Lucene search
+L

1008 matches found

CNVD
CNVD
added 2022/04/18 12:0 a.m.125 views

Multiple Adobe Products Resource Management Error Vulnerability (CNVD-2022-46975)

Adobe Acrobat is a set of tools for editing and converting PDF files.Adobe Acrobat Reader is a PDF viewer. The software is used to print, sign and annotate PDFs. A resource management error vulnerability exists in several Adobe products, which can be exploited by an attacker to execute arbitrary...

9.3CVSS7.8AI score0.12464EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2022/03/27 12:0 a.m.10 views

Fedora: Security Advisory for python-PyMuPDF (FEDORA-2022-6746739d52)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
Fedora
Fedora
added 2022/03/26 3:34 p.m.15 views

[SECURITY] Fedora 36 Update: mupdf-1.19.0-7.fc36

MuPDF is a lightweight PDF viewer and toolkit written in portable C. The renderer in MuPDF is tailored for high quality anti-aliased graphics. MuPDF renders text with metrics and spacing accurate to within fractions of a pixel for the highest fidelity in reproducing the look of a printed page on...

0.4AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2022/02/01 12:0 a.m.12 views

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2020 are related to a vulnerability that allows for writing operations beyond the buffer boundaries in memory, enabling an attacker to execute arbitrary code.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 are related to the issue of allowing write operations beyond the buff...

7.8CVSS7.9AI score0.12264EPSS
SaveExploits0References3
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.14 views

Mageia: Security Advisory (MGASA-2017-0479)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS6.6AI score0.15181EPSS
SaveExploits3References5
BDU FSTEC
BDU FSTEC
added 2021/11/25 12:0 a.m.9 views

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to a insecure process for finding libraries containing DLL paths. This allows attackers to execute arbitrary code.

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to a insecure process for locating libraries in DLL files. Exploiting these vulnerabilities can allow attackers to...

7.8CVSS7.7AI score0.01773EPSS
SaveExploits0References3Affected Software2
NVD
NVD
added 2021/10/18 2:15 p.m.14 views

CVE-2021-24760

The Gutenberg PDF Viewer Block WordPress plugin before 1.0.1 does not sanitise and escape its block, which could allow users with a role as low as Contributor to perform Cross-Site Scripting attacks...

5.4CVSS0.00629EPSS
SaveExploits2References1
OSV
OSV
added 2021/10/18 2:15 p.m.5 views

CVE-2021-24760

The Gutenberg PDF Viewer Block WordPress plugin before 1.0.1 does not sanitise and escape its block, which could allow users with a role as low as Contributor to perform Cross-Site Scripting attacks...

5.4CVSS5.8AI score0.00629EPSS
SaveExploits2References1
CVE
CVE
added 2021/10/18 1:46 p.m.53 views

CVE-2021-24760

The Gutenberg PDF Viewer Block WordPress plugin is vulnerable to stored Cross-Site Scripting in versions before 1.0.1 due to insufficient sanitisation/escaping of its block. This allows users with a role as low as Contributor to inject malicious scripts. Remediation: update to at least 1.0.1. No ...

5.4CVSS5.3AI score0.00629EPSS
SaveExploits2References1Affected Software1
Cvelist
Cvelist
added 2021/10/18 1:46 p.m.23 views

CVE-2021-24760 Gutenberg PDF Viewer Block < 1.0.1 - Contributor+ Stored Cross-Site Scripting

The Gutenberg PDF Viewer Block WordPress plugin before 1.0.1 does not sanitise and escape its block, which could allow users with a role as low as Contributor to perform Cross-Site Scripting attacks...

5.5AI score0.00629EPSS
SaveExploits2References1
CNVD
CNVD
added 2021/10/18 12:0 a.m.18 views

Adobe Acrobat Reader Path Traversal Vulnerability

Adobe Acrobat Reader is the United States of America Audobee Adobe, a PDF viewer. A path traversal vulnerability exists in Adobe Acrobat Reader, which stems from a configuration or other error in the operation of the product. An unauthorized attacker could exploit the vulnerability to obtain...

7.8CVSS7.3AI score0.03318EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/10/18 12:0 a.m.4 views

WordPress 插件 跨站脚本漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports PHP and MySQL server set up a personal blog site.WordPress plugin is a WordPress open source application plugin. The WordPress plugin Gutenberg PDF Viewer Block suffers from a...

5.4CVSS5.5AI score0.00629EPSS
SaveExploits2References2
Tenable Nessus
Tenable Nessus
added 2021/10/12 12:0 a.m.35 views

Foxit PDF Reader for Mac < 11.1 Vulnerability

According to its version, the Foxit PDF Reader for Mac application previously named Foxit Reader for Mac installed on the remote macOS host is prior to 11.1. It is, therefore affected by vulnerability: Note that Nessus has not tested for this issue but has instead relied only on the application's...

7.8CVSS7.4AI score0.01531EPSS
SaveExploits0References4
CNVD
CNVD
added 2021/10/11 12:0 a.m.46 views

Adobe Acrobat Reader DC Resource Management Error Vulnerability

Adobe Acrobat Reader is a PDF viewer from Adobe. The software is used to print, sign, and annotate PDFs. Adobe Acrobat Reader DC is vulnerable to a resource management error that stems from a use-after-release vulnerability in the handling of AcroForm list boxes. No detailed vulnerability details...

7.8CVSS1.3AI score0.05285EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/10/08 12:0 a.m.46 views

Adobe Acrobat Reader DC out-of-bounds read vulnerability

Adobe Acrobat Reader is a PDF viewer from Adobe. The software is used to print, sign and annotate PDFs. Adobe Acrobat Reader DC suffers from an out-of-bounds read vulnerability that can be exploited by attackers to locally elevate privileges in the context of the current user...

4.3CVSS4.8AI score0.01868EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/10/07 12:0 a.m.8 views

Adobe Acrobat Reader Dc 资源管理错误漏洞

Adobe Acrobat Reader Dc is a Pdf reading tool from Adobe USA. Used to reliably view, print and annotate Pdf documents. Adobe Acrobat Reader DC is vulnerable to a resource management error, which stems from the vulnerability when dealing with AcroForm list boxes. No detailed vulnerability details...

7.8CVSS7.3AI score0.05285EPSS
SaveExploits0References4
WPVulnDB
WPVulnDB
added 2021/09/20 12:0 a.m.13 views

Gutenberg PDF Viewer Block < 1.0.1 - Contributor+ Stored Cross-Site Scripting

The plugin does not sanitise and escape its block, which could allow users with a role as low as Contributor to perform Cross-Site Scripting attacks. PoC...

5.4CVSS2.5AI score0.00629EPSS
SaveExploits2Affected Software1
Patchstack
Patchstack
added 2021/09/20 12:0 a.m.24 views

WordPress Gutenberg PDF Viewer Block plugin <= 1.0 - Stored Cross-Site Scripting (XSS) vulnerability

Stored Cross-Site Scripting XSS vulnerability discovered by apple502j in WordPress Gutenberg PDF Viewer Block plugin versions = 1.0. Solution Update the WordPress Gutenberg PDF Viewer Block plugin to the latest available version at least 1.0.1...

5.4CVSS2.5AI score0.00629EPSS
SaveExploits2References3Affected Software1
wpexploit
wpexploit
added 2021/09/20 12:0 a.m.542 views

Gutenberg PDF Viewer Block < 1.0.1 - Contributor+ Stored Cross-Site Scripting

The plugin does not sanitise and escape its block, which could allow users with a role as low as Contributor to perform Cross-Site Scripting attacks...

5.4CVSS0.00629EPSS
SaveExploits2
OPENSUSE Linux
OPENSUSE Linux
added 2021/09/16 12:0 a.m.156 views

Security update for nextcloud (important)

openSUSE Security Update: Security update for nextcloud Announcement ID: openSUSE-SU-2021:1275-1 Rating: important References: 1190291 Cross-References: CVE-2021-32766 CVE-2021-32800 CVE-2021-32801 CVE-2021-32802 CVSS scores: CVE-2021-32800 NVD : 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N...

10CVSS7.6AI score0.02604EPSS
SaveExploits0References1
Rows per page
Query Builder