Lucene search
+L

5906 matches found

Zero Day Initiative
Zero Day Initiative
added 2021/05/07 12:0 a.m.48 views

Foxit Reader U3D File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of U3D...

7.8CVSS4AI score0.02819EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/05/07 12:0 a.m.40 views

Foxit Reader XFA Form Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of XFA...

7.8CVSS1.9AI score0.02933EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/05/07 12:0 a.m.38 views

Foxit Reader U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling ...

3.3CVSS2AI score0.02018EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/05/07 12:0 a.m.44 views

Foxit Reader U3D File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of U3D...

7.8CVSS4AI score0.02819EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/05/07 12:0 a.m.45 views

Foxit Reader U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling ...

3.3CVSS2AI score0.02023EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/05/07 12:0 a.m.5 views

Foxit Reader 缓冲区错误漏洞

Foxit Reader is a PDF document reader from the Chinese company Foxit. A security vulnerability exists in Foxit Reader 10.1.1.37576, which stems from a lack of proper validation of user-supplied data, resulting in reading more than the end of an allocated object. An attacker can exploit this...

4.3CVSS5.1AI score0.02023EPSS
SaveExploits0References3
Zero Day Initiative
Zero Day Initiative
added 2021/05/07 12:0 a.m.40 views

Foxit Reader U3D File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of U3D...

7.8CVSS3.9AI score0.02819EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/05/06 12:0 a.m.20 views

(0Day) Delta Industrial Automation DOPSoft DPA File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Delta Industrial Automation DOPSoft. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exis...

3.3CVSS3.7AI score
SaveExploits0
OpenVAS
OpenVAS
added 2021/05/05 12:0 a.m.25 views

Debian: Security Advisory (DSA-4911-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS6.5AI score0.01601EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2021/05/04 5:43 p.m.324 views

cumulative-distribution-function Infinite Loop vulnerability

Impact Apps using this library on improper data may crash or go into an infinite-loop In the case of a nodejs server-app using this library to act on invalid non-numeric data, the nodejs server may crash. This may affect other users of this server and/or require the server to be rebooted for prop...

7.5CVSS0.3AI score0.01979EPSS
SaveExploits1References6Affected Software1
OSV
OSV
added 2021/05/04 5:43 p.m.82 views

GHSA-58QP-5328-V7MH cumulative-distribution-function Infinite Loop vulnerability

Impact Apps using this library on improper data may crash or go into an infinite-loop In the case of a nodejs server-app using this library to act on invalid non-numeric data, the nodejs server may crash. This may affect other users of this server and/or require the server to be rebooted for prop...

7.5CVSS7.5AI score0.01979EPSS
SaveExploits1References5
Tenable Nessus
Tenable Nessus
added 2021/05/04 12:0 a.m.112 views

Debian DSA-4911-1 : chromium - security update

Several vulnerabilities have been discovered in the chromium web browser. - CVE-2021-21227 Gengming Liu discovered a data validation issue in the v8 JavaScript library. - CVE-2021-21228 Rob Wu discovered a policy enforcement error. - CVE-2021-21229 Mohit Raj discovered a user interface error in t...

8.8CVSS7.3AI score0.01601EPSS
SaveExploits0References17
Veracode
Veracode
added 2021/04/30 10:1 p.m.34 views

Denial Of Service (DoS)

chromium:sid is vulnerable to denial of service. Insufficient data validation allows a remote attacker to potentially exploit heap corruption via a malicious HTML page...

8.8CVSS3.4AI score0.01189EPSS
SaveExploits0References11Affected Software3
NVD
NVD
added 2021/04/30 9:15 p.m.15 views

CVE-2021-21231

Insufficient data validation in V8 in Google Chrome prior to 90.0.4430.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS0.01144EPSS
SaveExploits0References7
OSV
OSV
added 2021/04/30 9:15 p.m.9 views

CVE-2021-21231

Insufficient data validation in V8 in Google Chrome prior to 90.0.4430.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS8.5AI score
SaveExploits0References7
OSV
OSV
added 2021/04/30 9:15 p.m.1 views

DEBIAN-CVE-2021-21231

Insufficient data validation in V8 in Google Chrome prior to 90.0.4430.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS8.2AI score0.01144EPSS
SaveExploits0References1
OSV
OSV
added 2021/04/30 9:15 p.m.9 views

CVE-2021-21227

Insufficient data validation in V8 in Google Chrome prior to 90.0.4430.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS8.5AI score
SaveExploits0References7
Prion
Prion
added 2021/04/30 9:15 p.m.23 views

Input validation

Insufficient data validation in V8 in Google Chrome prior to 90.0.4430.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

6.8CVSS8.3AI score0.01144EPSS
SaveExploits0References7Affected Software3
OSV
OSV
added 2021/04/30 9:15 p.m.4 views

UBUNTU-CVE-2021-21227

Insufficient data validation in V8 in Google Chrome prior to 90.0.4430.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS7.3AI score0.01189EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2021/04/30 8:15 p.m.40 views

CVE-2021-21231

Insufficient data validation in V8 in Google Chrome prior to 90.0.4430.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS9.1AI score0.01144EPSS
SaveExploits0
Rows per page
Query Builder