Lucene search
+L

509 matches found

Openbugbounty
Openbugbounty
•added 2018/08/21 2:12 a.m.•10 views

greatcirclemapper.net XSS vulnerability

Open Bug Bounty ID: OBB-667375 Description| Value ---|--- Affected Website:| greatcirclemapper.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

SaveExploits0
CNVD
CNVD
•added 2018/08/01 12:00 a.m.•17 views

Foxit Reader Remote Code Execution Vulnerability (CNVD-2018-14452)

Foxit Reader for Windows is China's Foxit Foxit Software Corporation, a Windows-based platform for PDF document reader. A post-release reuse vulnerability exists in the handling of Circle annotations in Foxit Reader 9.1.0.5096 and earlier versions for Windows. A remote attacker can exploit this...

8.8CVSS8.9AI score0.02773EPSS
SaveExploits0References1
NVD
NVD
•added 2018/07/31 8:29 p.m.•32 views

CVE-2018-14296

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

8.8CVSS8.8AI score0.02773EPSS
SaveExploits0References2
OSV
OSV
•added 2018/07/31 8:29 p.m.•15 views

CVE-2018-14296

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

8.8CVSS6.1AI score0.02773EPSS
SaveExploits0References2
Prion
Prion
•added 2018/07/31 8:29 p.m.•36 views

Design/Logic Flaw

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

6.8CVSS8.8AI score0.02773EPSS
SaveExploits0References2Affected Software2
Cvelist
Cvelist
•added 2018/07/31 8:00 p.m.•37 views

CVE-2018-14296

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

8.8AI score0.02773EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/07/31 12:00 a.m.•6 views

CVE-2018-14296: Use After Free

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

8.8CVSS8AI score0.02773EPSS
SaveExploits0References3
Zero Day Initiative
Zero Day Initiative
•added 2018/07/19 12:00 a.m.•45 views

Foxit Reader Circle Annotation borderEffectStyle Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of...

8.8CVSS3.4AI score0.02773EPSS
SaveExploits0References1
Circl
Circl
•added 2018/05/29 3:50 p.m.•28 views

CVE-2013-6271

creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/post/android/manage/removelock.rb 2025-02-06 03:13:41+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:09:23+00:00| seen|...

8.8CVSS6.1AI score0.0803EPSS
SaveExploits2References1
Prion
Prion
•added 2018/04/05 7:29 p.m.•18 views

Design/Logic Flaw

An exploitable vulnerability exists in the WiFi Access Point feature of Circle with Disney running firmware 2.0.1. A series of WiFi packets can force Circle to setup an Access Point with default credentials. An attacker needs to send a series of spoofed "de-auth" packets to trigger this...

3.3CVSS6.3AI score0.00632EPSS
SaveExploits1References1Affected Software1
OSV
OSV
•added 2018/04/05 7:29 p.m.•12 views

CVE-2017-12095

An exploitable vulnerability exists in the WiFi Access Point feature of Circle with Disney running firmware 2.0.1. A series of WiFi packets can force Circle to setup an Access Point with default credentials. An attacker needs to send a series of spoofed "de-auth" packets to trigger this...

6.5CVSS5.8AI score0.00632EPSS
SaveExploits1References1
NVD
NVD
•added 2018/04/05 7:29 p.m.•20 views

CVE-2017-12095

An exploitable vulnerability exists in the WiFi Access Point feature of Circle with Disney running firmware 2.0.1. A series of WiFi packets can force Circle to setup an Access Point with default credentials. An attacker needs to send a series of spoofed "de-auth" packets to trigger this...

6.5CVSS6.4AI score0.00632EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2018/04/05 7:00 p.m.•29 views

CVE-2017-12095

An exploitable vulnerability exists in the WiFi Access Point feature of Circle with Disney running firmware 2.0.1. A series of WiFi packets can force Circle to setup an Access Point with default credentials. An attacker needs to send a series of spoofed "de-auth" packets to trigger this...

6.5CVSS6.4AI score0.00632EPSS
SaveExploits1References1
CVE
CVE
•added 2018/04/05 7:00 p.m.•74 views

CVE-2017-12095

The CVE-2017-12095 entry concerns Circle with Disney firmware 2.0.1 where the WiFi Access Point can be forced to become an AP with a default credential set. Talos details show exploitation via a de-auth packet sequence to trigger circle_ap.sh up, which launches hostapd with a fixed SSID Circle-, ...

6.5CVSS6.3AI score0.00632EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/04/05 12:00 a.m.•2 views

CVE-2017-12095: Authentication Bypass by Spoofing

An exploitable vulnerability exists in the WiFi Access Point feature of Circle with Disney running firmware 2.0.1. A series of WiFi packets can force Circle to setup an Access Point with default credentials. An attacker needs to send a series of spoofed "de-auth" packets to trigger this...

6.5CVSS6.6AI score0.00632EPSS
SaveExploits1References2
Openbugbounty
Openbugbounty
•added 2017/12/22 4:48 a.m.•19 views

nfp-si.eionet.europa.eu XSS vulnerability

Open Bug Bounty ID: OBB-457090 Description| Value ---|--- Affected Website:| nfp-si.eionet.europa.eu Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...

6.3AI score
SaveExploits0
CNVD
CNVD
•added 2017/12/21 12:00 a.m.•17 views

Remote Code Execution Vulnerability in the author Property of the Foxit Reader Circle Annotation Object

Foxit Reader is China's Foxit Foxit Software Corporation, a PDF document reader. A remote code execution vulnerability exists in the author attribute of the Circle Annotation object in Foxit Reader version 8.3.1.21155, which originates from a program failing to validate the existence of an object...

8.8CVSS8.3AI score0.0259EPSS
SaveExploits0References1
NVD
NVD
•added 2017/12/20 2:29 p.m.•33 views

CVE-2017-14831

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.1.21155. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

8.8CVSS8.8AI score0.0259EPSS
SaveExploits0References2
OSV
OSV
•added 2017/12/20 2:29 p.m.•12 views

CVE-2017-14831

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.1.21155. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

8.8CVSS6.1AI score0.0259EPSS
SaveExploits0References2
Prion
Prion
•added 2017/12/20 2:29 p.m.•20 views

Design/Logic Flaw

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.1.21155. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

6.8CVSS8.8AI score0.0259EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder