Lucene search
+L

2487 matches found

BDU FSTEC
BDU FSTEC
•added 2021/12/20 12:00 a.m.•16 views

The vulnerability of the PDF editing software Foxit PhantomPDF and the text viewing software Foxit Reader for Windows operating systems arises from allowing operations beyond the buffer boundaries in memory, enabling attackers to execute arbitrary code.

The vulnerability of the Foxit PhantomPDF PDF editing program and the Foxit Reader text viewing program for Windows operating systems relates to the execution of operations beyond the buffer in memory when processing annotation objects. Exploiting this vulnerability allows a malicious actor to...

10CVSS6.6AI score0.0032EPSS
SaveExploits0References7Affected Software2
BDU FSTEC
BDU FSTEC
•added 2021/12/20 12:00 a.m.•18 views

The vulnerability of the PDF editing software Foxit PhantomPDF and the text viewing software Foxit Reader for Windows operating systems arises from allowing operations beyond the buffer boundaries in memory, enabling attackers to execute arbitrary code.

The vulnerability of the Foxit PhantomPDF PDF editing program and the Foxit Reader text viewing program for Windows operating systems relates to the execution of operations beyond the buffer in memory when processing annotation objects. Exploiting this vulnerability allows a malicious actor to...

10CVSS8AI score0.00349EPSS
SaveExploits0References7Affected Software2
BDU FSTEC
BDU FSTEC
•added 2021/12/17 12:00 a.m.•18 views

The vulnerability of the PDF editing software Foxit PhantomPDF and the text viewing software Foxit Reader for Windows operating systems arises from allowing operations beyond the buffer boundaries in memory, enabling attackers to execute arbitrary code.

The vulnerability of the Foxit PhantomPDF PDF editing program and the Foxit Reader text viewing program for Windows operating systems relates to the execution of operations beyond the buffer in memory when processing annotation objects. Exploiting this vulnerability allows a malicious actor to...

10CVSS8AI score0.00349EPSS
SaveExploits0References7Affected Software2
BDU FSTEC
BDU FSTEC
•added 2021/12/17 12:00 a.m.•18 views

The vulnerability of the PDF editing software Foxit PhantomPDF and the text viewing software Foxit Reader for Windows operating systems arises from allowing operations beyond the buffer boundaries in memory, enabling attackers to execute arbitrary code.

The vulnerability of the Foxit PhantomPDF PDF editing program and the Foxit Reader text viewing program for Windows operating systems relates to the execution of operations beyond the buffer in memory when processing annotation objects. Exploiting this vulnerability allows a malicious actor to...

10CVSS8AI score0.00349EPSS
SaveExploits0References7Affected Software2
BDU FSTEC
BDU FSTEC
•added 2021/12/17 12:00 a.m.•16 views

The vulnerability of the PDF editing software Foxit PhantomPDF and the text viewing software Foxit Reader for Windows operating systems arises from allowing operations beyond the buffer boundaries in memory, enabling attackers to execute arbitrary code.

The vulnerability of the Foxit PhantomPDF PDF editing program and the Foxit Reader text viewing program for Windows operating systems relates to the execution of operations beyond the buffer in memory when processing annotation objects. Exploiting this vulnerability allows a malicious actor to...

10CVSS8AI score0.00349EPSS
SaveExploits0References7Affected Software2
BDU FSTEC
BDU FSTEC
•added 2021/12/16 12:00 a.m.•14 views

The vulnerability of the PDF editing software Foxit PhantomPDF and the text viewing software Foxit Reader for Windows operating systems arises from allowing operations beyond the buffer boundaries in memory, enabling attackers to execute arbitrary code.

The vulnerability of the Foxit PhantomPDF PDF editing program and the Foxit Reader text viewing program for Windows operating systems relates to the execution of operations beyond the buffer in memory when processing annotation objects. Exploiting this vulnerability allows a malicious actor to...

10CVSS8AI score0.00349EPSS
SaveExploits0References7Affected Software2
Gitee
Gitee
•added 2021/12/08 6:30 p.m.•14 views

nuclei-templates

This is a GitHub repository for a community-driven project called "Nuclei Templates". The project provides a collection of templates for the Nuclei engine to find security vulnerabilities in applications. The repository contains various files and workflows for managing and updating the templates,...

7.1AI score
SaveExploits0
RedHat Linux
RedHat Linux
•added 2021/12/02 4:17 p.m.•11 views

xstream: Infinite loop DoS via unsafe deserialization of sun.reflect.annotation.AnnotationInvocationHandler

XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to allocate 100% CPU time on the target system depending on CPU type or parallel execution of such a payload resulting in a denial of service only by...

6.5CVSS7.4AI score0.05918EPSS
SaveExploits1References5
BDU FSTEC
BDU FSTEC
•added 2021/12/01 12:00 a.m.•17 views

The vulnerability of the cloud-based video conversion, annotation, and format conversion application for Adobe Prelude involves writing data beyond the buffer boundaries into memory, allowing an attacker to execute arbitrary code.

The vulnerability of the cloud-based application for video digitization, annotation, and format conversion in Adobe Prelude involves writing data beyond the buffer boundaries into memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

7.8CVSS7.7AI score0.02012EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2021/12/01 12:00 a.m.•19 views

The vulnerability of the cloud-based video conversion, annotation, and format conversion application for Adobe Prelude involves writing data beyond the buffer boundaries into memory, allowing an attacker to execute arbitrary code.

The vulnerability of the cloud-based application for video digitization, annotation, and format conversion in Adobe Prelude involves writing data beyond the buffer boundaries into memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

7.8CVSS7.7AI score0.02061EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2021/12/01 12:00 a.m.•24 views

The vulnerability of the cloud-based video conversion, annotation, and format conversion application for Adobe Prelude involves a pointer manipulation issue, which allows an attacker to cause a service failure.

The vulnerability of the cloud-based application for video digitization, annotation, and format conversion in Adobe Prelude is related to the handling of a null pointer. Exploiting this vulnerability could allow an attacker to cause service interruptions remotely...

7.1CVSS6.5AI score0.01225EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2021/12/01 12:00 a.m.•16 views

The vulnerability of the cloud-based video conversion, annotation, and format conversion application for Adobe Prelude involves writing data beyond the buffer boundaries into memory, allowing an attacker to execute arbitrary code.

The vulnerability of the cloud-based application for video digitization, annotation, and format conversion in Adobe Prelude involves writing data beyond the buffer boundaries into memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

7.8CVSS7.7AI score0.02061EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2021/11/25 12:00 a.m.•15 views

The vulnerability of the cloud-based video conversion, annotation, and format conversion application for Adobe Prelude involves writing data beyond the buffer boundaries into memory, allowing an attacker to execute arbitrary code.

The vulnerability of the cloud-based application for video digitization, annotation, and format conversion in Adobe Prelude involves writing data beyond the buffer boundaries into memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

7.8CVSS7.7AI score0.01775EPSS
SaveExploits0References4Affected Software1
RedHat Linux
RedHat Linux
•added 2021/11/23 10:34 a.m.•29 views

xstream: Infinite loop DoS via unsafe deserialization of sun.reflect.annotation.AnnotationInvocationHandler

XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to allocate 100% CPU time on the target system depending on CPU type or parallel execution of such a payload resulting in a denial of service only by...

6.5CVSS7.4AI score0.05918EPSS
SaveExploits1References5
BDU FSTEC
BDU FSTEC
•added 2021/11/17 12:00 a.m.•15 views

The vulnerability of the cloud-based video conversion, annotation, and format conversion application for Adobe Prelude involves writing data beyond the buffer boundaries into memory, allowing an attacker to execute arbitrary code.

The vulnerability of the cloud-based application for video digitization, annotation, and format conversion in Adobe Prelude involves writing data beyond the buffer boundaries into memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

7.8CVSS7.7AI score0.01775EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2021/11/17 12:00 a.m.•21 views

The vulnerability of the cloud-based video conversion, annotation, and format conversion application for Adobe Prelude involves writing data beyond the buffer boundaries into memory, allowing an attacker to execute arbitrary code.

The vulnerability of the cloud-based application for video digitization, annotation, and format conversion in Adobe Prelude involves writing data beyond the buffer boundaries into memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

7.8CVSS7.7AI score0.01746EPSS
SaveExploits0References4Affected Software1
OSV
OSV
•added 2021/11/15 11:27 p.m.•31 views

GHSA-P9M8-27X8-RG87 Critical vulnerability found in cron-utils

Impact A Template Injection was identified in cron-utils enabling attackers to inject arbitrary Java EL expressions, leading to unauthenticated Remote Code Execution RCE vulnerability. Versions up to 9.1.2 are susceptible to this vulnerability. Please note, that only projects using the @Cron...

10CVSS7.4AI score0.04349EPSS
SaveExploits1References6
NVD
NVD
•added 2021/11/15 9:15 p.m.•51 views

CVE-2021-41269

cron-utils is a Java library to define, parse, validate, migrate crons as well as get human readable descriptions for them. In affected versions A template Injection was identified in cron-utils enabling attackers to inject arbitrary Java EL expressions, leading to unauthenticated Remote Code...

10CVSS0.04349EPSS
SaveExploits1References4
attackerkb
attackerkb
•added 2021/11/15 9:15 p.m.•16 views

CVE-2021-41269

cron-utils is a Java library to define, parse, validate, migrate crons as well as get human readable descriptions for them. In affected versions A template Injection was identified in cron-utils enabling attackers to inject arbitrary Java EL expressions, leading to unauthenticated Remote Code...

10CVSS7AI score0.04349EPSS
SaveExploits1References5Affected Software1
Prion
Prion
•added 2021/11/15 9:15 p.m.•32 views

Remote code execution

cron-utils is a Java library to define, parse, validate, migrate crons as well as get human readable descriptions for them. In affected versions A template Injection was identified in cron-utils enabling attackers to inject arbitrary Java EL expressions, leading to unauthenticated Remote Code...

6.8CVSS9.8AI score0.04349EPSS
SaveExploits1References4Affected Software1
Rows per page
Query Builder