Lucene search
K

1835 matches found

ATTACKERKB
ATTACKERKB
added 2023/11/28 3:15 p.m.1 views

CVE-2023-49313

A dylib injection vulnerability in XMachOViewer 0.04 allows attackers to compromise integrity. By exploiting this, unauthorized code can be injected into the product's processes, potentially leading to remote control and unauthorized access to sensitive user data...

9.8CVSS5.9AI score0.0132EPSS
Exploits2References3
OSV
OSV
added 2023/11/28 3:15 p.m.19 views

CVE-2023-49313

A dylib injection vulnerability in XMachOViewer 0.04 allows attackers to compromise integrity. By exploiting this, unauthorized code can be injected into the product's processes, potentially leading to remote control and unauthorized access to sensitive user data...

9.8CVSS7.3AI score0.0132EPSS
Exploits2References2
Prion
Prion
added 2023/11/28 3:15 p.m.11 views

Design/Logic Flaw

A dylib injection vulnerability in XMachOViewer 0.04 allows attackers to compromise integrity. By exploiting this, unauthorized code can be injected into the product's processes, potentially leading to remote control and unauthorized access to sensitive user data...

7.5CVSS7.5AI score0.0132EPSS
Exploits2References2Affected Software1
Veracode
Veracode
added 2023/11/28 12:57 p.m.22 views

Remote Code Execution

GIMP GNU Image Manipulation Program is vulnerable to Remote Code Execution RCE. The vulnerability is caused due to a parsing flaw which allows an unauthenticated, remote attacker to trick a GIMP user into opening a malicious DDS file. This can lead to the execution of unauthorized code within the...

7.8CVSS7.8AI score0.27307EPSS
Exploits0References3Affected Software2
Veracode
Veracode
added 2023/11/28 12:57 p.m.21 views

Remote Code Execution

GIMP GNU Image Manipulation Program is vulnerable to Remote Code Execution RCE. The vulnerability is caused due to a parsing flaw which allows an unauthenticated, remote attacker to trick a GIMP user into opening a malicious PSD file. This can lead to the execution of unauthorized code within the...

7.8CVSS7.8AI score0.61427EPSS
Exploits0References3Affected Software1
Veracode
Veracode
added 2023/11/28 12:57 p.m.24 views

Remote Code Execution

GIMP GNU Image Manipulation Program is vulnerable to Remote Code Execution RCE. The vulnerability is caused due to a parsing flaw which allows an unauthenticated, remote attacker to trick a GIMP user into opening a malicious PSP file. This can lead to the execution of unauthorized code within the...

7.8CVSS7.8AI score0.93007EPSS
Exploits0References3Affected Software1
Veracode
Veracode
added 2023/11/28 12:56 p.m.23 views

Remote Code Execution

GIMP GNU Image Manipulation Program is vulnerable to Remote Code Execution RCE. The vulnerability is caused due to a parsing flaw which allows an unauthenticated, remote attacker to trick a GIMP user into opening a malicious PSP file. This can lead to the execution of unauthorized code within the...

7.8CVSS7.8AI score0.56404EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2023/11/28 12:0 a.m.31 views

CVE-2023-49313

A dylib injection vulnerability in XMachOViewer 0.04 allows attackers to compromise integrity. By exploiting this, unauthorized code can be injected into the product's processes, potentially leading to remote control and unauthorized access to sensitive user data...

9.7AI score0.0132EPSS
Exploits2References2
CVE
CVE
added 2023/11/28 12:0 a.m.35 views

CVE-2023-49313

CVE-2023-49313 describes a dylib injection vulnerability in XMachOViewer 0.04 that allows unauthorized code to be injected into the product’s processes, potentially enabling remote control and access to sensitive user data. Root cause: dylib injection into XMachOViewer processes. Public entries f...

9.8CVSS9.4AI score0.0132EPSS
Exploits2References2Affected Software1
CNNVD
CNNVD
added 2023/11/28 12:0 a.m.2 views

XMachOViewer Security Vulnerability

XMachOViewer is a Mach-O viewer for Windows, Linux and MacOS by Hors Personal Developers. A security vulnerability exists in XMachOViewer version 0.04, which stems from the fact that unauthorized code can be injected into XMachOViewer processes, leading to remote control and unauthorized access t...

9.8CVSS7AI score0.0132EPSS
Exploits2References2
GithubExploit
GithubExploit
added 2023/11/27 11:59 p.m.33 views

Exploit for Code Injection in Horsicq Xmachoviewer

CVE-2023-49313 A dylib injection vulnerability in XMachOViewer...

9.8CVSS9.6AI score0.0132EPSS
Exploits2
OSV
OSV
added 2023/11/22 2:15 a.m.5 views

CVE-2021-37942

A local privilege escalation issue was found with the APM Java agent, where a user on the system could attach a malicious plugin to an application running the APM Java agent. By using this vulnerability, an attacker could execute code at a potentially higher level of permissions than their user...

7.8CVSS7.8AI score
Exploits0References2
CNVD
CNVD
added 2023/11/17 12:0 a.m.8 views

Fortinet FortiSIEM Command Execution Vulnerability (CNVD-2024-13756)

Fortinet FortiSIEM is a suite of security information and event management systems from the American company Fiat Fortinet. The system includes features such as asset discovery, workflow automation and unified management. Fortinet FortiSIEM suffers from a command execution vulnerability that stem...

9.8CVSS7.4AI score0.01877EPSS
Exploits0References1
CNVD
CNVD
added 2023/11/17 12:0 a.m.6 views

Fortinet FortiWLM SQL Injection Vulnerability (CNVD-2024-13757)

Fortinet FortiWLM is a wireless manager from Fortinet, Inc. Fortinet FortiWLM suffers from a SQL injection vulnerability that stems from the application's lack of validation of externally entered SQL statements. An attacker could use this vulnerability to execute unauthorized code or commands via...

9.8CVSS8AI score0.28783EPSS
Exploits0References1
Prion
Prion
added 2023/11/16 9:15 p.m.15 views

Design/Logic Flaw

In Splunk Enterprise versions below 9.0.7 and 9.1.2, ineffective escaping in the “Show syntax Highlighted” feature can result in the execution of unauthorized code in a user’s web browser...

4.3CVSS7.4AI score0.00475EPSS
Exploits0References2Affected Software2
Cvelist
Cvelist
added 2023/11/16 8:15 p.m.18 views

CVE-2023-46213 Cross-site Scripting (XSS) on “Show Syntax Highlighted” View in Search Page

In Splunk Enterprise versions below 9.0.7 and 9.1.2, ineffective escaping in the “Show syntax Highlighted” feature can result in the execution of unauthorized code in a user’s web browser...

4.8CVSS5.6AI score0.00475EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2023/11/16 1:34 a.m.50 views

CVE-2023-44442

A parsing vulnerability was found in the GNU Image Manipulation Program GIMP. This flaw allows an unauthenticated, remote attacker to trick a GIMP user into opening a malicious PSD file, possibly enabling the execution of unauthorized code within the GIMP process. Mitigation Mitigation for this...

7.8CVSS6.8AI score0.61427EPSS
Exploits0References5
RedhatCVE
RedhatCVE
added 2023/11/16 1:30 a.m.492 views

CVE-2023-44444

A parsing vulnerability was found in the GNU Image Manipulation Program GIMP. This flaw allows an unauthenticated, remote attacker to trick a GIMP user into opening a malicious PSP file, possibly enabling the execution of unauthorized code within the GIMP process. Mitigation Mitigation for this...

7.8CVSS6.8AI score0.56404EPSS
Exploits0References5
RedhatCVE
RedhatCVE
added 2023/11/16 1:29 a.m.34 views

CVE-2023-44443

A parsing vulnerability was found in the GNU Image Manipulation Program GIMP. This flaw allows an unauthenticated, remote attacker to trick a GIMP user into opening a malicious PSP file, possibly enabling the execution of unauthorized code within the GIMP process. Mitigation Mitigation for this...

7.8CVSS6.8AI score0.93007EPSS
Exploits0References5
Prion
Prion
added 2023/11/15 4:15 a.m.13 views

Design/Logic Flaw

A CWE-494 Download of Code Without Integrity Check vulnerability exists that could allow modified firmware to be uploaded when an authorized admin user begins a firmware update procedure which could result in full control over the device...

3.3CVSS7.3AI score0.00306EPSS
Exploits0References1
Rows per page
Query Builder