Lucene search
+L

3420 matches found

Cvelist
Cvelist
•added 2022/09/30 4:37 p.m.•38 views

CVE-2022-40316

The H5P activity attempts report did not filter by groups, which in separate groups mode could reveal information to non-editing teachers about attempts/users in groups they should not have access to...

5.1AI score0.00656EPSS
SaveExploits0References2
OSV
OSV
•added 2022/09/30 4:37 p.m.•30 views

CVE-2022-40316

The H5P activity attempts report did not filter by groups, which in separate groups mode could reveal information to non-editing teachers about attempts/users in groups they should not have access to...

4.3CVSS6.3AI score
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2022/09/29 7:45 p.m.•8 views

CVE-2022-36068 Discourse moderators can edit themes via the API

Discourse is an open source discussion platform. In versions prior to 2.8.9 on the stable branch and prior to 2.9.0.beta10 on the beta and tests-passed branches, a moderator can create new and edit existing themes by using the API when they should not be able to do so. The problem is patched in...

7.2CVSS6.8AI score0.00886EPSS
SaveExploits0References3
OSV
OSV
•added 2022/09/29 6:33 p.m.•13 views

CLSA-2022-1664476383 Fixed CVE-2022-3256 in vim

CVE-2022-3256: copy the mark before editing another buffer...

7.8CVSS7.2AI score0.00489EPSS
SaveExploits1References1
OSV
OSV
•added 2022/09/29 6:14 p.m.•14 views

CLSA-2022-1664475299 Fix CVE(s): CVE-2022-3256

SECURITYUPDATE: Using freed memory when autocmd changes mark - debian/patches/CVE-2022-3256.patch: Copy the mark before editing another buffer - CVE-2022-3256...

7.8CVSS7.1AI score0.00489EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2022/09/29 12:00 a.m.•47 views

Discourse 安全漏洞

Discourse is an open source community discussion platform. An access control error vulnerability exists in versions of Discourse prior to 2.8.9 and prior to 2.9.0.beta10. The vulnerability stems from improper access control of the API, which could be exploited to create new topics and edit existi...

7.2CVSS6.8AI score0.00886EPSS
SaveExploits0References4
CNVD
CNVD
•added 2022/09/23 12:00 a.m.•70 views

Adobe InDesign Buffer Overflow Vulnerability (CNVD-2022-66017)

Adobe InDesign, a set of typesetting and editing applications from Adobe, has a buffer overflow vulnerability that originates from out-of-bounds reads and could lead to a memory leak. An attacker could use the vulnerability to execute unauthorized commands and could gain system privileges to...

5.5CVSS5.1AI score0.00468EPSS
SaveExploits0References1
CNVD
CNVD
•added 2022/09/23 12:00 a.m.•75 views

Adobe InDesign product buffer overflow vulnerability

Adobe InDesign, a set of typesetting and editing applications from Adobe, has a buffer overflow vulnerability that originates from out-of-bounds reads and could lead to a memory leak. An attacker can remotely execute arbitrary code through this vulnerability...

5.5CVSS5.3AI score0.00468EPSS
SaveExploits0References1
Prion
Prion
•added 2022/09/22 10:15 p.m.•26 views

Cross site scripting

Toast UI Grid is a component to display and edit data. Versions prior to 4.21.3 are vulnerable to cross-site scripting attacks when pasting specially crafted content into editable cells. This issue was fixed in version 4.21.3. There are no known workarounds...

5.8CVSS5.9AI score0.00667EPSS
SaveExploits1References2Affected Software1
OSV
OSV
•added 2022/09/22 10:05 p.m.•38 views

CVE-2022-23458 Toast UI Grid vulnerable to Cross-site scripting

Toast UI Grid is a component to display and edit data. Versions prior to 4.21.3 are vulnerable to cross-site scripting attacks when pasting specially crafted content into editable cells. This issue was fixed in version 4.21.3. There are no known workarounds...

6.1CVSS5.8AI score
SaveExploits0References4
CNVD
CNVD
•added 2022/09/19 12:00 a.m.•93 views

Adobe InDesign Heap Buffer Overflow Vulnerability (CNVD-2022-79412)

Adobe InDesign is a set of layout and editing applications from the American company Audobee Adobe. Adobe InDesign suffers from a heap buffer overflow vulnerability that can be exploited by an attacker to execute arbitrary code in the context of the current user...

7.8CVSS7.9AI score0.00513EPSS
SaveExploits0References1
CNVD
CNVD
•added 2022/09/19 12:00 a.m.•36 views

Adobe InDesign Out-of-Bounds Write Vulnerability (CNVD-2022-79411)

Adobe InDesign is a set of layout and editing applications from the American company Audobee Adobe. Adobe InDesign suffers from an out-of-bounds write vulnerability that can be exploited by an attacker to execute arbitrary code in the context of the current user...

7.8CVSS7.8AI score0.00451EPSS
SaveExploits0References1
CNVD
CNVD
•added 2022/09/16 12:00 a.m.•71 views

Adobe InDesign out-of-bounds read vulnerability (CNVD-2022-79418)

Adobe InDesign, a set of typesetting and editing applications from Adobe, has an out-of-bounds read vulnerability that could be exploited by attackers to cause a sensitive memory leak...

5.5CVSS4.5AI score0.00521EPSS
SaveExploits0References1
CNVD
CNVD
•added 2022/09/16 12:00 a.m.•51 views

Adobe InDesign out-of-bounds read vulnerability (CNVD-2022-79419)

Adobe InDesign, a set of typesetting and editing applications from Adobe, has an out-of-bounds read vulnerability that could be exploited by attackers to cause a sensitive memory leak...

5.5CVSS4.5AI score0.00468EPSS
SaveExploits0References1
CNVD
CNVD
•added 2022/09/16 12:00 a.m.•36 views

Adobe InDesign out-of-bounds read vulnerability (CNVD-2022-79417)

Adobe InDesign, a set of typesetting and editing applications from Adobe, has an out-of-bounds read vulnerability that could be exploited by attackers to cause a sensitive memory leak...

5.5CVSS4.5AI score0.00468EPSS
SaveExploits0References1
CNVD
CNVD
•added 2022/09/16 12:00 a.m.•29 views

Adobe InDesign out-of-bounds read vulnerability (CNVD-2022-79416)

Adobe InDesign, a set of typesetting and editing applications from Adobe, has an out-of-bounds read vulnerability that could be exploited by attackers to cause a sensitive memory leak...

5.5CVSS4.5AI score0.00468EPSS
SaveExploits0References1
CNVD
CNVD
•added 2022/09/16 12:00 a.m.•80 views

Adobe InDesign out-of-bounds read vulnerability (CNVD-2022-79421)

Adobe InDesign, a set of typesetting and editing applications from Adobe, has an out-of-bounds read vulnerability that could be exploited by attackers to cause a sensitive memory leak...

5.5CVSS4.5AI score0.00468EPSS
SaveExploits0References1
CNVD
CNVD
•added 2022/09/16 12:00 a.m.•30 views

Adobe InDesign Heap Buffer Overflow Vulnerability (CNVD-2022-79425)

Adobe InDesign is a set of typesetting and editing applications from Adobe, which is vulnerable to heap buffer overflow and can be used by attackers to execute arbitrary code...

7.8CVSS5.6AI score0.00513EPSS
SaveExploits0References1
CNVD
CNVD
•added 2022/09/16 12:00 a.m.•51 views

Adobe InDesign Out-of-Bounds Read Vulnerability (CNVD-2022-79415)

Adobe InDesign is a set of layout and editing applications from the American company Audobee Adobe. Adobe InDesign suffers from an out-of-bounds read vulnerability that can be exploited by an attacker to cause a sensitive memory leak...

5.5CVSS6.1AI score0.00468EPSS
SaveExploits0References1
CNVD
CNVD
•added 2022/09/16 12:00 a.m.•45 views

Adobe InDesign out-of-bounds read vulnerability (CNVD-2022-79420)

Adobe InDesign, a set of typesetting and editing applications from Adobe, has an out-of-bounds read vulnerability that could be exploited by attackers to cause a sensitive memory leak...

5.5CVSS4.5AI score0.00468EPSS
SaveExploits0References1
Rows per page
Query Builder