Lucene search
+L

5926 matches found

Zero Day Initiative
Zero Day Initiative
added 2023/07/26 12:0 a.m.26 views

Foxit PDF Reader AcroForm Doc Object Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of D...

7.8CVSS6.8AI score0.00479EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/07/26 12:0 a.m.32 views

Foxit PDF Reader AcroForm Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS5.9AI score0.00452EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2023/07/26 12:0 a.m.9 views

The vulnerability of the Windows Authentication component of the Windows operating system allows a perpetrator to carry out a DoS attack.

The vulnerability of the Windows Authentication component of the Windows operating system is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute a DoS attack...

6.8CVSS7.1AI score0.01823EPSS
SaveExploits0References3
Zero Day Initiative
Zero Day Initiative
added 2023/07/26 12:0 a.m.26 views

Foxit PDF Reader Doc Object Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS5.9AI score0.00478EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/07/26 12:0 a.m.24 views

Foxit PDF Reader AcroForm Doc Object Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS5.9AI score0.00478EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/07/26 12:0 a.m.29 views

Foxit PDF Reader AcroForm signature Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

7.8CVSS6.7AI score0.00479EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2023/07/26 12:0 a.m.8 views

The vulnerability in the implementation of the Drag and Drop application interface of the Firefox browser allows a hacker to execute arbitrary code.

The vulnerability of the Drag and Drop application interface in Firefox browsers is related to insufficient data validation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS7.6AI score0.00253EPSS
SaveExploits0References7Affected Software6
Veracode
Veracode
added 2023/07/19 4:2 a.m.19 views

Cross-site Scripting (XSS)

clevertap-cordova is vulnerable to Cross-site Scripting XSS. The vulnerability exists because the library does not properly validate the data from the deep links, allowing an attacker to inject and execute malicious javascript...

9.3CVSS6.6AI score0.00855EPSS
SaveExploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/07/19 12:0 a.m.11 views

Vulnerability of the Microsoft Office Graphics Package components in Microsoft Office programs, allowing a hacker to execute arbitrary code

The vulnerability of the Microsoft Office Graphics Package components in Microsoft Office products is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

7.8CVSS7.7AI score0.00631EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2023/07/18 12:0 a.m.14 views

The vulnerability of the Extensions API of Google Chrome and Microsoft Edge browsers allows a malicious actor to install any extension they desire.

The vulnerability of the Extensions API for Google Chrome and Microsoft Edge is related to insufficient data validation. Exploiting this vulnerability could allow an attacker to install any desired extension by using a specially created HTML page...

5CVSS5.8AI score0.00621EPSS
SaveExploits0References10Affected Software6
BDU FSTEC
BDU FSTEC
added 2023/07/18 12:0 a.m.7 views

Vulnerability of Google Chrome and Microsoft Edge browser installers, allowing attackers to increase their privileges

The vulnerability of Google Chrome and Microsoft Edge browsers is related to insufficient data validation. Exploiting this vulnerability can allow attackers to enhance their privileges...

7.8CVSS7.2AI score0.00454EPSS
SaveExploits0References6Affected Software4
BDU FSTEC
BDU FSTEC
added 2023/07/17 12:0 a.m.14 views

The vulnerability of the Remote Procedure Call (RPC) technology in Windows operating systems allows a perpetrator to trigger a service failure.

The vulnerability of the Remote Procedure Call RPC technology in Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

6.8CVSS6.9AI score0.0163EPSS
SaveExploits0References3
Packet Storm
Packet Storm
added 2023/07/17 12:0 a.m.416 views

Clarity PPM 14.3.0.298 Cross Site Scripting

================================================================================================================================== Title : Insufficient input validation , in CA PPM 14.3 allows remote attackers to execute stored cross-site scripting attacks. | Author : Kaizen | Tested on : windows...

7.1AI score0.00499EPSS
SaveExploits2
Github Security Blog
Github Security Blog
added 2023/07/15 9:30 p.m.29 views

CleverTap Cordova plugin vulnerable to Cross-site Scripting

CleverTap Cordova Plugin version 2.6.2 allows a remote attacker to execute JavaScript code in any application that is opened via a specially constructed deeplink by an attacker. This is possible because the plugin does not correctly validate the data coming from the deeplinks before using them...

9.3CVSS7AI score0.00855EPSS
SaveExploits1References5Affected Software1
NVD
NVD
added 2023/07/15 7:15 p.m.44 views

CVE-2023-2507

CleverTap Cordova Plugin version 2.6.2 allows a remote attacker to execute JavaScript code in any application that is opened via a specially constructed deeplink by an attacker. This is possible because the plugin does not correctly validate the data coming from the deeplinks before using them...

9.3CVSS0.00855EPSS
SaveExploits1References3
Prion
Prion
added 2023/07/15 7:15 p.m.24 views

Code injection

CleverTap Cordova Plugin version 2.6.2 allows a remote attacker to execute JavaScript code in any application that is opened via a specially constructed deeplink by an attacker. This is possible because the plugin does not correctly validate the data coming from the deeplinks before using them...

5.8CVSS6.2AI score0.00855EPSS
SaveExploits1References2Affected Software1
OSV
OSV
added 2023/07/15 6:45 p.m.22 views

CVE-2023-2507 CleverTap Cordova Plugin 2.6.2 - Reflected XSS

CleverTap Cordova Plugin version 2.6.2 allows a remote attacker to execute JavaScript code in any application that is opened via a specially constructed deeplink by an attacker. This is possible because the plugin does not correctly validate the data coming from the deeplinks before using them...

9.3CVSS7.1AI score0.00855EPSS
SaveExploits1References5
Zero Day Initiative
Zero Day Initiative
added 2023/07/13 12:0 a.m.16 views

Kofax Power PDF PCX File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kofax Power PDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PCX...

7.8CVSS6.8AI score0.00301EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/07/13 12:0 a.m.18 views

Kofax Power PDF TIF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kofax Power PDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of TIF...

7.8CVSS6.8AI score0.00401EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/07/13 12:0 a.m.18 views

Kofax Power PDF TIF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kofax Power PDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of TIF...

7.8CVSS6.8AI score0.00401EPSS
SaveExploits0References1
Rows per page
Query Builder