Lucene search
+L

5936 matches found

Packet Storm
Packet Storm
added 2023/07/17 12:0 a.m.416 views

Clarity PPM 14.3.0.298 Cross Site Scripting

================================================================================================================================== Title : Insufficient input validation , in CA PPM 14.3 allows remote attackers to execute stored cross-site scripting attacks. | Author : Kaizen | Tested on : windows...

7.1AI score0.00499EPSS
SaveExploits2
Github Security Blog
Github Security Blog
added 2023/07/15 9:30 p.m.30 views

CleverTap Cordova plugin vulnerable to Cross-site Scripting

CleverTap Cordova Plugin version 2.6.2 allows a remote attacker to execute JavaScript code in any application that is opened via a specially constructed deeplink by an attacker. This is possible because the plugin does not correctly validate the data coming from the deeplinks before using them...

9.3CVSS7AI score0.00855EPSS
SaveExploits1References5Affected Software1
NVD
NVD
added 2023/07/15 7:15 p.m.46 views

CVE-2023-2507

CleverTap Cordova Plugin version 2.6.2 allows a remote attacker to execute JavaScript code in any application that is opened via a specially constructed deeplink by an attacker. This is possible because the plugin does not correctly validate the data coming from the deeplinks before using them...

9.3CVSS0.00855EPSS
SaveExploits1References3
Prion
Prion
added 2023/07/15 7:15 p.m.24 views

Code injection

CleverTap Cordova Plugin version 2.6.2 allows a remote attacker to execute JavaScript code in any application that is opened via a specially constructed deeplink by an attacker. This is possible because the plugin does not correctly validate the data coming from the deeplinks before using them...

5.8CVSS6.2AI score0.00855EPSS
SaveExploits1References2Affected Software1
OSV
OSV
added 2023/07/15 6:45 p.m.22 views

CVE-2023-2507 CleverTap Cordova Plugin 2.6.2 - Reflected XSS

CleverTap Cordova Plugin version 2.6.2 allows a remote attacker to execute JavaScript code in any application that is opened via a specially constructed deeplink by an attacker. This is possible because the plugin does not correctly validate the data coming from the deeplinks before using them...

9.3CVSS7.1AI score
SaveExploits0References5
Zero Day Initiative
Zero Day Initiative
added 2023/07/13 12:0 a.m.16 views

Kofax Power PDF PCX File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kofax Power PDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PCX...

7.8CVSS6.8AI score0.00301EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/07/13 12:0 a.m.26 views

Kofax Power PDF JP2 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kofax Power PDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JP2...

7.8CVSS6.8AI score0.00401EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/07/13 12:0 a.m.20 views

Kofax Power PDF U3D File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kofax Power PDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of U3D...

7.8CVSS6.7AI score0.00401EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/07/13 12:0 a.m.19 views

Kofax Power PDF TIF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kofax Power PDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of TIF...

7.8CVSS6.8AI score0.00401EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/07/13 12:0 a.m.20 views

Kofax Power PDF TIF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kofax Power PDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of TIF...

7.8CVSS6.8AI score0.00401EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/07/13 12:0 a.m.23 views

Kofax Power PDF JP2 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kofax Power PDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JP2...

7.8CVSS6.8AI score0.00401EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/07/13 12:0 a.m.23 views

Kofax Power PDF PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kofax Power PDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PDF...

7.8CVSS6.8AI score0.00296EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/07/13 12:0 a.m.23 views

Kofax Power PDF JP2 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kofax Power PDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JP2...

7.8CVSS6.8AI score0.00401EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/07/13 12:0 a.m.28 views

Kofax Power PDF U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Kofax Power PDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

3.3CVSS5.9AI score0.0038EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/07/13 12:0 a.m.25 views

Kofax Power PDF JPG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Kofax Power PDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

3.3CVSS5.9AI score0.0038EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/07/13 12:0 a.m.21 views

Kofax Power PDF PNG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kofax Power PDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PNG...

7.8CVSS6.8AI score0.00301EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/07/13 12:0 a.m.24 views

Kofax Power PDF PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kofax Power PDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PDF...

7.8CVSS6.8AI score0.00401EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/07/12 12:0 a.m.25 views

Dassault Systèmes SolidWorks DWG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Dassault Syst��mes SolidWorks. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.8AI score0.00354EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2023/06/29 12:0 a.m.34 views

CVE-2023-2860

An out-of-bounds read vulnerability was found in the SR-IPv6 implementation in the Linux kernel. The flaw exists within the processing of seg6 attributes. The issue results from the improper validation of user-supplied data, which can result in a read past the end of an allocated buffer. This fla...

4.4CVSS6.6AI score0.00329EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2023/06/28 12:0 a.m.11 views

多款Cisco产品 跨站脚本漏洞

Cisco AsyncOS and Cisco Secure Email are both products of Cisco, Inc.Cisco AsyncOS is an operating system for Cisco devices.Cisco Secure Email is the Cisco Secure Email formerly known as Email Security provides the best protection for your email from network threats. A cross-site scripting...

6.1CVSS6.1AI score0.00508EPSS
SaveExploits0References2
Rows per page
Query Builder