Lucene search
+L

1153 matches found

CVE
CVE
•added 2021/10/18 1:46 p.m.•67 views

CVE-2021-24760

The Gutenberg PDF Viewer Block WordPress plugin is vulnerable to stored Cross-Site Scripting in versions before 1.0.1 due to insufficient sanitisation/escaping of its block. This allows users with a role as low as Contributor to inject malicious scripts. Remediation: update to at least 1.0.1. No ...

5.4CVSS5.3AI score0.0065EPSS
SaveExploits2References1Affected Software1
CNVD
CNVD
•added 2021/10/18 12:00 a.m.•41 views

Adobe Acrobat Reader Path Traversal Vulnerability

Adobe Acrobat Reader is the United States of America Audobee Adobe, a PDF viewer. A path traversal vulnerability exists in Adobe Acrobat Reader, which stems from a configuration or other error in the operation of the product. An unauthorized attacker could exploit the vulnerability to obtain...

7.8CVSS7.3AI score0.03566EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/10/18 12:00 a.m.•3 views

PT-2021-16262

Name of the Vulnerable Software and Affected Versions: Gutenberg PDF Viewer Block WordPress plugin versions prior to 1.0.1 Description: The issue allows users with a role as low as Contributor to perform Cross-Site Scripting attacks due to the lack of sanitization and escaping of its block...

5.4CVSS0.0065EPSS
SaveExploits2References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/10/18 12:00 a.m.•3 views

CVE-2021-24760: Improper Neutralization of Input During Web Page Generation

The Gutenberg PDF Viewer Block WordPress plugin before 1.0.1 does not sanitise and escape its block, which could allow users with a role as low as Contributor to perform Cross-Site Scripting attacks...

5.4CVSS5.8AI score0.0065EPSS
SaveExploits2References3
CNNVD
CNNVD
•added 2021/10/18 12:00 a.m.•11 views

WordPress 插件 跨站脚本漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports PHP and MySQL server set up a personal blog site.WordPress plugin is a WordPress open source application plugin. The WordPress plugin Gutenberg PDF Viewer Block suffers from a...

5.4CVSS5.5AI score0.0065EPSS
SaveExploits2References2
Tenable Nessus
Tenable Nessus
•added 2021/10/12 12:00 a.m.•43 views

Foxit PDF Reader for Mac < 11.1 Vulnerability

According to its version, the Foxit PDF Reader for Mac application previously named Foxit Reader for Mac installed on the remote macOS host is prior to 11.1. It is, therefore affected by vulnerability: Note that Nessus has not tested for this issue but has instead relied only on the application's...

7.8CVSS7.4AI score0.01531EPSS
SaveExploits0References4
CNVD
CNVD
•added 2021/10/11 12:00 a.m.•55 views

Adobe Acrobat Reader DC Resource Management Error Vulnerability

Adobe Acrobat Reader is a PDF viewer from Adobe. The software is used to print, sign, and annotate PDFs. Adobe Acrobat Reader DC is vulnerable to a resource management error that stems from a use-after-release vulnerability in the handling of AcroForm list boxes. No detailed vulnerability details...

7.8CVSS1.3AI score0.05285EPSS
SaveExploits0References1
CNVD
CNVD
•added 2021/10/08 12:00 a.m.•58 views

Adobe Acrobat Reader DC out-of-bounds read vulnerability

Adobe Acrobat Reader is a PDF viewer from Adobe. The software is used to print, sign and annotate PDFs. Adobe Acrobat Reader DC suffers from an out-of-bounds read vulnerability that can be exploited by attackers to locally elevate privileges in the context of the current user...

4.3CVSS4.8AI score0.01868EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2021/10/07 12:00 a.m.•19 views

Adobe Acrobat Reader Dc 资源管理错误漏洞

Adobe Acrobat Reader Dc is a Pdf reading tool from Adobe USA. Used to reliably view, print and annotate Pdf documents. Adobe Acrobat Reader DC is vulnerable to a resource management error, which stems from the vulnerability when dealing with AcroForm list boxes. No detailed vulnerability details...

7.8CVSS7.3AI score0.05285EPSS
SaveExploits0References4
WPVulnDB
WPVulnDB
•added 2021/09/20 12:00 a.m.•13 views

Gutenberg PDF Viewer Block < 1.0.1 - Contributor+ Stored Cross-Site Scripting

The plugin does not sanitise and escape its block, which could allow users with a role as low as Contributor to perform Cross-Site Scripting attacks. PoC...

5.4CVSS2.5AI score0.0065EPSS
SaveExploits2Affected Software1
Patchstack
Patchstack
•added 2021/09/20 12:00 a.m.•33 views

WordPress Gutenberg PDF Viewer Block plugin <= 1.0 - Stored Cross-Site Scripting (XSS) vulnerability

Stored Cross-Site Scripting XSS vulnerability discovered by apple502j in WordPress Gutenberg PDF Viewer Block plugin versions = 1.0. Solution Update the WordPress Gutenberg PDF Viewer Block plugin to the latest available version at least 1.0.1...

5.4CVSS2.5AI score0.0065EPSS
SaveExploits2References3Affected Software1
wpexploit
wpexploit
•added 2021/09/20 12:00 a.m.•551 views

Gutenberg PDF Viewer Block < 1.0.1 - Contributor+ Stored Cross-Site Scripting

The plugin does not sanitise and escape its block, which could allow users with a role as low as Contributor to perform Cross-Site Scripting attacks...

5.4CVSS0.0065EPSS
SaveExploits2
OPENSUSE Linux
OPENSUSE Linux
•added 2021/09/16 12:00 a.m.•177 views

Security update for nextcloud (important)

openSUSE Security Update: Security update for nextcloud Announcement ID: openSUSE-SU-2021:1275-1 Rating: important References: 1190291 Cross-References: CVE-2021-32766 CVE-2021-32800 CVE-2021-32801 CVE-2021-32802 CVSS scores: CVE-2021-32800 NVD : 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N...

10CVSS7.6AI score0.02604EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2021/09/15 12:00 a.m.•14 views

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2020 are related to memory management after it is released. These vulnerabilities allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 are related to the use of memory after it is released. Exploiting the...

10CVSS7.2AI score0.04331EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2021/09/15 12:00 a.m.•29 views

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2020 are related to memory management after it is released. These vulnerabilities allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 are related to the use of memory after it is released. Exploiting the...

7.8CVSS7.2AI score0.03919EPSS
SaveExploits0References3
OPENSUSE Linux
OPENSUSE Linux
•added 2021/09/14 12:00 a.m.•58 views

Security update for nextcloud (important)

openSUSE Security Update: Security update for nextcloud Announcement ID: openSUSE-SU-2021:1255-1 Rating: important References: 1190291 Cross-References: CVE-2021-32766 CVE-2021-32800 CVE-2021-32801 CVE-2021-32802 CVSS scores: CVE-2021-32800 NVD : 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N...

10CVSS7.6AI score0.02604EPSS
SaveExploits0References1
OPENSUSE Linux
OPENSUSE Linux
•added 2021/09/13 12:00 a.m.•55 views

Security update for nextcloud (important)

openSUSE Security Update: Security update for nextcloud Announcement ID: openSUSE-SU-2021:1250-1 Rating: important References: 1190291 Cross-References: CVE-2021-32766 CVE-2021-32800 CVE-2021-32801 CVE-2021-32802 CVSS scores: CVE-2021-32800 NVD : 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N...

10CVSS7.6AI score0.02604EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2021/09/03 12:00 a.m.•14 views

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to writing beyond the buffer in memory. This allows attackers to execute arbitrary code.

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to writing beyond the buffer boundaries in memory. Exploiting these vulnerabilities can allow a malicious actor to...

10CVSS8.4AI score0.03828EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2021/09/03 12:00 a.m.•16 views

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to writing beyond the buffer in memory. This allows attackers to execute arbitrary code.

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to writing beyond the buffer boundaries in memory. Exploiting these vulnerabilities can allow a malicious actor to...

10CVSS8.4AI score0.22031EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
•added 2021/09/02 12:00 a.m.•10 views

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to memory usage after it is freed. This allows attackers to execute arbitrary code.

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to the use of memory after it is freed. Exploiting these vulnerabilities can allow a malicious actor to execute...

10CVSS8.3AI score0.04782EPSS
SaveExploits0References2
Rows per page
Query Builder