Lucene search
+L

161 matches found

CNVD
CNVD
added 2022/07/15 12:00 a.m.81 views

Adobe RoboHelp Cross-Site Scripting Vulnerability (CNVD-2022-60077)

Adobe RoboHelp is a help authoring tool developed and released for Windows by the American company Audobee Adobe. A cross-site scripting vulnerability exists in Adobe RoboHelp version 2020.0.7 and earlier, which stems from the program's lack of checksum filtering of user-supplied data and output...

6.1CVSS6AI score0.00662EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2022/07/14 12:00 a.m.75 views

Adobe RoboHelp 2020 < RH2020.0.8 XSS (APSB22-10)

The version of Adobe RoboHelp installed on the remote host is 2020 prior to RH2020.0.8. It is, therefore, affected by a cross-site scripting XSS vulnerability. An unauthenticated, remote attacker can exploit this to execute arbitrary script code. Note that Nessus has not tested for this issue but...

6.1CVSS6.7AI score0.00662EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2022/07/12 12:00 a.m.9 views

PT-2022-3679 · Adobe · Robohelp

Name of the Vulnerable Software and Affected Versions: Adobe RoboHelp versions 2020.0.7 and earlier Description: The issue is related to a reflected Cross-Site Scripting XSS vulnerability. If an attacker convinces a victim to visit a URL referencing a vulnerable page, malicious JavaScript content...

7.8CVSS6.1AI score0.00662EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2022/07/12 12:00 a.m.44 views

Adobe RoboHelp 跨站脚本漏洞

Adobe RoboHelp is a help authoring tool developed and released for Windows by the American company Audobee Adobe. A cross-site scripting vulnerability exists in Adobe RoboHelp version 2020.0.7 and earlier, which stems from the program's lack of checksum filtering of user-supplied data and output...

6.1CVSS5.6AI score0.00662EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2022/06/23 12:00 a.m.10 views

The vulnerability of server-based corporate software for monitoring and managing project knowledge bases in Adobe RoboHelp Server stems from deficiencies in the authentication process, allowing unauthorized users to escalate their privileges.

The vulnerability of server-based corporate software for project monitoring and management in Adobe RoboHelp Server is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow attackers to increase their privileges remotely...

6.8CVSS7.6AI score0.01409EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2022/06/15 12:00 a.m.8 views

Adob​​e RoboHelp 授权问题漏洞

Adobe RoboHelp is a help authoring tool developed and distributed for Windows by Adobe. An authorization issue vulnerability exists in Adobe RoboHelp and Adobe RoboHelp Server 11 Update 3 and earlier versions, which stems from a vulnerability that allows a user with non-administrative privileges ...

9CVSS7.8AI score0.01409EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2022/01/04 12:00 a.m.10 views

The vulnerability of server-based corporate software for monitoring and managing project knowledge bases in Adobe RoboHelp Server lies in its ability to load files beyond the expected directory limits, allowing attackers to execute arbitrary code.

The vulnerability of server-based corporate software for project monitoring and management in Adobe RoboHelp Server relates to the ability to load arbitrary files beyond the expected directory structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code in the...

10CVSS7.7AI score0.39401EPSS
SaveExploits0References3Affected Software1
Zero Day Initiative
Zero Day Initiative
added 2021/11/11 12:00 a.m.42 views

Adobe RoboHelp Server Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe RoboHelp Server. Authentication is required to exploit this vulnerability. The specific flaw exists within the RoboHelp server. When parsing the fileName parameter, the process does not properl...

8.8CVSS7.8AI score0.39401EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2021/11/11 12:00 a.m.36 views

Adobe RoboHelp Server < 2020.0.2 Arbitrary Code Execution (APSB21-87)

The version of Adobe RoboHelp Server installed on the remote host is affected an arbitrary code execution vulnerability. An unauthenticated, remote attacker can exploit this to bypass authentication and execute arbitrary commands on an affected system. Note that Nessus has not tested for this iss...

9.3CVSS8.3AI score0.39401EPSS
SaveExploits0References2
CNVD
CNVD
added 2021/11/10 12:00 a.m.54 views

Adobe RoboHelp Server Path Traversal Vulnerability (CNVD-2021-94145)

Adobe RoboHelp Server is a server-based application for FrameMaker and RoboHelp enterprise users. a path traversal vulnerability exists in Adobe RoboHelp Server RHS2020.0.1 and earlier versions. An attacker could exploit this vulnerability to execute arbitrary code...

9.3CVSS5.4AI score0.39401EPSS
SaveExploits0References1
OSV
OSV
added 2021/06/28 3:15 p.m.9 views

CVE-2021-28588

Adobe RoboHelp Server version 2019.0.9 and earlier is affected by a Path Traversal vulnerability when parsing a crafted HTTP POST request. An authenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue...

8.8CVSS7.8AI score0.06215EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/06/10 12:00 a.m.47 views

Adobe RoboHelp Server folderId Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe RoboHelp Server. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the RoboHelp server...

8.8CVSS4.8AI score0.06215EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/06/09 12:00 a.m.61 views

Adobe RoboHelp Server Path Traversal Vulnerability

Adobe RoboHelp Server is a server-based application for FrameMaker and RoboHelp enterprise users. A path traversal vulnerability exists in Adobe RoboHelp Server 2019.0.9 and earlier versions. An attacker can exploit this vulnerability to execute arbitrary code...

9CVSS7.3AI score0.06215EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/06/08 12:00 a.m.13 views

Adobe RoboHelp 路径遍历漏洞

Adobe RoboHelp Server is a server-based application for FrameMaker and RoboHelp enterprise users. A path traversal vulnerability exists in Adobe RoboHelp Server 2019.0.9 and earlier versions. An attacker can exploit this vulnerability to execute arbitrary code...

9CVSS6.1AI score0.06215EPSS
SaveExploits0References4
OSV
OSV
added 2021/04/19 1:15 p.m.9 views

CVE-2021-21070

Adobe Robohelp version 2020.0.3 and earlier is affected by an uncontrolled search path element vulnerability that could lead to privilege escalation. An attacker with admin permissions to write to the file system could leverage this vulnerability to escalate privileges...

6.5CVSS5.8AI score0.01598EPSS
SaveExploits0References1
NVD
NVD
added 2021/04/19 1:15 p.m.28 views

CVE-2021-21070

Adobe Robohelp version 2020.0.3 and earlier is affected by an uncontrolled search path element vulnerability that could lead to privilege escalation. An attacker with admin permissions to write to the file system could leverage this vulnerability to escalate privileges...

9.3CVSS0.01598EPSS
SaveExploits0References1
Prion
Prion
added 2021/04/19 1:15 p.m.25 views

Path traversal

Adobe Robohelp version 2020.0.3 and earlier is affected by an uncontrolled search path element vulnerability that could lead to privilege escalation. An attacker with admin permissions to write to the file system could leverage this vulnerability to escalate privileges...

9.3CVSS6.5AI score0.01598EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2021/04/19 12:28 p.m.10 views

CVE-2021-21070 Privilege Escalation Vulnerability in Adobe RoboHelp

Adobe Robohelp version 2020.0.3 and earlier is affected by an uncontrolled search path element vulnerability that could lead to privilege escalation. An attacker with admin permissions to write to the file system could leverage this vulnerability to escalate privileges...

6.5CVSS6.7AI score0.01598EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2021/04/16 12:00 a.m.45 views

Adobe RoboHelp 2020 < RH2020.0.4 Privilege Escalation (APSB21-20)

The version of Adobe RoboHelp 2020 installed on the remote host is prior to RH2020.0.4. It is, therefore, affected by a privilege escalation vulnerability as referenced in the apsb21-20 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's...

9.3CVSS6.6AI score0.01598EPSS
SaveExploits0References2
CNVD
CNVD
added 2021/04/14 12:00 a.m.17 views

Adobe RoboHelp Uncontrolled Search Path Element Vulnerability

Adobe RoboHelp is a software application from Adobe USA. Next-generation software for authoring and publishing help, strategy, and knowledge base content. Adobe RoboHelp is vulnerable to an uncontrolled search path element vulnerability. An attacker can exploit this vulnerability to elevate...

9.3CVSS6.6AI score0.01598EPSS
SaveExploits0References1
Rows per page
Query Builder