Lucene search
+L

2486 matches found

Zero Day Initiative
Zero Day Initiative
added 2023/11/15 12:0 a.m.16 views

Adobe Acrobat Reader DC Font Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS7.2AI score0.04907EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/11/15 12:0 a.m.32 views

Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

3.3CVSS6.3AI score0.02035EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/11/15 12:0 a.m.20 views

Adobe Acrobat Reader DC Font Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS7.2AI score0.04907EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/11/15 12:0 a.m.19 views

Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS7.2AI score0.04907EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/11/15 12:0 a.m.21 views

Adobe Acrobat Reader DC Font Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS7.1AI score0.04907EPSS
SaveExploits0References1
OSV
OSV
added 2023/11/13 12:15 a.m.6 views

CVE-2023-27436

Cross-Site Request Forgery CSRF vulnerability in Louis Reingold Elegant Custom Fonts plugin = 1.0 versions...

8.8CVSS7.3AI score0.00301EPSS
SaveExploits0References1
NVD
NVD
added 2023/11/13 12:15 a.m.19 views

CVE-2023-27436

Cross-Site Request Forgery CSRF vulnerability in Louis Reingold Elegant Custom Fonts plugin = 1.0 versions...

8.8CVSS0.00301EPSS
SaveExploits0References1
Prion
Prion
added 2023/11/13 12:15 a.m.12 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Louis Reingold Elegant Custom Fonts plugin = 1.0 versions...

6.8CVSS7.5AI score0.00301EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/11/12 11:9 p.m.8 views

CVE-2023-27436 WordPress Elegant Custom Fonts Plugin <= 1.0 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Louis Reingold Elegant Custom Fonts plugin = 1.0 versions...

5.4CVSS7.1AI score0.00301EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/11/12 11:9 p.m.28 views

CVE-2023-27436 WordPress Elegant Custom Fonts Plugin <= 1.0 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Louis Reingold Elegant Custom Fonts plugin = 1.0 versions...

5.4CVSS9AI score0.00301EPSS
SaveExploits0References1
CVE
CVE
added 2023/11/12 11:9 p.m.44 views

CVE-2023-27436

CVE-2023-27436 is a CSRF vulnerability in the WordPress plugin Elegant Custom Fonts, affecting versions

8.8CVSS7.1AI score0.00301EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2023/11/12 12:0 a.m.7 views

WordPress Plugin Elegant Custom Fonts Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

8.8CVSS6.5AI score0.00301EPSS
SaveExploits0References3
OSV
OSV
added 2023/11/06 12:15 p.m.4 views

CVE-2023-5823

Cross-Site Request Forgery CSRF vulnerability in ThemeKraft TK Google Fonts GDPR Compliant plugin = 2.2.11 versions...

8.8CVSS5.8AI score0.00214EPSS
SaveExploits0References1
NVD
NVD
added 2023/11/06 12:15 p.m.18 views

CVE-2023-5823

Cross-Site Request Forgery CSRF vulnerability in ThemeKraft TK Google Fonts GDPR Compliant plugin = 2.2.11 versions...

8.8CVSS8.8AI score0.00214EPSS
SaveExploits0References1
Prion
Prion
added 2023/11/06 12:15 p.m.18 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in ThemeKraft TK Google Fonts GDPR Compliant plugin = 2.2.11 versions...

6.8CVSS7.2AI score0.00214EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/11/06 11:21 a.m.24 views

CVE-2023-5823 WordPress TK Google Fonts GDPR Compliant Plugin <= 2.2.11 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in ThemeKraft TK Google Fonts GDPR Compliant plugin = 2.2.11 versions...

4.3CVSS9AI score0.00214EPSS
SaveExploits0References1
CVE
CVE
added 2023/11/06 11:21 a.m.101 views

CVE-2023-5823

CVE-2023-5823 is a CSRF vulnerability in the TK Google Fonts GDPR Compliant WordPress plugin, affecting versions up to and including 2.2.11. The issue allows unauthenticated attackers to exploit Cross-Site Request Forgery; CVSSv3.1 base score is 8.8 (HIGH) per NVD/audit sources, with client impac...

8.8CVSS8.8AI score0.00214EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2023/11/06 12:0 a.m.6 views

WordPress Plugin TK Google Fonts GDPR Compliant Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress Plugin TK Google Fonts GDPR...

8.8CVSS6.6AI score0.00214EPSS
SaveExploits0References2
OSV
OSV
added 2023/11/03 5:15 a.m.16 views

UBUNTU-CVE-2023-44271

An issue was discovered in Pillow before 10.0.0. It is a Denial of Service that uncontrollably allocates memory to process a given task, potentially causing a service to crash by having it run out of memory. This occurs for truetype in ImageFont when textlength in an ImageDraw instance operates o...

7.5CVSS6.8AI score0.01131EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2023/10/31 12:0 a.m.7 views

WordPress Plugin CITS Support svg, webp Media and TTF,OTF File Upload Cross Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress Plugin CITS Support svg, webp Med...

5.4CVSS6AI score0.0039EPSS
SaveExploits2References2
Rows per page
Query Builder