Lucene search
+L

9358 matches found

Zero Day Initiative
Zero Day Initiative
added 2023/12/05 12:00 a.m.19 views

Adobe Acrobat Reader DC Font Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS7.1AI score0.04907EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/12/05 12:00 a.m.16 views

Adobe Acrobat Reader DC Font Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS7.1AI score0.04907EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2023/12/04 12:00 a.m.13 views

WordPress Block for Font Awesome Plugin <= 1.4.0 is vulnerable to Cross Site Request Forgery (CSRF)

Software Block for Font Awesome Type Plugin Vulnerable versions = 1.4.0 Fixed in 1.4.1 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-49751 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 2ae115747c8e Credits Nguyen Xuan...

8.8CVSS6.7AI score0.00259EPSS
SaveExploits0References2Affected Software1
Mageia
Mageia
added 2023/12/01 11:54 a.m.56 views

Updated xrdp packages fix security vulnerability

The updated packages fix a security vulnerability Access to the font glyphs in xrdppainter.c is not bounds-checked. Since some of this data is controllable by the user, this can result in an out-of-bounds read within the xrdp executable. The vulnerability allows an out-of-bounds read within a...

6.5CVSS6.8AI score0.00636EPSS
SaveExploits0References2
OSV
OSV
added 2023/12/01 11:06 a.m.9 views

OESA-2023-1881 qt security update

Qt pronounced as "cute", not "cu-tee" is a cross-platform framework that is usually used as a graphical toolkit, although it is also very helpful in creating CLI applications. It runs on the three major desktop OSes, as well as on mobile OSes, such as Symbian, Nokia Belle, Meego Harmattan, MeeGo ...

5.3CVSS6.8AI score0.0158EPSS
SaveExploits1References5
OSV
OSV
added 2023/12/01 11:06 a.m.11 views

OESA-2023-1878 qt security update

Qt pronounced as "cute", not "cu-tee" is a cross-platform framework that is usually used as a graphical toolkit, although it is also very helpful in creating CLI applications. It runs on the three major desktop OSes, as well as on mobile OSes, such as Symbian, Nokia Belle, Meego Harmattan, MeeGo ...

5.3CVSS6.8AI score0.0158EPSS
SaveExploits1References4
OSV
OSV
added 2023/12/01 11:06 a.m.7 views

OESA-2023-1880 qt security update

Qt pronounced as "cute", not "cu-tee" is a cross-platform framework that is usually used as a graphical toolkit, although it is also very helpful in creating CLI applications. It runs on the three major desktop OSes, as well as on mobile OSes, such as Symbian, Nokia Belle, Meego Harmattan, MeeGo ...

5.3CVSS6.8AI score0.0158EPSS
SaveExploits1References4
OSV
OSV
added 2023/12/01 11:06 a.m.9 views

OESA-2023-1877 qt security update

Qt pronounced as "cute", not "cu-tee" is a cross-platform framework that is usually used as a graphical toolkit, although it is also very helpful in creating CLI applications. It runs on the three major desktop OSes, as well as on mobile OSes, such as Symbian, Nokia Belle, Meego Harmattan, MeeGo ...

5.3CVSS6.8AI score0.0158EPSS
SaveExploits1References4
OSV
OSV
added 2023/12/01 11:06 a.m.10 views

OESA-2023-1879 qt security update

Qt pronounced as "cute", not "cu-tee" is a cross-platform framework that is usually used as a graphical toolkit, although it is also very helpful in creating CLI applications. It runs on the three major desktop OSes, as well as on mobile OSes, such as Symbian, Nokia Belle, Meego Harmattan, MeeGo ...

5.3CVSS6.8AI score0.0158EPSS
SaveExploits1References4
BDU FSTEC
BDU FSTEC
added 2023/11/29 12:00 a.m.11 views

The vulnerability of the Font Parser component in PDF viewing and editing programs from Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 lies in its memory management after it is freed. This allows an attacker to execute arbitrary code.

The vulnerability of the Font Parser component in PDF viewing and editing programs from Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 is related to the use of memory after it is freed. Exploiting this vulnerability could allow...

7.8CVSS7.5AI score0.02149EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2023/11/29 12:00 a.m.11 views

The vulnerability of the Font Parser component in PDF viewing and editing programs from Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 lies in the ability to write code beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Font Parser component in PDF viewing and editing programs from Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 relates to writing beyond the buffer limits in memory. Exploiting this vulnerability could...

7.8CVSS7.7AI score0.01846EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2023/11/29 12:00 a.m.9 views

The vulnerability of the Font Parser component in PDF viewing and editing programs from Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 lies in its memory management after it is freed. This allows an attacker to execute arbitrary code.

The vulnerability of the Font Parser component in PDF viewing and editing programs from Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 is related to the use of memory after it is freed. Exploiting this vulnerability could allow...

7.8CVSS6.8AI score0.04907EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2023/11/29 12:00 a.m.9 views

The vulnerability of the Font Parser component in PDF viewing and editing programs from Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 relates to access to an uninitialized pointer, allowing an attacker to execute arbitrary code.

The vulnerability of the Font Parser component in PDF viewing and editing programs from Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 relates to access to an uninitialized pointer. Exploiting this vulnerability could allow an...

7.8CVSS7.5AI score0.02044EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2023/11/29 12:00 a.m.11 views

The vulnerability of the Font Parser component in PDF viewing and editing programs from Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 lies in its memory management after it is freed. This allows an attacker to execute arbitrary code.

The vulnerability of the Font Parser component in PDF viewing and editing programs from Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 is related to the use of memory after it is freed. Exploiting this vulnerability could allow...

7.8CVSS7.5AI score0.02149EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2023/11/29 12:00 a.m.9 views

The vulnerability of the Font Parser component in PDF viewing and editing programs from Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 lies in its ability to read data beyond the buffer in memory. This allows attackers to execute arbitrary code.

The vulnerability of the Font Parser component in PDF viewing and editing programs from Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 relates to reading data beyond the buffer in memory. Exploiting this vulnerability could all...

7.8CVSS7.7AI score0.02044EPSS
SaveExploits0References5
OSV
OSV
added 2023/11/27 8:30 a.m.5 views

SUSE-SU-2023:4577-1 Security update for xrdp

This update for xrdp fixes the following issues: - CVE-2023-42822: Fixed unchecked access to font glyph info bsc1215803...

6.5CVSS6.4AI score0.00636EPSS
SaveExploits0References3
Zero Day Initiative
Zero Day Initiative
added 2023/11/27 12:00 a.m.24 views

Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS7.7AI score0.04907EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/11/27 12:00 a.m.21 views

Adobe Acrobat Reader DC Font Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS7.7AI score0.04907EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/11/27 12:00 a.m.24 views

Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS7.7AI score0.04907EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/11/27 12:00 a.m.18 views

Adobe Acrobat Reader DC Font Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS7.7AI score0.04907EPSS
SaveExploits0References1
Rows per page
Query Builder