Lucene search
+L

10750 matches found

Positive Technologies
Positive Technologies
added 2024/03/13 12:00 a.m.12 views

PT-2024-20745 · Unknown · Tnc Pdf Viewer

Name of the Vulnerable Software and Affected Versions: TNC PDF viewer versions 2.8.0 and earlier Description: The issue is related to improper neutralization of input during web page generation, which leads to a Cross-site Scripting XSS vulnerability, specifically Stored XSS. This allows maliciou...

6.5CVSS8.3AI score0.00419EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2024/03/13 12:00 a.m.11 views

WordPress Plugin TNC PDF viewer Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports PHP and MySQL server set up a personal blog site. WordPress plugin is an application plug-in. A cross-site scripting vulnerability...

6.5CVSS5.9AI score0.00419EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2024/03/13 12:00 a.m.38 views

SAP NetWeaver AS Java Code Injection (March 2024)

SAP NetWeaver Application Server for Java is affected by code injection vulnerability: - SAP NetWeaver Administrator AS Java Administrator Log Viewer plug-in - version 7.50, allows an attacker with high privileges to upload potentially dangerous files which leads to command injection vulnerabilit...

9.1CVSS8.2AI score0.01593EPSS
SaveExploits0References3
OSV
OSV
added 2024/03/12 1:15 a.m.10 views

CVE-2024-22127

SAP NetWeaver Administrator AS Java Administrator Log Viewer plug-in - version 7.50, allows an attacker with high privileges to upload potentially dangerous files which leads to command injection vulnerability. This would enable the attacker to run commands which can cause high impact on...

9.1CVSS5.8AI score0.01593EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/03/12 12:29 a.m.43 views

CVE-2024-22127 Code Injection vulnerability in SAP NetWeaver AS Java (Administrator Log Viewer plug-in)

SAP NetWeaver Administrator AS Java Administrator Log Viewer plug-in - version 7.50, allows an attacker with high privileges to upload potentially dangerous files which leads to command injection vulnerability. This would enable the attacker to run commands which can cause high impact on...

9.1CVSS9.8AI score0.01593EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
added 2024/03/11 12:00 a.m.21 views

Dassault Systèmes eDrawings Viewer JT File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Dassault Syst��mes eDrawings Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists withi...

7.8CVSS7.2AI score0.00338EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/03/11 12:00 a.m.26 views

Dassault Systèmes eDrawings Viewer SAT File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Dassault Syst��mes eDrawings Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists withi...

7.8CVSS7.3AI score0.00338EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/03/11 12:00 a.m.20 views

Dassault Systèmes eDrawings Viewer STL File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Dassault Syst��mes eDrawings Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists withi...

7.8CVSS7.2AI score0.00338EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/03/11 12:00 a.m.21 views

Dassault Systèmes eDrawings Viewer SAT File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Dassault Syst��mes eDrawings Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists withi...

7.8CVSS7.2AI score0.00338EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/03/11 12:00 a.m.24 views

Dassault Systèmes eDrawings Viewer SAT File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Dassault Syst��mes eDrawings Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists withi...

7.8CVSS7.2AI score0.00338EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/03/11 12:00 a.m.24 views

Dassault Systèmes eDrawings Viewer SAT File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Dassault Syst��mes eDrawings Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists withi...

7.8CVSS7.3AI score0.00338EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/03/11 12:00 a.m.17 views

Dassault Systèmes eDrawings Viewer SAT File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Dassault Syst��mes eDrawings Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists withi...

7.8CVSS7.2AI score0.00338EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/03/11 12:00 a.m.10 views

PT-2024-19217 · Sap · Sap Netweaver Administrator As Java

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver Administrator AS Java Administrator Log Viewer plug-in version 7.50 Description: The issue allows an attacker with high privileges to upload potentially dangerous files, which leads to a command injection vulnerability. This wou...

9.1CVSS7.4AI score0.01593EPSS
SaveExploits0References26
Zero Day Initiative
Zero Day Initiative
added 2024/03/11 12:00 a.m.22 views

Dassault Systèmes eDrawings Viewer JT File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Dassault Syst��mes SolidWorks eDrawings Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw...

7.8CVSS7.2AI score0.00338EPSS
SaveExploits0References1
OSV
OSV
added 2024/03/08 11:06 a.m.6 views

OESA-2024-1248 atril security update

Mate-document-viewer is simple document viewer. It can display and print Portable Document Format PDF, PostScript PS, Encapsulated PostScript EPS, DVI, DJVU, epub and XPS files. When supported by the document format, mate-document-viewer allows searching for text, copying text to the clipboard,...

7.8CVSS7.2AI score0.01016EPSS
SaveExploits3References2
OpenVAS
OpenVAS
added 2024/03/08 12:00 a.m.11 views

Fedora: Security Advisory for console-image-viewer (FEDORA-2024-129d8ca6fc)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS9.2AI score0.02578EPSS
SaveExploits3References2
Fedora
Fedora
added 2024/03/07 10:32 p.m.23 views

[SECURITY] Fedora 40 Update: console-image-viewer-1.2-24.fc40

Highly scale-able, high quality, image viewer for ANSI terminals...

8.8CVSS6.9AI score0.02578EPSS
SaveExploits3
Fedora
Fedora
added 2024/03/07 10:32 p.m.21 views

[SECURITY] Fedora 40 Update: cambozola-0.936-24.fc40

Cambozola is a very simple cheesy! viewer for multipart jpeg streams that are often pumped out by a streaming webcam server, sending over multiple images per second...

8.8CVSS7AI score0.02578EPSS
SaveExploits3
Tenable Nessus
Tenable Nessus
added 2024/03/07 12:00 a.m.48 views

Foxit PDF Reader for Mac < 2024.1 Multiple Vulnerabilities

According to its version, the Foxit PDF Reader for Mac application previously named Foxit Reader for Mac installed on the remote macOS host is prior to 2024.1. It is, therefore affected by multiple vulnerabilities: Note that Nessus has not tested for this issue but has instead relied only on the...

7.8CVSS6.2AI score0.00914EPSS
SaveExploits0References20
OSV
OSV
added 2024/03/06 11:23 a.m.65 views

BIT-GITLAB-2020-10091

GitLab 9.3 through 12.8.1 allows XSS. A cross-site scripting vulnerability was found when viewing particular file types...

6.1CVSS5.8AI score0.00691EPSS
SaveExploits0References3
Rows per page
Query Builder