Lucene search
+L

16343 matches found

Positive Technologies
Positive Technologies
added 2025/07/08 12:00 a.m.7 views

PT-2025-28523 · Microsoft · Input Method Editor +1

Name of the Vulnerable Software and Affected Versions: Microsoft Input Method Editor IME affected versions not specified Description: The issue is related to a use after free condition in the Microsoft Input Method Editor IME, which allows an authorized attacker to elevate privileges locally. Thi...

7.8CVSS5.9AI score0.00306EPSS
SaveExploits0References6
BDU FSTEC
BDU FSTEC
added 2025/07/08 12:00 a.m.19 views

The vulnerability of PDF-XChange Editor’s PDF document viewing and editing software, related to the occurrence of operations outside the buffer in memory, allows attackers to disclose protected information.

The vulnerability of PDF-XChange Editor’s PDF document viewing and editing functionality lies in the issue of operations going beyond the buffer in memory during the processing of PRC files. Exploiting this vulnerability can allow an attacker to disclose protected information...

3.3CVSS5.9AI score0.00211EPSS
SaveExploits0References5Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/07/08 12:00 a.m.18 views

The vulnerability of PDF-XChange Editor’s document viewing and editing software lies in its memory usage after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of PDF-XChange Editor, a program for viewing and editing PDF documents, is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

7.8CVSS7.5AI score0.00247EPSS
SaveExploits0References5Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/07/08 12:00 a.m.28 views

The vulnerability of PDF document viewing and editing programs such as PDF-XChange Editor, PDF-Tools, and PDF-XChange PRO lies in the possibility of an operation occurring outside the buffer in memory, allowing an attacker to execute arbitrary code.

The vulnerability of PDF viewing and editing programs such as PDF-XChange Editor, PDF-Tools, and PDF-XChange PRO lies in the issue of operations going beyond the buffer in memory during the processing of U3D files. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.7AI score0.00233EPSS
SaveExploits0References3Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/07/08 12:00 a.m.20 views

The vulnerability of PDF document viewing and editing programs such as PDF-XChange Editor, PDF-Tools, and PDF-XChange PRO lies in the ability to read data beyond the buffer in memory, allowing attackers to disclose protected information.

The vulnerability of PDF document viewing and editing programs such as PDF-XChange Editor, PDF-Tools, and PDF-XChange PRO lies in the reading of data beyond the buffer boundaries in memory during file processing for U3D files. Exploiting this vulnerability can allow attackers to disclose protecte...

3.3CVSS5.9AI score0.00211EPSS
SaveExploits0References3Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/07/08 12:00 a.m.28 views

The vulnerability of PDF-XChange Editor, PDF-Tools, and PDF-XChange PRO programs relates to the use of memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of PDF viewing and editing programs such as PDF-XChange Editor, PDF-Tools, and PDF-XChange PRO lies in the use of memory after it is freed during file processing for U3D operations. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.5AI score0.00247EPSS
SaveExploits0References3Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/07/08 12:00 a.m.18 views

The vulnerability of PDF document viewing and editing programs such as PDF-XChange Editor, PDF-Tools, and PDF-XChange PRO lies in the use of memory after it is freed, allowing an attacker to disclose protected information.

The vulnerability of PDF viewing and editing programs such as PDF-XChange Editor, PDF-Tools, and PDF-XChange PRO lies in the use of memory after it is freed during file processing for U3D operations. Exploiting this vulnerability can allow attackers to disclose sensitive information that is...

3.3CVSS5.7AI score0.00224EPSS
SaveExploits0References3Affected Software3
Zero Day Initiative
Zero Day Initiative
added 2025/07/03 12:00 a.m.9 views

Delta Electronics CNCSoft Screen Editor DPB File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Electronics CNCSoft. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.3AI score0.00221EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2025/07/03 12:00 a.m.11 views

Delta Electronics CNCSoft Screen Editor DPB File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Electronics CNCSoft. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.4AI score0.00235EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2025/06/30 12:00 a.m.6 views

EulerOS 2.0 SP13 : vim (EulerOS-SA-2025-1711)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Vim is a greatly improved version of the good old UNIX editor Vi. Vim allows to redirect screen messages using the :redir ex command to register,...

4.4CVSS5.4AI score0.00387EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2025/06/29 2:26 p.m.14 views

CVE-2025-53282

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in aviplugins.com Thumbnail Editor thumbnail-editor allows Stored XSS.This issue affects Thumbnail Editor: from n/a through = 2.3.3...

6.5CVSS5.9AI score0.00197EPSS
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/06/29 12:50 p.m.5 views

Malicious code in assets-atlas-editor (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2f270720b1154e7b5c4a4300f1817bc922d5e372148d26a57b4b9d0c8ee3d95b Any computer that has this package installed or running should be considered...

7AI score
SaveExploits0References1
OSV
OSV
added 2025/06/29 12:50 p.m.5 views

MAL-2025-5323 Malicious code in assets-atlas-editor (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2f270720b1154e7b5c4a4300f1817bc922d5e372148d26a57b4b9d0c8ee3d95b Any computer that has this package installed or running should be considered...

7.2AI score
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/06/29 12:06 p.m.10 views

CVE-2025-28988

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in aharonyan WP Front User Submit / Front Editor front-editor allows Reflected XSS.This issue affects WP Front User Submit / Front Editor: from n/a through = 4.9.3...

7.1CVSS5.9AI score0.00222EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/06/27 10:19 p.m.16 views

CVE-2025-6657

PDF-XChange Editor PRC File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target...

3.3CVSS3.2AI score0.00211EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/06/27 10:19 p.m.20 views

CVE-2025-6646

PDF-XChange Editor U3D File Parsing Use-After-Free Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must...

3.3CVSS3.2AI score0.00224EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/06/27 10:19 p.m.24 views

CVE-2025-6655

PDF-XChange Editor PRC File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target...

3.3CVSS3.1AI score0.00211EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/06/27 10:19 p.m.25 views

CVE-2025-6662

PDF-XChange Editor PRC File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target...

3.3CVSS3.1AI score0.00211EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/06/27 10:18 p.m.24 views

CVE-2025-6660

PDF-XChange Editor GIF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target...

7.8CVSS8AI score0.00257EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/06/27 10:18 p.m.23 views

CVE-2025-6653

PDF-XChange Editor PRC File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target...

3.3CVSS3.1AI score0.00211EPSS
SaveExploits0References1
Rows per page
Query Builder