Lucene search
+L

265 matches found

Positive Technologies
Positive Technologies
added 2022/10/07 12:0 a.m.9 views

PT-2022-26401 · Pdf Xchange · Pdf-Xchange Editor

Name of the Vulnerable Software and Affected Versions: PDF-XChange Editor affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a...

7.8CVSS7.4AI score0.00386EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2022/09/28 12:0 a.m.11 views

The vulnerability of the getvcol function in the src/charset.c component of the Vim text editor allows a hacker to gain access to confidential data.

The vulnerability of the getvcol function in the src/charset.c file of the Vim text editor is related to the escape character being interpreted beyond its intended scope when using /%V. Exploiting this vulnerability allows an attacker to gain access to confidential data...

7.1CVSS6.6AI score0.01762EPSS
SaveExploits1References10Affected Software5
BDU FSTEC
BDU FSTEC
added 2022/09/08 12:0 a.m.9 views

The vulnerability of the vim_regcomp() function in the Vim text editor allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the vimregcomp function in the Vim text editor is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

7.8CVSS6.6AI score0.00458EPSS
SaveExploits1References6Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/09/07 12:0 a.m.12 views

The vulnerability of the do_tag() function in the Vim text editor allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the dotag function in the Vim text editor is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

7.8CVSS7.2AI score0.00528EPSS
SaveExploits1References7Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/08/26 12:0 a.m.11 views

The vulnerability of the WYSIWYG editor in the Mobiledoc Kit exists due to the lack of measures taken to protect the structure of web pages. This allows attackers to execute XSS attacks.

The vulnerability of the Mobiledoc Kit WYSIWYG editor exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

10CVSS7AI score0.00745EPSS
SaveExploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/08/17 12:0 a.m.9 views

The vulnerability of the string_quote() function in the Vim text editor allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the stringquote function in the Vim text editor is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

7.8CVSS7.2AI score0.00513EPSS
SaveExploits1References8Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/07/18 12:0 a.m.11 views

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to memory usage after it is freed. This allows attackers to execute arbitrary code.

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat and Document Cloud, are related to the use of memory after it is freed. Exploiting these vulnerabilities can allow an attacker to execute arbitrary code...

7.8CVSS7.6AI score0.02749EPSS
SaveExploits0References2
Redos
Redos
added 2022/07/01 12:0 a.m.42 views

ROS-20220701-01

Vim text editor vulnerability is related to boundary conditions in textobject.c. Exploitation The vulnerability could allow a remote attacker to create a special file, trick the victim into opening it, cause a read error outside the boundaries, and read the memory contents. victim to open it, cau...

7.8CVSS8AI score0.02122EPSS
SaveExploits16
BDU FSTEC
BDU FSTEC
added 2022/04/25 12:0 a.m.12 views

The vulnerability of Adobe Illustrator’s graphic editor, related to the manipulation of the zero pointer, allows a hacker to trigger a service failure.

The vulnerability of the Adobe Illustrator graphic editor is related to the handling of the zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS5.5AI score
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/04/25 12:0 a.m.10 views

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2020 are related to information disclosure, allowing attackers to gain unauthorized access to protected information.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 are related to information disclosure. Exploiting these vulnerabiliti...

7.1CVSS6.9AI score0.02363EPSS
SaveExploits0References3Affected Software2
OSV
OSV
added 2022/04/15 7:15 p.m.4 views

UBUNTU-CVE-2022-24851

LDAP Account Manager LAM is an open source web frontend for managing entries stored in an LDAP directory. The profile editor tool has an edit profile functionality, the parameters on this page are not properly sanitized and hence leads to stored XSS attacks. An authenticated user can store XSS...

8.1CVSS7.2AI score0.01086EPSS
SaveExploits1References5
Microsoft CVE
Microsoft CVE
added 2022/04/05 7:0 a.m.2 views

Use after free in utf_ptr2char in vim/vim

...

7.8CVSS7.5AI score0.01462EPSS
SaveExploits1
Snyk
Snyk
added 2022/03/11 12:0 a.m.1 views

Improperly Controlled Modification of Dynamically-Determined Object Attributes

Overview johnpbloch/wordpress-core is a web software you can use to create a website or blog. Affected versions of this package are vulnerable to Improperly Controlled Modification of Dynamically-Determined Object Attributes through the block editor. An attacker can manipulate the object prototyp...

5.4CVSS6.9AI score
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2022/01/04 12:0 a.m.10 views

The vulnerability of the Adobe Creative Cloud Desktop Application’s graphic editor app, related to an uncontrolled search path element, allows a hacker to execute arbitrary code.

The vulnerability of the Adobe Creative Cloud Desktop Application’s graphic editor app relates to an uncontrolled search path element. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code in the context of the current user, using a specially crafted file...

7.8CVSS7.6AI score0.02689EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/12/17 12:0 a.m.6 views

The vulnerability of Vim editor, related to reading beyond the buffer’s boundaries, allows a hacker to execute arbitrary commands.

The vulnerability of the Vim editor is related to reading beyond the buffer boundaries. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands by running a script using the parameter -s in the command line...

7.8CVSS7.8AI score0.00601EPSS
SaveExploits1References11Affected Software4
BDU FSTEC
BDU FSTEC
added 2021/12/13 12:0 a.m.7 views

The vulnerability of Microsoft Visual Studio Code’s source editor, related to improper code generation management, allows a hacker to execute arbitrary code.

The vulnerability of Microsoft Visual Studio Code’s source editor is related to improper handling of code generation. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

7.8CVSS7.7AI score0.02878EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2021/11/10 10:15 p.m.7 views

CVE-2020-23899

A User Mode Write AV in Editor+0x5f91 of WildBit Viewer v6.6 allows attackers to cause a denial of service DoS via a crafted tga file...

5.5CVSS5.8AI score0.00545EPSS
SaveExploits0References2
OSV
OSV
added 2021/11/10 10:15 p.m.6 views

CVE-2020-23898

A User Mode Write AV in Editor+0x5ea2 of WildBit Viewer v6.6 allows attackers to cause a denial of service DoS via a crafted tga file...

5.5CVSS6.1AI score0.00545EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2021/11/10 12:0 a.m.7 views

WildBit Viewer 缓冲区错误漏洞

WildBit Viewer is a compact image viewer with slide show and editor.A buffer overflow vulnerability exists in Editor 0x576b in WildBit Viewer version 6.6, which can be exploited by attackers to cause a denial of service via a specially crafted tiff file...

5.5CVSS5.9AI score0.00669EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2021/11/10 12:0 a.m.6 views

WildBit Viewer 缓冲区错误漏洞

WildBit Viewer is a compact image viewer with slide show and editor.A buffer overflow vulnerability exists in Editor 0x5ea2 in WildBit Viewer version 6.6, which can be exploited by attackers to cause a denial of service via a specially crafted tga file...

5.5CVSS5.9AI score0.00545EPSS
SaveExploits0References3
Rows per page
Query Builder