Lucene search
+L

39601 matches found

zdt
zdt
•added 2023/12/07 12:00 a.m.•506 views

ownCloud Phpinfo Reader Exploit

Docker containers of ownCloud compiled after February 2023, which have version 0.2.0 before 0.2.1 or 0.3.0 before 0.3.1 of the app graph installed contain a test file which prints phpinfo to an unauthenticated user. A post file name must be appended to the URL to bypass the login filter. Docker m...

10CVSS8.3AI score0.77755EPSS
SaveExploits9
Talos Blog
Talos Blog
•added 2023/12/06 6:33 p.m.•143 views

Remote code execution vulnerabilities found in Buildroot, Foxit PDF Reader

Cisco Talos has disclosed 10 vulnerabilities over the past two weeks, including nine that exist in a popular online PDF reader that offers a browser plugin. Attackers could exploit these vulnerabilities in the Foxit PDF Reader to carry out a variety of malicious actions, but most notably could ga...

6.8CVSS8.6AI score0.03769EPSS
SaveExploits12
osv_debian
osv_debian
•added 2023/12/06 5:15 p.m.•11 views

DEBIAN-CVE-2023-39326

A malicious HTTP sender can use chunk extensions to cause a receiver reading from a request or response body to read many more bytes from the network than are in the body. A malicious HTTP client can further exploit this to cause a server to automatically read a large amount of data up to about...

5.3CVSS6.5AI score0.01208EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2023/12/06 12:00 a.m.•9 views

PT-2023-9684 · Foxit · Foxit Pdf Reader

Name of the Vulnerable Software and Affected Versions: Foxit PDF Reader affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this issue, where the target mus...

7.8CVSS7.8AI score0.00793EPSS
SaveExploits0References12
Ubuntu
Ubuntu
•added 2023/12/05 9:13 p.m.•123 views

USN-6532-1: Linux kernel vulnerabilities

Tavis Ormandy discovered that some AMD processors did not properly handle speculative execution of certain vector register instructions. A local attacker could use this to expose sensitive information. CVE-2023-20593 Yu Hao discovered that the UBI driver in the Linux kernel did not properly check...

7.8CVSS7.1AI score0.05066EPSS
SaveExploits2
Zero Day Initiative
Zero Day Initiative
•added 2023/12/05 12:00 a.m.•23 views

Adobe Acrobat Reader DC Font Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS7.2AI score0.04907EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/12/05 12:00 a.m.•23 views

Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS7.1AI score0.04907EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/12/05 12:00 a.m.•29 views

Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS7.2AI score0.04907EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/12/05 12:00 a.m.•24 views

Adobe Acrobat Reader DC Font Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS7.2AI score0.04907EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/12/05 12:00 a.m.•36 views

Adobe Acrobat Reader DC Font Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS7.2AI score0.04907EPSS
SaveExploits0References1
osv_debian
osv_debian
•added 2023/12/04 6:15 a.m.•17 views

DEBIAN-CVE-2023-49287

TinyDir is a lightweight C directory and file reader. Buffer overflows in the tinydirfileopen function. This vulnerability has been patched in version 1.2.6...

9.8CVSS7.9AI score0.01869EPSS
SaveExploits3References1
osv_cve
osv_cve
•added 2023/12/04 5:29 a.m.•50 views

CVE-2023-49287 Buffer overflow vulnerabilities in tinydir

TinyDir is a lightweight C directory and file reader. Buffer overflows in the tinydirfileopen function. This vulnerability has been patched in version 1.2.6...

7.7CVSS9.2AI score
SaveExploits0References7
Debian CVE
Debian CVE
•added 2023/12/04 5:29 a.m.•88 views

CVE-2023-49287

TinyDir is a lightweight C directory and file reader. Buffer overflows in the tinydirfileopen function. This vulnerability has been patched in version 1.2.6...

9.8CVSS7.9AI score0.01869EPSS
SaveExploits3
CVE
CVE
•added 2023/12/04 5:29 a.m.•84 views

CVE-2023-49287

CVE-2023-49287 concerns TinyDir, a C directory/file reader. The root cause is a buffer overflow in the tinydir_file_open() function, affecting versions prior to 1.2.6. The issue has been patched in 1.2.6, mitigating the vulnerability. Connected documents consistently describe TinyDir and the fixe...

9.8CVSS7.9AI score0.01869EPSS
SaveExploits3References5Affected Software1
CNNVD
CNNVD
•added 2023/12/04 12:00 a.m.•18 views

TinyDir Security Vulnerability

TinyDir is lightweight, portable and easy to integrate C directory and file reader. A security vulnerability exists in TinyDir versions prior to 1.2.6 that stems from the presence of a buffer overflow vulnerability...

9.8CVSS8.5AI score0.01869EPSS
SaveExploits3References4
UbuntuCve
UbuntuCve
•added 2023/12/04 12:00 a.m.•28 views

CVE-2023-49287

TinyDir is a lightweight C directory and file reader. Buffer overflows in the tinydirfileopen function. This vulnerability has been patched in version 1.2.6...

9.8CVSS7.9AI score0.01869EPSS
SaveExploits3References1
BDU FSTEC
BDU FSTEC
•added 2023/12/04 12:00 a.m.•27 views

Foxit PDF Reader Code Execution

The vulnerability of the PDF document viewing program Foxit PDF Reader formerly Foxit Reader is related to errors in processing hypertext links. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

10CVSS8.5AI score0.02001EPSS
SaveExploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2023/12/04 12:00 a.m.•20 views

Foxit PDF Reader Buffer Overflow

The vulnerability of the PDF document viewing program Foxit PDF Reader formerly Foxit Reader is related to buffer overflow attacks. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created PDF file...

10CVSS8.6AI score0.01627EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2023/12/04 12:00 a.m.•21 views

Foxit PDF Reader Code Execution

The vulnerability of the PDF document viewing program Foxit PDF Reader formerly Foxit Reader is related to errors in processing hypertext links. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

10CVSS8.5AI score0.03769EPSS
SaveExploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2023/12/04 12:00 a.m.•24 views

Foxit PDF Reader Use-After-Free

The vulnerability of the PDF document viewing program Foxit PDF Reader formerly Foxit Reader is related to the use of memory after it is freed. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using a specially created PDF file...

9.7CVSS8.4AI score0.0182EPSS
SaveExploits1References4Affected Software1
Rows per page
Query Builder