Lucene search
+L

16398 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2024/09/18 4:58 a.m.3 views

Malicious code in bamoe-standalone-dmn-editor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c3fc2574b1213e8be16df20d0fb4a2864fc9c911ce6f2be5cba0d0580c2f516 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.8AI score
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2024/09/18 12:00 a.m.12 views

The vulnerability of Adobe Illustrator’s graphic editor lies in its numerical loss of significance, allowing a hacker to execute arbitrary code.

The vulnerability of Adobe Illustrator’s graphic editor is related to a countable loss of significance. Exploiting this vulnerability allows an attacker to execute arbitrary code in the context of the current user, using a specially created malicious file...

7.8CVSS5.9AI score0.00368EPSS
SaveExploits0References2Affected Software2
Tenable Nessus
Tenable Nessus
added 2024/09/18 12:00 a.m.33 views

Amazon Linux 2 : firefox (ALASFIREFOX-2024-030)

The version of firefox installed on the remote host is prior to 115.14.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2FIREFOX-2024-030 advisory. Insufficient checks when processing graphics shared memory could have led to memory corruption. This could be...

9.8CVSS7.6AI score0.00634EPSS
SaveExploits0References20
Veracode
Veracode
added 2024/09/17 5:16 a.m.11 views

Cross Site Scripting(XSS)

Decidim is vulnerable to Cross Site ScriptingXSS. The vulnerability is due to improper validation and sanitization of HTML content in the QuillJS WYSIWYG editor, which allows attackers to inject malicious code, such as an XSS payload, before the content is uploaded to the server...

5.4CVSS5.7AI score0.00275EPSS
SaveExploits0References3Affected Software1
Zero Day Initiative
Zero Day Initiative
added 2024/09/17 12:00 a.m.11 views

PDF-XChange Editor U3D File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS7AI score0.00282EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/09/17 12:00 a.m.13 views

PDF-XChange Editor U3D File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS6.9AI score0.00282EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/09/17 12:00 a.m.19 views

PDF-XChange Editor U3D File Parsing Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS6.1AI score0.00303EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/09/17 12:00 a.m.12 views

PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS6AI score0.00272EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/09/17 12:00 a.m.13 views

PDF-XChange Editor AcroForm Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS6AI score0.0026EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/09/17 12:00 a.m.15 views

PDF-XChange Editor EMF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS6AI score0.00369EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/09/17 12:00 a.m.12 views

PDF-XChange Editor RTF File Parsing Uninitialized Variable Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS6.9AI score0.0038EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/09/17 12:00 a.m.15 views

PDF-XChange Editor JB2 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS6AI score0.00345EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/09/17 12:00 a.m.14 views

PDF-XChange Editor TIF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS6AI score0.00345EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2024/09/17 12:00 a.m.10 views

The vulnerability of the do_search() function in the Vim text editor allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the dosearch function in the Vim text editor is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

4.5CVSS5.7AI score0.00307EPSS
SaveExploits0References5Affected Software2
Zero Day Initiative
Zero Day Initiative
added 2024/09/17 12:00 a.m.12 views

PDF-XChange Editor XPS File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS6.8AI score0.00383EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/09/17 12:00 a.m.14 views

PDF-XChange Editor XPS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS6.9AI score0.00383EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/09/17 12:00 a.m.15 views

PDF-XChange Editor XPS File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS6.8AI score0.00282EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/09/17 12:00 a.m.11 views

PDF-XChange Editor JB2 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS6.1AI score0.0026EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/09/17 12:00 a.m.12 views

PDF-XChange Editor U3D File Parsing Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS6.1AI score0.00412EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/09/17 12:00 a.m.19 views

PDF-XChange Editor PPM File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS6.9AI score0.00358EPSS
SaveExploits0References1
Rows per page
Query Builder