Lucene search
+L

308 matches found

Mend
Mend
•added 2020/01/10 1:28 p.m.•2 views

CVE-2013-6430

The JavaScriptUtils.javaScriptEscape method in web/util/JavaScriptUtils.java in Spring MVC in Spring Framework before 3.2.2 does not properly escape certain characters, which allows remote attackers to conduct cross-site scripting XSS attacks via a 1 line separator or 2 paragraph separator Unicod...

5.4CVSS0.01774EPSS
SaveExploits0References10
OSV
OSV
•added 2019/12/29 5:15 a.m.•15 views

CVE-2019-20055

LuquidPixels LiquiFire OS 4.8.0 allows SSRF via the call%3Durl substring followed by a URL in square brackets...

6.5CVSS5.8AI score0.0092EPSS
SaveExploits1References1
Prion
Prion
•added 2019/12/29 5:15 a.m.•22 views

Server side request forgery (ssrf)

LuquidPixels LiquiFire OS 4.8.0 allows SSRF via the call%3Durl substring followed by a URL in square brackets...

6.4CVSS6.5AI score0.0092EPSS
SaveExploits1References1Affected Software1
OSV
OSV
•added 2019/12/19 8:15 p.m.•24 views

CVE-2019-8255

Brackets versions 1.14 and earlier have a command injection vulnerability. Successful exploitation could lead to arbitrary code execution...

9.8CVSS7.9AI score
SaveExploits0References1
NVD
NVD
•added 2019/12/19 8:15 p.m.•36 views

CVE-2019-8255

Brackets versions 1.14 and earlier have a command injection vulnerability. Successful exploitation could lead to arbitrary code execution...

10CVSS9.8AI score0.06583EPSS
SaveExploits0References1
Prion
Prion
•added 2019/12/19 8:15 p.m.•34 views

Command injection

Brackets versions 1.14 and earlier have a command injection vulnerability. Successful exploitation could lead to arbitrary code execution...

10CVSS9.8AI score0.06583EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2019/12/19 7:38 p.m.•45 views

CVE-2019-8255

Brackets versions 1.14 and earlier have a command injection vulnerability. Successful exploitation could lead to arbitrary code execution...

9.9AI score0.06583EPSS
SaveExploits0References1
CVE
CVE
•added 2019/12/19 7:38 p.m.•805 views

CVE-2019-8255

CVE-2019-8255 affects Adobe Brackets up to version 1.14. It is a command-injection vulnerability that could allow arbitrary code execution on successful exploitation. CVSSv3.1 base score 9.8 (CRITICAL). The supplied documents do not specify a patched version or remediation steps.

10CVSS9.7AI score0.06583EPSS
SaveExploits0References1Affected Software1
OpenVAS
OpenVAS
•added 2019/12/12 12:00 a.m.•27 views

Adobe Brackets Command Injection Vulnerability (APSB19-57) - Mac OS X

Adobe Brackets is prone to a command injection vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:brackets"; if...

10CVSS9.4AI score0.06583EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2019/12/12 12:00 a.m.•49 views

Adobe Brackets Command Injection Vulnerability (APSB19-57) - Linux

Adobe Brackets is prone to a command injection vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:brackets"; if...

10CVSS9.4AI score0.06583EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2019/12/12 12:00 a.m.•44 views

Adobe Brackets Command Injection Vulnerability (APSB19-57) - Windows

Adobe Brackets is prone to a command injection vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:brackets"; if...

10CVSS9.4AI score0.06583EPSS
SaveExploits0References2
CNVD
CNVD
•added 2019/12/11 12:00 a.m.•46 views

Adobe Brackets Command Injection Vulnerability

Adobe Brackets is the U.S. Odo than Adobe company's an open source based on HTML/CSS/JavaScript development and run on the native shell of the integrated development environment . A command injection vulnerability exists in Adobe Brackets. An attacker can exploit the vulnerability to execute code...

10CVSS7.8AI score0.06583EPSS
SaveExploits0References1
Qualys Blog
Qualys Blog
•added 2019/12/10 7:04 p.m.•71 views

December 2019 Patch Tuesday – 36 Vulns, 7 Critical, Actively Attacked Win32k vuln, Adobe vulns

This month's Patch Tuesday is rather light and addresses 36 vulnerabilities, with only 7 labeled as Critical. Five of the seven Critical vulns are in Git for Visual Studio. The others are for Hyper-V and Win32k. Also, there is one actively attacked "Important" vuln in Win32k. Adobe released patch...

9.3CVSS8.2AI score0.74438EPSS
SaveExploits11
The Hacker News
The Hacker News
•added 2019/12/10 4:58 p.m.•24 views

Adobe Releases Patches for 'Likely Exploitable' Critical Vulnerabilities

The last Patch Tuesday of 2019 is finally here. Adobe today released updates for four of its widely used software—including Adobe Acrobat and Reader, Photoshop CC, ColdFusion, and Brackets—to patch a total of 25 new security vulnerabilities. Seventeen of these flaws have been rated as critical in...

1AI score
SaveExploits0
The Hacker News
The Hacker News
•added 2019/12/10 4:58 p.m.•10 views

Adobe Releases Patches for 'Likely Exploitable' Critical Vulnerabilities

The last Patch Tuesday of 2019 is finally here. Adobe today released updates for four of its widely used software—including Adobe Acrobat and Reader, Photoshop CC, ColdFusion, and Brackets—to patch a total of 25 new security vulnerabilities. Seventeen of these flaws have been rated as critical in...

6.4AI score
SaveExploits0
ThreatPost
ThreatPost
•added 2019/12/10 4:37 p.m.•58 views

Adobe Fixes 17 Critical Acrobat, Photoshop and Brackets Flaws

Adobe Systems is stomping out 17 critical vulnerabilities in Acrobat Reader, Photoshop and Brackets, which could lead to arbitrary code execution if exploited. Overall, Adobe released patches – as part of its regularly-scheduled updates – addressing 25 CVEs across various products, including its...

10CVSS8.6AI score0.34676EPSS
SaveExploits3References14
Positive Technologies
Positive Technologies
•added 2019/12/10 12:00 a.m.•4 views

PT-2019-5991

Name of the Vulnerable Software and Affected Versions Brackets versions 1.14 and earlier Description The issue is related to a lack of data sanitization at the management level in the text editor. It may allow a remote attacker to execute arbitrary commands in the target system, potentially leadi...

10CVSS0.06583EPSS
SaveExploits0References4
CISA
CISA
•added 2019/12/10 12:00 a.m.•15 views

Adobe Releases Security Updates

Adobe has released security updates to address vulnerabilities in multiple Adobe products. An attacker could exploit some of these vulnerabilities to take control of an affected system. The Cybersecurity and Infrastructure Security Agency CISA encourages users and administrators to review the...

7AI score
SaveExploits0References4
Symantec
Symantec
•added 2019/12/10 12:00 a.m.•586 views

Adobe Brackets CVE-2019-8255 Unspecified Command Injection Vulnerability

Description Adobe Brackets is prone to an unspecified command-injection vulnerability. Successfully exploiting this issue may allow an attacker to execute arbitrary code in the context of the affected application. Failed exploit attempts may cause a denial-of-service condition. Brackets 1.14 and...

1.1AI score0.06583EPSS
SaveExploits0Affected Software1
Adobe
Adobe
•added 2019/12/10 12:00 a.m.•847 views

APSB19-57 Security update available for Brackets

Adobe has released a security update for Brackets for Windows, macOS and Linux. This update addresses a critical vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user...

10CVSS9.8AI score0.06583EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder