8 matches found
CVE-2026-67340_exploit
CVE-2026-67340 — تنفيذ تعليمات برمجية عن بُعد عبر سكربت المشغّل Trigger-Script JAVASCRIPT في ArcadeDB بعد المصادقة تنفيذ تعليمات برمجية عن بُعد بعد المصادقة في ArcadeDB قاعدة بيانات جافا متعددة النماذج عبر مشغّل JAVASCRIPT يصل إلى فئات المضيف. محرك GraalVM متعدد اللغات للمشغّل مبني بقائمة سماح...
Exploit for CVE-2026-67340
CVE-2026-67340 — ArcadeDB JAVASCRIPT Trigger-Script RCE post-...
CVE-2026-67356 ArcadeDB before 26.7.3 Privilege Escalation via JavaScript Trigger
ArcadeDB before 26.7.3 binds the real LocalDatabase object into JavaScript trigger contexts with HostAccess.ALL, allowing schema-admins to call getSecurity.createUser without permission checks. Attackers with UPDATESCHEMA permission can create triggers that execute JavaScript to create server-wid...
EUVD-2026-51986
ArcadeDB before 26.7.3 binds the real LocalDatabase object into JavaScript trigger contexts with HostAccess.ALL, allowing schema-admins to call getSecurity.createUser without permission checks. Attackers with UPDATESCHEMA permission can create triggers that execute JavaScript to create server-wid...
CVE-2023-39487
PDF-XChange Editor util Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a...
SUSE CVE-2013-6635
Use-after-free vulnerability in the editing implementation in Blink, as used in Google Chrome before 31.0.1650.63, allows remote attackers to cause a denial of service or possibly have unspecified other impact via JavaScript code that triggers removal of a node during processing of the DOM tree,...
SUSE CVE-2018-11396
ephy-session.c in libephymain.so in GNOME Web aka Epiphany through 3.28.2.1 allows remote attackers to cause a denial of service application crash via JavaScript code that triggers access to a NULL URL, as demonstrated by a crafted window.open call...
PT-2022-4479 · Pdf Xchange · Pdf-Xchange Editor
Name of the Vulnerable Software and Affected Versions: PDF-XChange Editor affected versions not specified Description: The issue is related to a buffer overflow in memory, allowing a remote attacker to execute arbitrary code using a specially crafted malicious Doc file. User interaction is...