Lucene search
+L

1558 matches found

NVD
NVD
added 2021/08/20 7:15 p.m.30 views

CVE-2021-36008

Adobe Illustrator version 25.2.3 and earlier is affected by an Use-after-free vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to read arbitrary file system information in the context of the current user. Exploitation of this issue...

5.5CVSS0.02512EPSS
SaveExploits0References2
NVD
NVD
added 2021/08/20 7:15 p.m.21 views

CVE-2021-28637

Acrobat Reader DC versions 2021.005.20054 and earlier, 2020.004.30005 and earlier and 2017.011.30197 and earlier are affected by an out-of-bounds read vulnerability. An unauthenticated attacker could leverage this vulnerability achieve arbitrary read / write system information in the context of t...

8.8CVSS0.02763EPSS
SaveExploits0References1
NVD
NVD
added 2021/08/20 7:15 p.m.17 views

CVE-2021-35986

Acrobat Reader DC versions 2021.005.20054 and earlier, 2020.004.30005 and earlier and 2017.011.30197 and earlier are affected by an Type Confusion vulnerability. An unauthenticated attacker could leverage this vulnerability to read arbitrary system information in the context of the current user...

4.3CVSS0.02721EPSS
SaveExploits0References2
OSV
OSV
added 2021/08/20 7:15 p.m.4 views

CVE-2021-35986

Acrobat Reader DC versions 2021.005.20054 and earlier, 2020.004.30005 and earlier and 2017.011.30197 and earlier are affected by an Type Confusion vulnerability. An unauthenticated attacker could leverage this vulnerability to read arbitrary system information in the context of the current user...

3.3CVSS5.9AI score0.02721EPSS
SaveExploits0References2
Prion
Prion
added 2021/08/20 7:15 p.m.25 views

Design/Logic Flaw

Acrobat Reader DC versions 2021.005.20054 and earlier, 2020.004.30005 and earlier and 2017.011.30197 and earlier are affected by an out-of-bounds read vulnerability. An unauthenticated attacker could leverage this vulnerability achieve arbitrary read / write system information in the context of t...

8.8CVSS7AI score0.02763EPSS
SaveExploits0References1Affected Software2
Cvelist
Cvelist
added 2021/08/20 6:9 p.m.34 views

CVE-2021-28637 Adobe Acrobat Pro DC PDFLibTool Out-of-Bounds Read Remote Code Execution Vulnerability

Acrobat Reader DC versions 2021.005.20054 and earlier, 2020.004.30005 and earlier and 2017.011.30197 and earlier are affected by an out-of-bounds read vulnerability. An unauthenticated attacker could leverage this vulnerability achieve arbitrary read / write system information in the context of t...

7.8CVSS8AI score0.02763EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/08/17 12:0 a.m.25 views

Discourse Information Disclosure Vulnerability (CNVD-2021-100596)

Discourse is an open source community discussion platform that includes community, email and chat room features. The platform includes community, email, and chat room features.Discourse suffers from an information disclosure vulnerability that stems from not adding a valid configuration to the...

4.3CVSS2.1AI score0.00844EPSS
SaveExploits0References1
Fedora
Fedora
added 2021/08/16 1:18 a.m.26 views

[SECURITY] Fedora 34 Update: rust-bugreport-0.4.0-2.fc34

Collect system and environment information for bug reports...

9.8CVSS1.7AI score0.01923EPSS
SaveExploits0
CNNVD
CNNVD
added 2021/08/13 12:0 a.m.8 views

Discourse 信息泄露漏洞

Discourse is an open source community discussion platform that includes community, email and chat room features. The platform includes community, email, and chat room features.Discourse suffers from an information disclosure vulnerability that stems from not adding a valid configuration to the...

4.3CVSS5.7AI score0.00844EPSS
SaveExploits0References3
Patchstack
Patchstack
added 2021/08/06 12:0 a.m.8 views

WordPress Welcart e-Commerce plugin <= 2.2.7 - Authenticated System Information Disclosure vulnerability

Authenticated System Information Disclosure vulnerability discovered by Jerome Bruandet NinTechNet in WordPress Welcart e-Commerce plugin versions = 2.2.7. Solution Update the WordPress Welcart e-Commerce plugin to the latest available version at least 2.2.8...

2.5AI score
SaveExploits0References2Affected Software1
wpexploit
wpexploit
added 2021/08/06 12:0 a.m.118 views

Welcart e-Commerce < 2.2.8 - Authenticated System Information Disclosure

The uscesdownloadsysteminformation AJAX action of the plugin did not have capability check in place, allowing any authenticated user such as subscriber to can export data including WordPress settings, theme and plugins active/inactive along with their version, Welcart general settings and payment...

2.9AI score
SaveExploits0References1
CNNVD
CNNVD
added 2021/08/05 12:0 a.m.4 views

mySCADA myPRO 访问控制错误漏洞

mySCADA myPRO is a software application. myPRO is a professional HMI/SCADA system designed primarily for the visualization and control of industrial processes. An access control error vulnerability exists in mySCADA myPRO where the affected product allows unauthenticated access to sensitive syste...

8.2CVSS7.3AI score0.00822EPSS
SaveExploits0References6
CNVD
CNVD
added 2021/07/14 12:0 a.m.44 views

Adobe Acrobat/Reader Out-of-Bounds Reading Vulnerability (CNVD-2021-70143)

Adobe Acrobat is a PDF editing software developed by Adobe. Adobe Reader also known as Acrobat Reader is a PDF file reader developed by Adobe. Adobe Acrobat/Reader has an out-of-bounds read vulnerability. An attacker can use the vulnerability to achieve arbitrary read/write system information in...

8.8CVSS3.5AI score0.02763EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/07/13 11:0 p.m.4 views

CVE-2021-28637

Acrobat Reader DC versions 2021.005.20054 and earlier, 2020.004.30005 and earlier and 2017.011.30197 and earlier are affected by an out-of-bounds read vulnerability. An unauthenticated attacker could leverage this vulnerability achieve arbitrary read / write system information in the context of t...

8.8CVSS5.6AI score0.02763EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2021/07/13 11:0 p.m.4 views

CVE-2021-35986

Acrobat Reader DC versions 2021.005.20054 and earlier, 2020.004.30005 and earlier and 2017.011.30197 and earlier are affected by an Type Confusion vulnerability. An unauthenticated attacker could leverage this vulnerability to read arbitrary system information in the context of the current user...

4.3CVSS6AI score0.02721EPSS
SaveExploits0References3
CNVD
CNVD
added 2021/07/09 12:0 a.m.11 views

QSAN Storage Manager Information Disclosure Vulnerability

QSAN Storage Manager is a NAS operating system from Quantium Technologies Incorporated QSAN. An information disclosure vulnerability exists in QSAN Storage Manager, which stems from not adding effective privilege controls to the Access to System Information feature. The vulnerability can be...

5.3CVSS6.3AI score0.01072EPSS
SaveExploits0References1
NVD
NVD
added 2021/07/07 2:15 p.m.24 views

CVE-2021-32528

Observable behavioral discrepancy vulnerability in QSAN Storage Manager allows remote attackers to obtain the system information without permissions. Suggest contacting with QSAN and refer to recommendations in QSAN Document...

5.3CVSS0.01072EPSS
SaveExploits0References1
CVE
CVE
added 2021/07/07 2:12 p.m.56 views

CVE-2021-32528

CVE-2021-32528 affects QSAN Storage Manager, where an information-disclosure flaw exists in the Access to System Information feature. The underlying issue allows remote attackers to obtain system information without privileges, per multiple sources (NVD/CNVD). Impact is information exposure witho...

5.3CVSS5.2AI score0.01072EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/07/07 2:12 p.m.25 views

CVE-2021-32528 QSAN Storage Manager - Exposure of Sensitive Information to an Unauthorized Actor

Observable behavioral discrepancy vulnerability in QSAN Storage Manager allows remote attackers to obtain the system information without permissions. Suggest contacting with QSAN and refer to recommendations in QSAN Document...

5.3CVSS5.5AI score0.01072EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/07/07 12:12 p.m.6 views

CVE-2021-32528

Observable behavioral discrepancy vulnerability in QSAN Storage Manager allows remote attackers to obtain the system information without permissions. Suggest contacting with QSAN and refer to recommendations in QSAN Document...

5.3CVSS6.2AI score0.01072EPSS
SaveExploits0References2
Rows per page
Query Builder