Lucene search
+L

1636 matches found

OSV
OSV
added 2023/04/15 11:15 p.m.12 views

UBUNTU-CVE-2018-17452

An issue was discovered in GitLab Community and Enterprise Edition before 11.1.7, 11.2.x before 11.2.4, and 11.3.x before 11.3.1. There is Server-Side Request Forgery SSRF via a loopback address to the validatelocalhost function in urlblocker.rb...

9.8CVSS5.8AI score0.00737EPSS
SaveExploits0References3
OpenVAS
OpenVAS
added 2023/04/14 12:00 a.m.20 views

Adobe Digital Editions Code Execution Vulnerability (APSB23-04) - Windows

Adobe Digital Edition is prone to a code execution vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

7.8CVSS7.7AI score0.00328EPSS
SaveExploits0References1
NVD
NVD
added 2023/04/12 10:15 p.m.42 views

CVE-2023-21582

Adobe Digital Editions version 4.5.11.187303 and earlier is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS7.8AI score0.00328EPSS
SaveExploits0References1
OSV
OSV
added 2023/04/12 10:15 p.m.0 views

CVE-2023-21582

Adobe Digital Editions version 4.5.11.187303 and earlier is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS7.6AI score0.00328EPSS
SaveExploits0References1
Prion
Prion
added 2023/04/12 10:15 p.m.17 views

Cross site scripting

Adobe Digital Editions version 4.5.11.187303 and earlier is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

4.4CVSS7.8AI score0.00328EPSS
SaveExploits0References1Affected Software1
Zero Day Initiative
Zero Day Initiative
added 2023/04/12 12:00 a.m.25 views

Adobe Digital Editions PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Digital Editions. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

7.8CVSS7.7AI score0.00328EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/04/12 12:00 a.m.40 views

CVE-2023-21582 ZDI-CAN-18255: Adobe Digital Editions PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Adobe Digital Editions version 4.5.11.187303 and earlier is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS8AI score0.00328EPSS
SaveExploits0References1
CVE
CVE
added 2023/04/12 12:00 a.m.152 views

CVE-2023-21582

CVE-2023-21582 (Adobe Digital Editions) : Affected are Adobe Digital Editions 4.5.11.187303 and earlier. The issue is an out-of-bounds write in handling untrusted input that could lead to arbitrary code execution in the context of the current user. Exploitation requires the victim to open a malic...

7.8CVSS7.8AI score0.00328EPSS
SaveExploits0References1Affected Software1
NCSC
NCSC
added 2023/04/12 12:00 a.m.12 views

Vulnerability fixed in Adobe Digital Editions

Adobe has fixed a vulnerability in Digital Editions. A malicious party can exploit the vulnerability to execute arbitrary code execute arbitrary code. To do this, the malicious party must trick the victim into opening a malicious file to open. Adobe has released updates to fix the vulnerability i...

7.8CVSS7.3AI score0.00328EPSS
SaveExploits0
Vulnrichment
Vulnrichment
added 2023/04/12 12:00 a.m.11 views

CVE-2023-21582 ZDI-CAN-18255: Adobe Digital Editions PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Adobe Digital Editions version 4.5.11.187303 and earlier is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS7.6AI score0.00328EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/04/12 12:00 a.m.15 views

Adobe Digital Editions 缓冲区错误漏洞

Adobe Digital Editions DE is a set of eBook reading management software from the American company Odobi Adobe. The software supports opening, reading and managing files in PDF, XML, Flash and other formats. Adobe Digital Editions 4.5.11.187303 and earlier versions contain a buffer overflow...

7.8CVSS7.5AI score0.00328EPSS
SaveExploits0References2
CISA
CISA
added 2023/04/11 12:00 p.m.4 views

Adobe Releases Security Updates for Multiple Products

Adobe has released security updates to address multiple vulnerabilities in Adobe software. An attacker can exploit these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the following advisories and apply the necessary updates: Digital...

7.7AI score
SaveExploits0References6
CNNVD
CNNVD
added 2023/04/11 12:00 a.m.19 views

Microsoft Windows 安全漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in Microsoft Windows Lock Screen. The following products and editions are affected: Windows 10 Version 1809 for 32-bit Systems,Windows...

6.8CVSS7.2AI score0.00493EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/04/11 12:00 a.m.10 views

Microsoft Windows CNG Key Isolation Service 安全漏洞

Microsoft Windows is a suite of operating systems for personal devices from Microsoft Corporation USA. A security vulnerability exists in the Microsoft Windows CNG Key Isolation Service. The following products and editions are affected: Windows 10 Version 20H2 for ARM64-based Systems,Windows 11...

7CVSS7.6AI score0.01771EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/04/11 12:00 a.m.11 views

Microsoft Windows Enroll Engine 安全漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in Microsoft Windows Enroll Engine. The following products and editions are affected: Windows 10 Version 1809 for ARM64-based...

5.3CVSS6.8AI score0.00671EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/04/11 12:00 a.m.9 views

Microsoft Windows Ancillary Function Driver for WinSock安全漏洞

Microsoft Windows Ancillary Function Driver for WinSock is a helper function driver for Winsock from Microsoft Corporation USA. A security vulnerability exists in the Microsoft Windows Ancillary Function Driver for WinSock. The following products and editions are affected:Windows 10 Version 1809...

7CVSS7.3AI score0.12298EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2023/04/11 12:00 a.m.24 views

Adobe Digital Editions < 4.5.11.187658 Arbitrary code execution (APSB23-04)

The version of Adobe Digital Editions installed on the remote Windows host is prior to 4.5.11.187658. It is, therefore, affected by a vulnerability as referenced in the APSB23-04 advisory. - Adobe Digital Editions version 4.5.11.187303 and earlier is affected by an out-of-bounds write vulnerabili...

7.8CVSS8.2AI score0.00328EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/04/11 12:00 a.m.10 views

Microsoft Message Queuing 安全漏洞

Microsoft Message Queuing is a solution for implementing asynchronous and synchronous scenarios that require high performance. A security vulnerability exists in Microsoft Message Queuing. The following products and editions are affected:Windows 10 Version 1809 for 32-bit Systems,Windows 10 Versi...

7.5CVSS8AI score0.88673EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/04/11 12:00 a.m.12 views

Microsoft Windows PGM 安全漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in Microsoft Windows PGM. The following products and editions are affected: Windows 10 Version 21H2 for 32-bit Systems,Windows 10...

9.8CVSS8.6AI score0.02026EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2023/04/11 12:00 a.m.3 views

PT-2023-6326 · Adobe · Digital Editions

Name of the Vulnerable Software and Affected Versions: Adobe Digital Editions versions 4.5.11.187303 and earlier Description: The issue is related to an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue...

7.8CVSS7.7AI score0.00328EPSS
SaveExploits0References6
Rows per page
Query Builder