Lucene search
+L

20 matches found

BDU FSTEC
BDU FSTEC
•added 2024/05/20 12:00 a.m.•20 views

The vulnerability of the ComboBox control in the PDF viewer application for electronic documents by Foxit PDF Reader (formerly Foxit Reader) allows a hacker to execute arbitrary code.

The vulnerability of the ComboBox control in the PDF document viewing application of the Foxit PDF Reader formerly Foxit Reader is related to the use of memory after it is freed. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using a specially created file...

10CVSS8.2AI score0.15639EPSS
SaveExploits1References3Affected Software1
OSV
OSV
•added 2024/04/30 3:15 p.m.•20 views

CVE-2024-25648

A use-after-free vulnerability exists in the way Foxit Reader 2024.1.0.23997 handles a ComboBox widget. A specially crafted JavaScript code inside a malicious PDF document can trigger reuse of a previously freed object, which can lead to memory corruption and result in arbitrary code execution. A...

8.8CVSS8.1AI score0.15639EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/08/14 12:00 a.m.•3 views

CVE-2023-3266: Improperly Implemented Security Check for Standard

A non-feature complete authentication mechanism exists in the production application allowing an attacker to bypass all authentication checks if LDAP authentication is selected.An unauthenticated attacker can leverage this vulnerability to log in to the CypberPower PowerPanel Enterprise as an...

9.8CVSS8.3AI score0.00882EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/08/13 12:00 a.m.•54 views

PT-2023-23939 · Cyberpower · Cyberpower Powerpanel Enterprise

Name of the Vulnerable Software and Affected Versions: CyberPower PowerPanel Enterprise affected versions not specified Description: A non-feature complete authentication mechanism exists in the production application, allowing an attacker to bypass all authentication checks if LDAP authenticatio...

9.8CVSS9.6AI score0.00882EPSS
SaveExploits0References6
Snyk
Snyk
•added 2022/07/17 8:08 a.m.•9 views

Malicious Package

Overview monash-college-combo-box is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...

9.8CVSS7.1AI score
SaveExploits0References3
Microsoft KB
Microsoft KB
•added 2022/06/14 12:00 a.m.•22 views

June 14, 2022-KB5013887 Cumulative Update for .NET Framework 3.5 and 4.8 for Windows 10, version 20H2, Windows Server, version 20H2, Windows 10 Version 21H1, and Windows 10 Version 21H2

None None...

6.1AI score
SaveExploits0
Microsoft KB
Microsoft KB
•added 2019/09/24 12:00 a.m.•22 views

September 24, 2019 — KB4515841 Cumulative Update for .NET Framework 4.8 for Windows 10, version 1709

None None...

5.3AI score
SaveExploits0
OSV
OSV
•added 2019/01/24 4:29 a.m.•14 views

CVE-2018-17703

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.2.0.9297. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

8.8CVSS6.2AI score0.03855EPSS
SaveExploits0References2
OSV
OSV
•added 2019/01/24 4:29 a.m.•13 views

CVE-2018-17688

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF 9.2.0.9297. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

8.8CVSS6.2AI score0.03855EPSS
SaveExploits0References2
OSV
OSV
•added 2018/07/31 8:29 p.m.•16 views

CVE-2018-11617

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

8.8CVSS6.1AI score0.02737EPSS
SaveExploits0References2
OSV
OSV
•added 2017/10/24 6:33 p.m.•83 views

GHSA-QQXP-XP9V-VVX6 jquery-ui Tooltip widget vulnerable to XSS

Cross-site scripting XSS vulnerability in the default content option in jquery.ui.tooltip.js in the Tooltip widget in jQuery UI before 1.10.0 allows remote attackers to inject arbitrary web script or HTML via the title attribute, which is not properly handled in the autocomplete combo box demo...

4.3CVSS5.9AI score0.07475EPSS
SaveExploits0References13
RubySec
RubySec
•added 2017/10/24 12:00 a.m.•56 views

Moderate severity vulnerability that affects jquery-ui

Cross-site scripting XSS vulnerability in the default content option in jquery.ui.tooltip.js in the Tooltip widget in jQuery UI before 1.10.0 allows remote attackers to inject arbitrary web script or HTML via the title attribute, which is not properly handled in the autocomplete combo box demo...

4.3CVSS6.1AI score0.07475EPSS
SaveExploits0References1Affected Software1
NVD
NVD
•added 2014/11/24 4:59 p.m.•41 views

CVE-2012-6662

Cross-site scripting XSS vulnerability in the default content option in jquery.ui.tooltip.js in the Tooltip widget in jQuery UI before 1.10.0 allows remote attackers to inject arbitrary web script or HTML via the title attribute, which is not properly handled in the autocomplete combo box demo...

4.3CVSS6AI score0.07475EPSS
SaveExploits0References11
UbuntuCve
UbuntuCve
•added 2014/11/24 4:59 p.m.•44 views

CVE-2012-6662

Cross-site scripting XSS vulnerability in the default content option in jquery.ui.tooltip.js in the Tooltip widget in jQuery UI before 1.10.0 allows remote attackers to inject arbitrary web script or HTML via the title attribute, which is not properly handled in the autocomplete combo box demo...

4.3CVSS6.5AI score0.07475EPSS
SaveExploits0References1
Prion
Prion
•added 2014/11/24 4:59 p.m.•32 views

Cross site scripting

Cross-site scripting XSS vulnerability in the default content option in jquery.ui.tooltip.js in the Tooltip widget in jQuery UI before 1.10.0 allows remote attackers to inject arbitrary web script or HTML via the title attribute, which is not properly handled in the autocomplete combo box demo...

4.3CVSS6AI score0.07475EPSS
SaveExploits0References11Affected Software5
Mend
Mend
•added 2014/11/24 4:00 p.m.•0 views

CVE-2012-6662

Cross-site scripting XSS vulnerability in the default content option in jquery.ui.tooltip.js in the Tooltip widget in jQuery UI before 1.10.0 allows remote attackers to inject arbitrary web script or HTML via the title attribute, which is not properly handled in the autocomplete combo box demo...

6.3CVSS0.07475EPSS
SaveExploits0References16
Debian CVE
Debian CVE
•added 2014/11/24 4:00 p.m.•53 views

CVE-2012-6662

Cross-site scripting XSS vulnerability in the default content option in jquery.ui.tooltip.js in the Tooltip widget in jQuery UI before 1.10.0 allows remote attackers to inject arbitrary web script or HTML via the title attribute, which is not properly handled in the autocomplete combo box demo...

4.3CVSS6.1AI score0.07475EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/11/24 12:00 a.m.•5 views

CVE-2012-6662: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the default content option in jquery.ui.tooltip.js in the Tooltip widget in jQuery UI before 1.10.0 allows remote attackers to inject arbitrary web script or HTML via the title attribute, which is not properly handled in the autocomplete combo box demo...

4.3CVSS6AI score0.07475EPSS
SaveExploits0References2
Kitploit
Kitploit
•added 2014/07/09 2:30 a.m.•23 views

SysExporter - Grab data from list-view, tree-view, combo box, WebBrowser control, and text-box

SysExporter utility allows you to grab the data stored in standard list-views, tree-views, list boxes, combo boxes, text-boxes, and WebBrowser/HTML controls from almost any application running on your system, and export it to text, HTML or XML file. Here's some examples for data that you can expo...

6.8AI score
SaveExploits0
Google Chrome Security Advisories
Google Chrome Security Advisories
•added 2014/01/27 12:00 a.m.•59 views

Stable Channel Update

Chrome has been updated to 32.0.1700.102 for Windows, Mac, Linux and Chrome Frame. This update has fixes for the following issues: Mouse Pointer disappears after exiting full-screen mode. 317496 Drag and drop files into Chrome may not work properly. 332579 Quicktime Plugin crashes in Chrome. 3084...

7.5CVSS9.5AI score0.01958EPSS
SaveExploits4Affected Software1
Rows per page
Query Builder