Lucene search
+L

5304 matches found

CNVD
CNVD
added 2021/01/27 12:0 a.m.5 views

Zhuhai Kingsoft Office Software Co., Ltd. Kingsoft PDF suffers from dll hijacking vulnerability

Kingsoft PDF is a powerful and easy-to-use PDF editor. Support one-click editing, quickly modify the content of PDF documents, and support PDF documents and docx/pptx/excel/txt/pictures and other document formats conversion. Ltd. Kingsoft PDF dll hijacking vulnerability, attackers can use the...

7.2AI score
SaveExploits0
OSV
OSV
added 2021/01/21 5:15 a.m.35 views

CVE-2020-27221

In Eclipse OpenJ9 up to and including version 0.23, there is potential for a stack-based buffer overflow when the virtual machine or JNI natives are converting from UTF-8 characters to platform encoding...

9.8CVSS7.3AI score
SaveExploits0References1
OSV
OSV
added 2021/01/21 5:15 a.m.5 views

UBUNTU-CVE-2020-27221

In Eclipse OpenJ9 up to and including version 0.23, there is potential for a stack-based buffer overflow when the virtual machine or JNI natives are converting from UTF-8 characters to platform encoding...

9.8CVSS6.5AI score0.01532EPSS
SaveExploits0References3
OSV
OSV
added 2021/01/18 8:15 a.m.9 views

CVE-2021-25175

An issue was discovered in Open Design Alliance Drawings SDK before 2021.11. A Type Conversion issue exists when rendering malformed .DXF and .DWG files. This can allow attackers to cause a crash, potentially enabling a denial of service attack Crash, Exit, or Restart...

7.8CVSS7.1AI score0.0263EPSS
SaveExploits0References9
Prion
Prion
added 2021/01/18 8:15 a.m.16 views

Type confusion

An issue was discovered in Open Design Alliance Drawings SDK before 2021.11. A Type Conversion issue exists when rendering malformed .DXF and .DWG files. This can allow attackers to cause a crash, potentially enabling a denial of service attack Crash, Exit, or Restart...

6.8CVSS7.3AI score0.0263EPSS
SaveExploits0References9Affected Software4
Cvelist
Cvelist
added 2021/01/18 7:13 a.m.42 views

CVE-2021-25175

An issue was discovered in Open Design Alliance Drawings SDK before 2021.11. A Type Conversion issue exists when rendering malformed .DXF and .DWG files. This can allow attackers to cause a crash, potentially enabling a denial of service attack Crash, Exit, or Restart...

7.8AI score0.0263EPSS
SaveExploits0References9
CVE
CVE
added 2021/01/18 7:13 a.m.91 views

CVE-2021-25175

CVE-2021-25175 affects the Open Design Alliance Drawings SDK prior to 2021.11. It is a UNTRUSTED POINTER DEREFERENCE vulnerability that occurs while parsing DXF/DWG files, potentially allowing remote code execution in the context of the affected process. Public advisories (ZDI) describe remote co...

7.8CVSS7.3AI score0.0263EPSS
SaveExploits0References9Affected Software1
CNVD
CNVD
added 2021/01/15 12:0 a.m.3 views

Jiajia Blu-ray HD Format Converter is vulnerable to dll hijacking.

Jia Jia Blu-ray HD Format Converter is a format conversion software specialized in converting BD Blu-ray HD videos. Jiajia Blu-ray HD Format Converter suffers from a dll hijacking vulnerability. An attacker can exploit this vulnerability to load a malicious dll and execute malicious code...

7.1AI score
SaveExploits0
CNVD
CNVD
added 2021/01/15 12:0 a.m.5 views

Jiajia MP4 MP3 Format Converter is vulnerable to dll hijacking.

Jia Jia MP4 MP3 Format Converter is a MP4, MP3 format conversion tool. Jiajia MP4 MP3 Format Converter suffers from a dll hijacking vulnerability. An attacker can exploit this vulnerability to load a malicious dll and execute malicious code...

7.2AI score
SaveExploits0
Cvelist
Cvelist
added 2021/01/13 8:19 p.m.65 views

CVE-2020-35578

An issue was discovered in the Manage Plugins page in Nagios XI before 5.8.0. Because the line-ending conversion feature is mishandled during a plugin upload, a remote, authenticated admin user can execute operating-system commands...

6.9AI score0.81915EPSS
SaveExploits7References4
BDU FSTEC
BDU FSTEC
added 2021/01/13 12:0 a.m.11 views

The vulnerability of the Foxit Reader text viewer program and the Foxit PhantomPDF PDF editing program, related to data conversion errors, allows a perpetrator to execute arbitrary code.

The vulnerability of the Foxit Reader text viewer program and the Foxit PhantomPDF PDF editing program is related to data type conversion errors. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

9.3CVSS8AI score0.02869EPSS
SaveExploits1References4Affected Software2
OSV
OSV
added 2021/01/12 10:15 p.m.8 views

CVE-2021-23930

OX App Suite through 7.10.4 allows XSS via use of the conversion API for a distributedFile...

6.1CVSS5.8AI score0.01133EPSS
SaveExploits0References1
NVD
NVD
added 2021/01/12 10:15 p.m.15 views

CVE-2021-23930

OX App Suite through 7.10.4 allows XSS via use of the conversion API for a distributedFile...

6.1CVSS6.1AI score0.01133EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/01/12 10:15 p.m.17 views

CVE-2021-23930

OX App Suite through 7.10.4 allows XSS via use of the conversion API for a distributedFile...

6.1CVSS6.3AI score0.01133EPSS
SaveExploits0References2
Prion
Prion
added 2021/01/12 10:15 p.m.25 views

Design/Logic Flaw

OX App Suite through 7.10.4 allows XSS via use of the conversion API for a distributedFile...

4.3CVSS6AI score0.01133EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2021/01/12 9:26 p.m.62 views

CVE-2021-23930

CVE-2021-23930 affects OX App Suite up to version 7.10.4, with an XSS vulnerability exploitable via the transformation/conversion API used for a distributedFile. The connected records corroborate the issue across multiple feeds (Red Hat, CNVD, NVD, etc.). The provided documents do not specify an ...

6.1CVSS6AI score0.01133EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/01/12 9:26 p.m.21 views

CVE-2021-23930

OX App Suite through 7.10.4 allows XSS via use of the conversion API for a distributedFile...

6.2AI score0.01133EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/01/11 12:0 a.m.5 views

EV Video Converter Win has dll hijacking vulnerability

EV Video Converter is a video conversion tool. EV Video Converter Win suffers from a dll hijacking vulnerability. An attacker can exploit the vulnerability to load a malicious dll and execute malicious code...

7.2AI score
SaveExploits0
OPENSUSE Linux
OPENSUSE Linux
added 2021/01/11 12:0 a.m.55 views

Security update for cobbler (moderate)

openSUSE Security Update: Security update for cobbler Announcement ID: openSUSE-SU-2021:0046-1 Rating: moderate References: 1020376 1029276 1048183 1074594 1075014 1081714 1081739 1090205 1097733 1101670 1104189 1104190 1104287 1105440 1105442 1113747 1128754 1128926 1130658 1134588 1149075 11518...

10CVSS7.6AI score0.6786EPSS
SaveExploits2References64
Veracode
Veracode
added 2021/01/07 7:18 p.m.29 views

Denial Of Service (DoS)

ghostscript is vulnerable to denial of service. The vulnerability exists through a flaw in src/lib/openjp2/pi.c through openjpeg's conversion/encoding functionality that causes an out-of-bounds read...

5.5CVSS6.1AI score0.01443EPSS
SaveExploits0References9Affected Software4
Rows per page
Query Builder