Lucene search
+L

2485 matches found

BDU FSTEC
BDU FSTEC
added 2023/10/17 12:0 a.m.9 views

The vulnerability of the Adobe Bridge file manager arises from the possibility of writing operations beyond the buffer boundaries in memory, allowing an attacker to gain unauthorized access to protected information.

The vulnerability of the Adobe Bridge file manager is related to the issue where operations are performed outside the buffer in memory when processing embedded fonts. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information by opening a specially...

5.5CVSS5.7AI score0.00396EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/10/17 12:0 a.m.13 views

The vulnerability of the Adobe Bridge file manager, related to the use of memory after it is freed, allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the Adobe Bridge file manager is related to the use of memory after it is freed during the processing of embedded fonts. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information by opening a specially created file or a malicious...

5.5CVSS5.5AI score0.00435EPSS
SaveExploits0References4Affected Software1
Zero Day Initiative
Zero Day Initiative
added 2023/10/11 12:0 a.m.26 views

Adobe Bridge Font Parsing Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Bridge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...

3.3CVSS5.9AI score0.00435EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/10/11 12:0 a.m.24 views

Adobe Bridge Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Bridge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...

3.3CVSS5.8AI score0.00396EPSS
SaveExploits0References1
NVD
NVD
added 2023/10/10 2:15 p.m.23 views

CVE-2023-44470

Cross-Site Request Forgery CSRF vulnerability in Kvvaradha Kv TinyMCE Editor Add Fonts plugin = 1.1 versions...

8.8CVSS6.5AI score0.00221EPSS
SaveExploits0References1
OSV
OSV
added 2023/10/10 2:15 p.m.5 views

CVE-2023-44470

Cross-Site Request Forgery CSRF vulnerability in Kvvaradha Kv TinyMCE Editor Add Fonts plugin = 1.1 versions...

8.8CVSS7.3AI score0.00221EPSS
SaveExploits0References1
Prion
Prion
added 2023/10/10 2:15 p.m.15 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Kvvaradha Kv TinyMCE Editor Add Fonts plugin = 1.1 versions...

6.8CVSS8.8AI score0.00221EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/10/10 1:59 p.m.12 views

CVE-2023-44470 WordPress Kv TinyMCE Editor Add Fonts Plugin <= 1.1 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Kvvaradha Kv TinyMCE Editor Add Fonts plugin = 1.1 versions...

5.4CVSS7.4AI score0.00221EPSS
SaveExploits0References1
CVE
CVE
added 2023/10/10 1:59 p.m.59 views

CVE-2023-44470

CVE-2023-44470 describes a Cross-Site Request Forgery (CSRF) vulnerability in the Kv TinyMCE Editor Add Fonts plugin for WordPress, affecting versions

8.8CVSS7AI score0.00221EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2023/10/10 12:0 a.m.12 views

PT-2023-29250 · Unknown · Kvvaradha Kv Tinymce Editor Add Fonts

Name of the Vulnerable Software and Affected Versions: Kvvaradha Kv TinyMCE Editor Add Fonts plugin versions = 1.1 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions...

8.8CVSS8.5AI score0.00221EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2023/10/10 12:0 a.m.6 views

WordPress Plugin kv-tinymce-editor-fonts Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress Plugin...

8.8CVSS6.5AI score0.00221EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2023/09/29 12:0 a.m.11 views

WordPress Kv TinyMCE Editor Add Fonts Plugin <= 1.1 is vulnerable to Cross Site Request Forgery (CSRF)

Software Kv TinyMCE Editor Add Fonts Type Plugin Vulnerable versions = 1.1 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-44470 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 229f3e0b60ce Credits Skalucy...

8.8CVSS6.6AI score0.00221EPSS
SaveExploits0References1Affected Software1
Mageia
Mageia
added 2023/09/11 1:7 p.m.51 views

Updated chromium-browser-stable packages fix security vulnerability

The chromium-browser-stable package has been updated to the 116.0.5845.140 release, fixing 5 vulnerabilities. High CVE-2023-4430: Use after free in Vulkan. Reported by Cassidy Kim@cassidy6564 on 2023-08-02 High CVE-2023-4429: Use after free in Loader. Reported by Anonymous on 2023-08-03 High...

8.8CVSS7.4AI score0.3398EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2023/09/07 12:0 a.m.19 views

Oracle Linux 7 : texlive (ELSA-2020-1036)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-1036 advisory. 2:2012-45.20130427r30134 - Related: 1650521, buffer overflow in t1checkunusualcharstring function 2:2012-44.20130427r30134 - Resolves: 1650521, buffer overflow ...

7.8CVSS7.6AI score0.02058EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2023/09/06 12:0 a.m.7 views

The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 are related to the issue of operations occurring outside the buffer in memory. This allows attackers to gain unauthorized access to protected information.

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 is related to the issue of operations going beyond the buffer in memory when processing embedded fonts. Exploiting thi...

5.5CVSS5.7AI score0.02379EPSS
SaveExploits0References6
BDU FSTEC
BDU FSTEC
added 2023/09/06 12:0 a.m.6 views

The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 are related to the issue of operations occurring outside the buffer in memory. This allows attackers to gain unauthorized access to protected information.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 are related to the issue of operations going beyond the buffer in memory when processing embedded fonts. Exploiting...

5.5CVSS5.8AI score0.0213EPSS
SaveExploits0References6
Veracode
Veracode
added 2023/08/30 3:33 p.m.26 views

Out-Of-Bounds Memory Access

Google Chrome is vulnerable to Out-Of-Bounds Memory Access. The vulnerability exists in the Fonts, which allows an attacker to perform an out of bounds memory read via a maliciously crafted HTML page...

8.1CVSS6.3AI score0.00946EPSS
SaveExploits0References8Affected Software1
NVD
NVD
added 2023/08/30 2:15 p.m.28 views

CVE-2023-34180

Unauth. Reflected Cross-Site Scripting XSS vulnerability in KAPlugins Google Fonts For WordPress plugin = 3.0.0 versions...

7.1CVSS6.2AI score0.00371EPSS
SaveExploits0References1
OSV
OSV
added 2023/08/30 2:15 p.m.5 views

CVE-2023-34180

Unauth. Reflected Cross-Site Scripting XSS vulnerability in KAPlugins Google Fonts For WordPress plugin = 3.0.0 versions...

6.1CVSS7.3AI score0.00371EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/08/30 1:43 p.m.31 views

CVE-2023-34180 WordPress Google Fonts For WordPress Plugin <= 3.0.0 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in KAPlugins Google Fonts For WordPress plugin = 3.0.0 versions...

7.1CVSS6.3AI score0.00371EPSS
SaveExploits0References1
Rows per page
Query Builder