Unspecified Vulnerability in Foxit 3D Plugin Beta

Foxit Reader is a Chinese Foxit Foxit software company of a PDF document reader.Foxit PhantomPDF is a commercial version.Foxit 3D Plugin Beta is one of the 3D plugin. A security vulnerability exists in versions prior to Foxit 3D Plugin Beta 9.4.0.16807 for Foxit Reader and PhantomPDF. No details ...

CVE-2019-6983

An issue was discovered in Foxit 3D Plugin Beta before 9.4.0.16807 for Foxit Reader and PhantomPDF. The application could encounter an Integer Overflow and crash during the handling of certain PDF files that embed specifically crafted 3D content, because of a free of valid memory...

CVE-2019-6982

An issue was discovered in Foxit 3D Plugin Beta before 9.4.0.16807 for Foxit Reader and PhantomPDF. The application could encounter an Out-of-Bounds Write and crash during the handling of certain PDF files that embed specifically crafted 3D content, because of the improper handling of a logic...

CVE-2019-6984

Foxit 3D Plugin Beta (before 9.4.0.16807) for Foxit Reader/PhantomPDF is affected. The issue can trigger Use-After-Free or Type Confusion and crash when parsing certain PDFs that embed crafted 3D content, caused by a wild pointer. Affected component is the Foxit 3D Plugin Beta prior to version 9....

CVE-2019-6985

CVE-2019-6985 affects Foxit 3D Plugin Beta prior to 9.4.0.16807 for Foxit Reader/PhantomPDF. The issue is an out-of-bounds read in Indexing or a heap overflow caused by an array access violation when handling PDF files that embed crafted 3D content, leading to a crash. No exploitation details are...

CVE-2019-6983

The CVE-2019-6983 issue affects Foxit 3D Plugin Beta in Foxit Reader/PhantomPDF prior to 9.4.0.16807. The vulnerability is an Integer Overflow in the 3D content handling path that can cause a crash via freeing memory in certain crafted PDF files containing 3D content. No exploit details are provi...

CVE-2019-6803

typora through 0.9.9.20.3 beta has XSS, with resultant remote command execution, via the left outline bar...

GHSA-4P24-VMCR-4GQJ Bootstrap Cross-site Scripting vulnerability

In Bootstrap 2.x from 2.0.4, 3.x before 3.4.0 and 4.x-beta before 4.0.0-beta.2, XSS is possible in the data-target attribute. Note that this is a different vulnerability than CVE-2018-14041. See https://blog.getbootstrap.com/2018/12/13/bootstrap-3-4-0/ for more info...

WinSCP Arbitrary File Overwrite Vulnerability - Windows

WinSCP is prone to an arbitrary file overwrie vulnerability SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:winscp:winscp";...

CVE-2016-10735

In Bootstrap 3.x before 3.4.0 and 4.x-beta before 4.0.0-beta.2, XSS is possible in the data-target attribute, a different vulnerability than CVE-2018-14041...

CVE-2016-10735

In Bootstrap 3.x before 3.4.0 and 4.x-beta before 4.0.0-beta.2, XSS is possible in the data-target attribute, a different vulnerability than CVE-2018-14041...

CVE-2018-20675

D-Link DIR-822 C1 before v3.11B01Beta, DIR-822-US C1 before v3.11B01Beta, DIR-850L A before v1.21B08Beta, DIR-850L B before v2.22B03Beta, and DIR-880L A before v1.20B02Beta devices allow authentication bypass...

CVE-2018-20613

TEMMOKU T1.09 Beta allows admin/user/add CSRF...

CVE-2018-20613

TEMMOKU T1.09 Beta allows admin/user/add CSRF...

Cross site request forgery (csrf)

TEMMOKU T1.09 Beta allows admin/user/add CSRF...

CVE-2018-20613

TEMMOKU T1.09 Beta allows admin/user/add CSRF...

CVE-2018-20613

CVE-2018-20613 is described as a CSRF issue in TEMMOKU T1.09 Beta that could allow admin/user/add actions. The connected documents do not provide concrete technical details (no affected versions, root cause, impact, or fixes) beyond noting CSRF. No exploitation details are present in the provided...

beta.medworm.com XSS vulnerability

Open Bug Bounty ID: OBB-714983 Description| Value ---|--- Affected Website:| beta.medworm.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...

1Password for macOS Information Disclosure Vulnerability

1Password for macOS is a macOS-based application for storing and managing personal passwords. An information disclosure vulnerability exists in version 7.2.3.BETA prior to 1Password 7.2.3.BETA-3 for macOS-based platforms, which can be exploited by attackers to obtain sensitive information...

Frappe ERPNext SQL Injection Vulnerability (CNVD-2019-17163)

Frappe ERPNext is an open source ERP Enterprise Resource Planning system. The system includes functions for financial management, inventory management, customer relationship management, project management and human resource management. A SQL injection vulnerability exists in Frappe ERPNext versio...