Lucene search
+L

279 matches found

Redos
Redos
added 2022/07/01 12:00 a.m.49 views

ROS-20220701-01

Vim text editor vulnerability is related to boundary conditions in textobject.c. Exploitation The vulnerability could allow a remote attacker to create a special file, trick the victim into opening it, cause a read error outside the boundaries, and read the memory contents. victim to open it, cau...

7.8CVSS8AI score0.02177EPSS
SaveExploits16
BDU FSTEC
BDU FSTEC
added 2022/04/25 12:00 a.m.19 views

The vulnerability of Adobe Illustrator’s graphic editor, related to the manipulation of the zero pointer, allows a hacker to trigger a service failure.

The vulnerability of the Adobe Illustrator graphic editor is related to the handling of the zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS5.5AI score
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/04/25 12:00 a.m.15 views

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2020 are related to information disclosure, allowing attackers to gain unauthorized access to protected information.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 are related to information disclosure. Exploiting these vulnerabiliti...

7.1CVSS6.9AI score0.02363EPSS
SaveExploits0References3Affected Software2
OSV
OSV
added 2022/04/15 7:15 p.m.10 views

UBUNTU-CVE-2022-24851

LDAP Account Manager LAM is an open source web frontend for managing entries stored in an LDAP directory. The profile editor tool has an edit profile functionality, the parameters on this page are not properly sanitized and hence leads to stored XSS attacks. An authenticated user can store XSS...

8.1CVSS7.2AI score0.01113EPSS
SaveExploits1References5
Microsoft CVE
Microsoft CVE
added 2022/04/05 7:00 a.m.5 views

Use after free in utf_ptr2char in vim/vim

...

7.8CVSS7.5AI score0.01462EPSS
SaveExploits1
Snyk
Snyk
added 2022/03/11 12:00 a.m.2 views

Improperly Controlled Modification of Dynamically-Determined Object Attributes

Overview johnpbloch/wordpress-core is a web software you can use to create a website or blog. Affected versions of this package are vulnerable to Improperly Controlled Modification of Dynamically-Determined Object Attributes through the block editor. An attacker can manipulate the object prototyp...

5.4CVSS6.9AI score
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2022/01/04 12:00 a.m.23 views

The vulnerability of the Adobe Creative Cloud Desktop Application’s graphic editor app, related to an uncontrolled search path element, allows a hacker to execute arbitrary code.

The vulnerability of the Adobe Creative Cloud Desktop Application’s graphic editor app relates to an uncontrolled search path element. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code in the context of the current user, using a specially crafted file...

7.8CVSS7.6AI score0.02689EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/12/17 12:00 a.m.10 views

The vulnerability of Vim editor, related to reading beyond the buffer’s boundaries, allows a hacker to execute arbitrary commands.

The vulnerability of the Vim editor is related to reading beyond the buffer boundaries. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands by running a script using the parameter -s in the command line...

7.8CVSS7.8AI score0.00646EPSS
SaveExploits1References11Affected Software4
BDU FSTEC
BDU FSTEC
added 2021/12/13 12:00 a.m.18 views

The vulnerability of Microsoft Visual Studio Code’s source editor, related to improper code generation management, allows a hacker to execute arbitrary code.

The vulnerability of Microsoft Visual Studio Code’s source editor is related to improper handling of code generation. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

7.8CVSS7.7AI score0.0312EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2021/11/10 10:15 p.m.11 views

CVE-2020-23898

A User Mode Write AV in Editor+0x5ea2 of WildBit Viewer v6.6 allows attackers to cause a denial of service DoS via a crafted tga file...

5.5CVSS6.1AI score0.00563EPSS
SaveExploits0References2
OSV
OSV
added 2021/11/10 10:15 p.m.11 views

CVE-2020-23899

A User Mode Write AV in Editor+0x5f91 of WildBit Viewer v6.6 allows attackers to cause a denial of service DoS via a crafted tga file...

5.5CVSS5.8AI score0.00563EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2021/11/10 12:00 a.m.12 views

WildBit Viewer 缓冲区错误漏洞

WildBit Viewer is a compact image viewer with slide show and editor.A buffer overflow vulnerability exists in Editor 0x576b in WildBit Viewer version 6.6, which can be exploited by attackers to cause a denial of service via a specially crafted tiff file...

5.5CVSS5.9AI score0.00691EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2021/11/10 12:00 a.m.12 views

WildBit Viewer 缓冲区错误漏洞

WildBit Viewer is a compact image viewer with slide show and editor.A buffer overflow vulnerability exists in Editor 0x5ea2 in WildBit Viewer version 6.6, which can be exploited by attackers to cause a denial of service via a specially crafted tga file...

5.5CVSS5.9AI score0.00563EPSS
SaveExploits0References3
attackerkb
attackerkb
added 2021/11/01 3:15 p.m.8 views

CVE-2021-38847

S-Cart v6.4.1 and below was discovered to contain an arbitrary file upload vulnerability in the Editor module on the Admin panel. This vulnerability allows attackers to execute arbitrary code via a crafted IMG file...

8.8CVSS7.5AI score0.01291EPSS
SaveExploits0References2
attackerkb
attackerkb
added 2021/11/01 9:15 a.m.5 views

CVE-2021-24742

The Logo Slider and Showcase WordPress plugin before 1.3.37 allows Editor users to update the plugin's settings via the rtWLSSettings AJAX action because it uses a nonce for authorisation instead of a capability check...

6.5CVSS6.6AI score0.00858EPSS
SaveExploits2References2
CNVD
CNVD
added 2021/10/21 12:00 a.m.18 views

Foxit PDF Editor Buffer Overflow Vulnerability (CNVD-2025-00961)

Foxit PDF Editor is China Foxit Foxit company a PDF editor. Foxit PDF has a buffer overflow vulnerability that originates from not verifying the existence of an object before performing an operation on it, which can be exploited by a remote attacker to execute arbitrary code on an affected PDF...

7.8CVSS8.1AI score0.00349EPSS
SaveExploits0References1
OSV
OSV
added 2021/09/09 10:15 p.m.10 views

UBUNTU-CVE-2021-39201

WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Impact The issue allows an authenticated but low-privileged user like contributor/author to execute XSS in the editor. This bypasses the restrictions imposed on users who do n...

7.6CVSS6.5AI score0.01494EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2021/09/09 12:00 a.m.26 views

WordPress 跨站脚本漏洞

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in WordPress versions prior to 5.8 that allows...

7.6CVSS6AI score0.01494EPSS
SaveExploits0References8
CNNVD
CNNVD
added 2021/07/30 12:00 a.m.11 views

Vinades NukeViet 跨站脚本漏洞

NukeViet is a free open source content management system from Vietnam. NukeViet version 4.4.0 has a cross-site scripting vulnerability that can be exploited by attackers via the editor in the News module to conduct cross-site scripting attacks...

6.1CVSS5.2AI score0.00616EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2021/07/22 12:00 a.m.20 views

The vulnerability of the Adobe Photoshop graphic editor, related to a type conversion error, allows attackers to execute arbitrary code.

The vulnerability of the Adobe Photoshop graphic editor is related to a type conversion error. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

8.8CVSS8.2AI score0.06433EPSS
SaveExploits1References14Affected Software1
Rows per page
Query Builder