Lucene search
K

58 matches found

NVD
NVD
added 2025/10/24 10:15 p.m.2 views

CVE-2025-34293

GN4 Publishing System versions prior to 2.6 contain an insecure direct object reference IDOR vulnerability via the API. Authenticated requests to the API's object endpoints allow an authenticated user to request arbitrary user IDs and receive sensitive account data for those users, including the...

8.6CVSS0.00347EPSS
Exploits0References4
Cvelist
Cvelist
added 2025/10/24 9:16 p.m.6 views

CVE-2025-34293 GN4 Publishing System Insecure Direct Object Reference (IDOR) Information Disclosure

GN4 Publishing System versions prior to 2.6 contain an insecure direct object reference IDOR vulnerability via the API. Authenticated requests to the API's object endpoints allow an authenticated user to request arbitrary user IDs and receive sensitive account data for those users, including the...

8.6CVSS0.00347EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2025/10/24 9:16 p.m.2 views

CVE-2025-34293 GN4 Publishing System Insecure Direct Object Reference (IDOR) Information Disclosure

GN4 Publishing System versions prior to 2.6 contain an insecure direct object reference IDOR vulnerability via the API. Authenticated requests to the API's object endpoints allow an authenticated user to request arbitrary user IDs and receive sensitive account data for those users, including the...

8.6CVSS6.4AI score0.00347EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2025/10/24 12:0 a.m.5 views

PT-2025-43674

Name of the Vulnerable Software and Affected Versions GN4 Publishing System versions prior to 2.6 Description GN4 Publishing System contains an insecure direct object reference IDOR vulnerability via the API. Authenticated requests to the API’s object endpoints allow an authenticated user to...

8.6CVSS6.5AI score0.00347EPSS
Exploits0References10
CNNVD
CNNVD
added 2025/10/24 12:0 a.m.2 views

Naviga Global GN4 Publishing System 安全漏洞

Naviga Global GN4 Publishing System is a content management and publishing system from Naviga Global, USA. A security vulnerability exists in Naviga Global GN4 Publishing System versions prior to 2.6, which stems from an insecure direct object reference in the API that could lead to account...

8.6CVSS6.5AI score0.00347EPSS
Exploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2006-1367

Malware in sbrugna...

7.5CVSS6.4AI score0.02793EPSS
Exploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2002-2197

Malware in sbrugna...

10CVSS6.4AI score0.01353EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2002-0264

Malware in sbrugna...

10CVSS6.4AI score0.02615EPSS
Exploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2006-5396

Malware in sbrugna...

7.5CVSS6.4AI score0.02549EPSS
Exploits1References6
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2025-19382

Malicious code in bioql PyPI...

7.6CVSS6.6AI score0.00224EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/07/13 12:0 a.m.2 views

The vulnerability of the Adobe Framemaker desktop publishing system lies in the use of an uninitialized pointer, which allows a malicious actor to execute arbitrary code.

The vulnerability of the desktop publishing system Adobe Framemaker is related to the use of an uninitialized pointer. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

7.8CVSS5.8AI score0.00195EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/07/13 12:0 a.m.2 views

The vulnerability of the Adobe Framemaker desktop publishing system lies in the possibility of an operation going beyond the buffer boundaries in memory, allowing a hacker to execute arbitrary code.

The vulnerability of the Adobe Framemaker desktop publishing system lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

7.8CVSS6.3AI score0.0017EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/07/10 12:0 a.m.2 views

The vulnerability of the Adobe Framemaker desktop publishing system, related to integer overflow, allows a hacker to execute arbitrary code.

The vulnerability of the desktop publishing system Adobe Framemaker is related to a potential integer overflow. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

7.8CVSS5.9AI score0.00195EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/07/10 12:0 a.m.1 views

The vulnerability of the Adobe Framemaker desktop publishing system, related to writing beyond the buffer boundaries in memory, allows a hacker to execute arbitrary code.

The vulnerability of the Adobe Framemaker desktop publishing system lies in the writing of code beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

7.8CVSS6.2AI score0.0017EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/07/10 12:0 a.m.2 views

The vulnerability of the Adobe Framemaker desktop publishing system, related to writing beyond the buffer boundaries in memory, allows a hacker to execute arbitrary code.

The vulnerability of the Adobe Framemaker desktop publishing system lies in the writing of code beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

7.8CVSS6.2AI score0.0017EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/01/04 12:0 a.m.6 views

IBM Engineering Lifecycle Optimization Publishing 加密问题漏洞

IBM Engineering Lifecycle Optimization Publishing is an automated document generation solution from International Business Machines IBM. IBM Engineering Lifecycle Optimization Publishing suffers from a cryptographic issue vulnerability that stems from the use of a weaker-than-expected encryption...

7.5CVSS6.5AI score0.00195EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2024/10/23 12:0 a.m.4 views

The vulnerability of the Adobe Framemaker desktop publishing system, related to the use of an unreliable search path, allows a hacker to execute arbitrary code in the context of the current user.

The vulnerability of the desktop publishing system Adobe Framemaker is related to the use of an insecure search path. Exploiting this vulnerability allows an attacker to execute arbitrary code within the context of the current user...

7.8CVSS6AI score0.00337EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2022/08/24 12:0 a.m.5 views

The vulnerability of the Adobe Framemaker desktop publishing system lies in its memory management after memory is freed, allowing an attacker to execute arbitrary code.

The vulnerability of the desktop publishing system Adobe Framemaker relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created malicious file...

7.8CVSS7.6AI score0.0043EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2022/05/23 12:0 a.m.2 views

The vulnerability of the Adobe Framemaker desktop publishing system, related to reading data beyond the buffer in memory, allows a hacker to execute arbitrary code.

The vulnerability of the desktop publishing system Adobe Framemaker relates to reading beyond the buffer in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code in the context of the current user, using a specially created file...

7.8CVSS7.8AI score0.01934EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2021/08/18 12:0 a.m.1 views

The vulnerability of the Adobe Framemaker desktop publishing system, related to writing beyond the buffer boundaries in memory, allows a hacker to execute arbitrary code.

The vulnerability of the Adobe Framemaker desktop publishing system lies in the writing of code beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user...

8.8CVSS7.9AI score0.0391EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder