Lucene search
+L

3557 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/01/28 12:00 a.m.•2 views

CVE-2019-6983: Integer Overflow or Wraparound

An issue was discovered in Foxit 3D Plugin Beta before 9.4.0.16807 for Foxit Reader and PhantomPDF. The application could encounter an Integer Overflow and crash during the handling of certain PDF files that embed specifically crafted 3D content, because of a free of valid memory...

6.5CVSS5.8AI score0.01117EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/01/28 12:00 a.m.•2 views

CVE-2019-6984: Use After Free

An issue was discovered in Foxit 3D Plugin Beta before 9.4.0.16807 for Foxit Reader and PhantomPDF. The application could encounter a Use-After-Free or Type Confusion and crash during handling of certain PDF files that embed specifically crafted 3D content, due to the use of a wild pointer...

6.5CVSS5.8AI score0.01117EPSS
SaveExploits0References3
NVD
NVD
•added 2019/01/25 5:29 a.m.•22 views

CVE-2019-6803

typora through 0.9.9.20.3 beta has XSS, with resultant remote command execution, via the left outline bar...

6.1CVSS6.5AI score0.01866EPSS
SaveExploits1References1
OSV
OSV
•added 2019/01/17 1:57 p.m.•1573 views

GHSA-4P24-VMCR-4GQJ Bootstrap Cross-site Scripting vulnerability

In Bootstrap 2.x from 2.0.4, 3.x before 3.4.0 and 4.x-beta before 4.0.0-beta.2, XSS is possible in the data-target attribute. Note that this is a different vulnerability than CVE-2018-14041. See https://blog.getbootstrap.com/2018/12/13/bootstrap-3-4-0/ for more info...

6.1CVSS6.6AI score0.0404EPSS
SaveExploits1References18
OpenVAS
OpenVAS
•added 2019/01/17 12:00 a.m.•41 views

WinSCP Arbitrary File Overwrite Vulnerability - Windows

WinSCP is prone to an arbitrary file overwrie vulnerability SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:winscp:winscp";...

7.5CVSS7.8AI score0.02768EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2019/01/09 5:00 a.m.•47 views

CVE-2016-10735

In Bootstrap 3.x before 3.4.0 and 4.x-beta before 4.0.0-beta.2, XSS is possible in the data-target attribute, a different vulnerability than CVE-2018-14041...

6.4AI score0.0404EPSS
SaveExploits1References13
Debian CVE
Debian CVE
•added 2019/01/09 5:00 a.m.•131 views

CVE-2016-10735

In Bootstrap 3.x before 3.4.0 and 4.x-beta before 4.0.0-beta.2, XSS is possible in the data-target attribute, a different vulnerability than CVE-2018-14041...

6.1CVSS6.8AI score0.0404EPSS
SaveExploits1
OSV
OSV
•added 2019/01/09 12:29 a.m.•13 views

CVE-2018-20675

D-Link DIR-822 C1 before v3.11B01Beta, DIR-822-US C1 before v3.11B01Beta, DIR-850L A before v1.21B08Beta, DIR-850L B before v2.22B03Beta, and DIR-880L A before v1.20B02Beta devices allow authentication bypass...

9.8CVSS5.8AI score0.01835EPSS
SaveExploits0References1
NVD
NVD
•added 2018/12/30 9:29 p.m.•22 views

CVE-2018-20613

TEMMOKU T1.09 Beta allows admin/user/add CSRF...

8.8CVSS8.7AI score0.00494EPSS
SaveExploits1References1
OSV
OSV
•added 2018/12/30 9:29 p.m.•9 views

CVE-2018-20613

TEMMOKU T1.09 Beta allows admin/user/add CSRF...

8.8CVSS5.8AI score0.00494EPSS
SaveExploits1References1
Prion
Prion
•added 2018/12/30 9:29 p.m.•17 views

Cross site request forgery (csrf)

TEMMOKU T1.09 Beta allows admin/user/add CSRF...

6.8CVSS8.7AI score0.00494EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2018/12/30 9:00 p.m.•39 views

CVE-2018-20613

TEMMOKU T1.09 Beta allows admin/user/add CSRF...

8.7AI score0.00494EPSS
SaveExploits1References1
CVE
CVE
•added 2018/12/30 9:00 p.m.•49 views

CVE-2018-20613

CVE-2018-20613 is described as a CSRF issue in TEMMOKU T1.09 Beta that could allow admin/user/add actions. The connected documents do not provide concrete technical details (no affected versions, root cause, impact, or fixes) beyond noting CSRF. No exploitation details are present in the provided...

8.8CVSS8.6AI score0.00494EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/12/30 12:00 a.m.•4 views

CVE-2018-20613: Cross-Site Request Forgery (CSRF)

TEMMOKU T1.09 Beta allows admin/user/add CSRF...

8.8CVSS5.8AI score0.00494EPSS
SaveExploits1References2
Openbugbounty
Openbugbounty
•added 2018/12/28 12:02 a.m.•8 views

beta.medworm.com XSS vulnerability

Open Bug Bounty ID: OBB-714983 Description| Value ---|--- Affected Website:| beta.medworm.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...

0.1AI score
SaveExploits0
CNVD
CNVD
•added 2018/12/25 12:00 a.m.•14 views

1Password for macOS Information Disclosure Vulnerability

1Password for macOS is a macOS-based application for storing and managing personal passwords. An information disclosure vulnerability exists in version 7.2.3.BETA prior to 1Password 7.2.3.BETA-3 for macOS-based platforms, which can be exploited by attackers to obtain sensitive information...

5.5CVSS6.1AI score0.0043EPSS
SaveExploits0References1
CNVD
CNVD
•added 2018/12/14 12:00 a.m.•16 views

Frappe ERPNext SQL Injection Vulnerability (CNVD-2019-17163)

Frappe ERPNext is an open source ERP Enterprise Resource Planning system. The system includes functions for financial management, inventory management, customer relationship management, project management and human resource management. A SQL injection vulnerability exists in Frappe ERPNext versio...

7.5CVSS8AI score0.01433EPSS
SaveExploits0References1
Openbugbounty
Openbugbounty
•added 2018/12/10 10:02 p.m.•14 views

beta-tools.com XSS vulnerability

Open Bug Bounty ID: OBB-709946 Description| Value ---|--- Affected Website:| beta-tools.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...

0.1AI score
SaveExploits0
Openbugbounty
Openbugbounty
•added 2018/12/05 2:21 p.m.•67 views

beta-wp.itsu.com XSS vulnerability

Open Bug Bounty ID: OBB-707762 Description| Value ---|--- Affected Website:| beta-wp.itsu.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...

0.1AI score
SaveExploits0
CVE
CVE
•added 2018/12/05 11:00 a.m.•79 views

CVE-2018-19859

OpenRefine before 3.2 beta is vulnerable to directory traversal via a relative pathname in a ZIP archive (CVE-2018-19859). The issue is confirmed across multiple advisories linking to OpenRefine's project import path handling. Mitigation known in the connected docs includes patches suggested by P...

6.5CVSS6.4AI score0.02441EPSS
SaveExploits1References2Affected Software1
Rows per page
Query Builder