while setuid root, copies the current working directory pathname into a buffer that is too small on some common platforms...

7.8CVSS7.7AI score0.00417EPSS
SaveExploits1References2
UbuntuCve
UbuntuCve
•added 2021/05/04 1:30 p.m.•44 views

CVE-2020-28010

Exim 4 before 4.94.2 allows Out-of-bounds Write because the main function, while setuid root, copies the current working directory pathname into a buffer that is too small on some common platforms...

7.8CVSS7.5AI score0.00417EPSS
SaveExploits1References2
Prion
Prion
•added 2021/04/29 5:15 p.m.•26 views

Design/Logic Flaw

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.931. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

6.8CVSS7.8AI score0.02761EPSS
SaveExploits0References2Affected Software1
Tenable Nessus
Tenable Nessus
•added 2021/04/29 12:00 a.m.•39 views

Slackware 14.0 / 14.1 / 14.2 / current : bind (SSA:2021-118-01)

New bind packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2021-118-01. The text itself is copyright C Slackware Linux,...

9.8CVSS7.2AI score0.82367EPSS
SaveExploits0References4
Rows per page
Query Builder