Lucene search
K

53 matches found

Zero Day Initiative
Zero Day Initiative
added 2026/06/10 12:0 a.m.7 views

Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handli...

7.8CVSS5.9AI score0.00352EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2026/06/09 12:0 a.m.10 views

Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handli...

7.8CVSS5.9AI score0.00257EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2026/06/09 12:0 a.m.9 views

Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handli...

7.8CVSS5.9AI score0.00257EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2026/05/04 12:0 a.m.4 views

RHCOS 4 : OpenShift Container Platform 4.13.43 (RHSA-2024:3496)

The remote Red Hat Enterprise Linux CoreOS 4 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2024:3496 advisory. - cri-o: Arbitrary command injection via pod annotation CVE-2024-3154 Note that Nessus has not tested for this issue but has instead relied...

7.2CVSS6.4AI score0.01406EPSS
Exploits0References4
Cvelist
Cvelist
added 2026/04/27 11:0 a.m.31 views

CVE-2026-5940 Foxit PDF Editor/Reader Annotation Use-After-Free Remote Code Execution Vulnerability

Calling a function that triggers a UI refresh after removing comments via a script may access an invalidated object, leading to program crashes...

7.8CVSS0.00169EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/12/20 7:11 a.m.9 views

CVE-2025-66495

A use-after-free vulnerability exists in the annotation handling of Foxit PDF Reader before 2025.2.1, 14.0.1, and 13.2.1 on Windows and MacOS. When opening a PDF containing specially crafted JavaScript, a pointer to memory that has already been freed may be accessed or dereferenced, potentially...

7.8CVSS7.5AI score0.00255EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2025/12/09 12:0 a.m.6 views

Adobe Acrobat Reader DC Annotation Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handli...

7.8CVSS7AI score0.00427EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2021-21595

Malware in sbrugna...

7.8CVSS7.5AI score0.00349EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2024-50295

Malicious code in bioql PyPI...

8.8CVSS7.5AI score0.00875EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.9 views

EUVD-2024-50292

Malicious code in bioql PyPI...

7.8CVSS5.9AI score0.00448EPSS
Exploits0References2
Veracode
Veracode
added 2025/09/13 9:51 a.m.5 views

SQL Injection

Django is vulnerable to SQL Injection. The vulnerability is due to improper sanitization of column aliases in FilteredRelation when crafted dictionaries are expanded as keyword arguments to QuerySet.annotate or QuerySet.alias, which allows an attacker to inject and execute arbitrary SQL...

8.1CVSS8AI score0.15602EPSS
Exploits4References13Affected Software2
Tenable Nessus
Tenable Nessus
added 2025/09/03 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2020-12052

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Grafana version 6.7.3 is vulnerable for annotation popup XSS. CVE-2020-12052 Note that Nessus relies on the presence of the package as reported by the vendor...

6.1CVSS6.2AI score0.01281EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/05/22 4:30 p.m.7 views

CVE-2020-2317

Jenkins FindBugs Plugin 5.0.0 and earlier does not escape the annotation message in tooltips, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers able to provide report files to Jenkins FindBugs Plugin's post build step...

5.4CVSS5.4AI score0.00852EPSS
Exploits0
OSV
OSV
added 2025/03/25 12:15 a.m.3 views

CVE-2025-1097

A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx where the auth-tls-match-cn Ingress annotation can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx controller, and disclosure of...

8.8CVSS6.2AI score0.34288EPSS
Exploits7References3
Zero Day Initiative
Zero Day Initiative
added 2025/03/13 12:0 a.m.10 views

Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handli...

7.8CVSS6.7AI score0.00345EPSS
Exploits0References1
OSV
OSV
added 2024/11/22 10:15 p.m.3 views

CVE-2024-9251

Foxit PDF Reader Annotation Use-After-Free Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a...

7.8CVSS4.7AI score
Exploits0References2
OSV
OSV
added 2024/11/22 10:15 p.m.2 views

CVE-2024-9254

Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious...

8.8CVSS7.6AI score0.00875EPSS
Exploits0References2
OSV
OSV
added 2024/11/22 10:15 p.m.4 views

CVE-2024-9255

Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious...

7.8CVSS6.3AI score
Exploits0References2
OSV
OSV
added 2024/11/22 10:15 p.m.2 views

CVE-2024-9246

Foxit PDF Reader Annotation Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit...

7.1CVSS4.9AI score0.00488EPSS
Exploits0References2
OSV
OSV
added 2024/11/22 10:15 p.m.3 views

CVE-2024-9247

Foxit PDF Reader Annotation Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a...

7.8CVSS7.5AI score0.0043EPSS
Exploits0References2
Rows per page
Query Builder