Lucene search
+L

20612 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/30 12:00 a.m.•11 views

CVE-2024-13031: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic has been found in Antabot White-Jotter up to 0.2.2. Affected is an unknown function of the file /admin/content/editor of the component Article Content Editor. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. Th...

5.1CVSS3.3AI score0.00389EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/12/30 12:00 a.m.•9 views

PT-2024-17888

Name of the Vulnerable Software and Affected Versions Antabot White-Jotter versions up to 0.2.2 Description A problematic vulnerability has been found in the component Article Content Editor, specifically in an unknown function of the file /admin/content/editor. This manipulation leads to cross...

5.1CVSS3.7AI score0.00389EPSS
SaveExploits1References11
CNNVD
CNNVD
•added 2024/12/30 12:00 a.m.•28 views

White-Jotter code injection vulnerability

White-Jotter is an Antabot personal developer's front-end and back-end separation project using Vue+Spring Boot development, comes with a full set of development tutorials. Antabot White-Jotter 0.2.2 and earlier versions have a code injection vulnerability that originates from the component artic...

5.1CVSS4.9AI score0.00389EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2024/12/30 12:00 a.m.•26 views

PT-2024-17889 · Unknown · Antabot White-Jotter

Name of the Vulnerable Software and Affected Versions: Antabot White-Jotter versions up to 0.2.2 Description: A problematic issue has been found in the Article Editor component, specifically in the /admin/content/editor file, affecting an unknown functionality. The manipulation of the articleCove...

5.1CVSS4.8AI score0.00541EPSS
SaveExploits1References10
CNNVD
CNNVD
•added 2024/12/30 12:00 a.m.•21 views

White-Jotter code issue vulnerabilities

White-Jotter is a front-end and back-end separation project developed by Antabot personal developer using Vue+Spring Boot, with a full set of development tutorials. A code issue vulnerability exists in White-Jotter 0.2.2 and earlier versions, which stems from the articleCover parameter of the fil...

5.1CVSS5.3AI score0.00541EPSS
SaveExploits1References4
BDU FSTEC
BDU FSTEC
•added 2024/12/25 12:00 a.m.•24 views

Foxit PDF Reader Use After Free

The vulnerability of the PDF document viewing program Foxit PDF Reader formerly Foxit Reader and the PDF file editing program Foxit PDF Editor formerly Foxit PhantomPDF is related to a memory corruption issue after object handling. Exploiting this vulnerability can allow an attacker to execute...

7.8CVSS8.4AI score0.00914EPSS
SaveExploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
•added 2024/12/25 12:00 a.m.•28 views

Foxit PDF Reader Pointer Handling Code Execution

The vulnerability of the PDF document viewing program Foxit PDF Reader formerly Foxit Reader and the PDF file editing program Foxit PDF Editor formerly Foxit PhantomPDF is related to a bug in the handling of pointers after memory release during the processing of AcroForm objects. Exploiting this...

7.8CVSS8.2AI score0.00914EPSS
SaveExploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
•added 2024/12/25 12:00 a.m.•24 views

Foxit PDF Reader PDF Code Execution

The vulnerability of the PDF document viewing program Foxit PDF Reader formerly Foxit Reader and the PDF file editing program Foxit PDF Editor formerly Foxit PhantomPDF is related to memory overflow attacks. Exploiting this vulnerability allows an attacker to execute arbitrary code using a...

7.8CVSS8.2AI score0.00862EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
•added 2024/12/25 12:00 a.m.•18 views

Foxit PDF Reader Use After Free

The vulnerability of the PDF document viewing program Foxit PDF Reader formerly Foxit Reader and the PDF file editing program Foxit PDF Editor formerly Foxit PhantomPDF is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS8.3AI score0.00914EPSS
SaveExploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
•added 2024/12/25 12:00 a.m.•20 views

PDF Foxit Reader AcroForm Handler Memory Management Code Execution

The vulnerability of the AcroForm Handler component in the PDF Foxit Reader formerly Foxit Reader and Foxit PDF Editor formerly Foxit PhantomPDF software for viewing electronic documents is related to the use of memory after it is released during object processing. Exploiting this vulnerability...

7.8CVSS8.3AI score0.00914EPSS
SaveExploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
•added 2024/12/25 12:00 a.m.•25 views

Foxit PDF Reader Use After Free

The vulnerability of the PDF document viewing program Foxit PDF Reader formerly Foxit Reader and the PDF file editing program Foxit PDF Editor formerly Foxit PhantomPDF is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS8.5AI score0.00922EPSS
SaveExploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
•added 2024/12/25 12:00 a.m.•22 views

Foxit PDF Reader Use After Free

The vulnerability of the PDF document viewing program Foxit PDF Reader formerly Foxit Reader and the PDF file editing program Foxit PDF Editor formerly Foxit PhantomPDF is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS8.3AI score0.00895EPSS
SaveExploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
•added 2024/12/25 12:00 a.m.•26 views

Foxit PDF Reader Use After Free

The vulnerability of the PDF document viewing program Foxit PDF Reader formerly Foxit Reader and the PDF file editing program Foxit PDF Editor formerly Foxit PhantomPDF is related to the use of pointers after memory release during the processing of Doc objects in AcroForms. Exploiting this...

7.8CVSS8.3AI score0.00899EPSS
SaveExploits0References5Affected Software2
osv_mal
osv_mal
•added 2024/12/19 10:47 a.m.•14 views

MAL-2024-12002 Malicious code in metamodel-editor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f82fb4d86a302779b75cb5721517e80e827b6e6fe5368f3639b294b46e21cbd7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2024/12/19 10:47 a.m.•6 views

Malware in metamodel-editor

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/12/19 10:47 a.m.•15 views

Malicious code in metamodel-editor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f82fb4d86a302779b75cb5721517e80e827b6e6fe5368f3639b294b46e21cbd7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References3
osv_ghsa
osv_ghsa
•added 2024/12/18 9:30 p.m.•16 views

GHSA-J2V2-3784-VR44 Duplicate Advisory: openCart Server-Side Template Injection (SSTI) vulnerability

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-xrh7-2gfq-4rcq. This link is maintained to preserve external references. Original Description OpenCart 4.0.2.3 is vulnerable to Server-Side Template Injection SSTI via the Theme Editor Function...

7.2CVSS5.4AI score0.00923EPSS
SaveExploits1References6
Github Security Blog
Github Security Blog
•added 2024/12/18 9:30 p.m.•46 views

Duplicate Advisory: openCart Server-Side Template Injection (SSTI) vulnerability

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-xrh7-2gfq-4rcq. This link is maintained to preserve external references. Original Description OpenCart 4.0.2.3 is vulnerable to Server-Side Template Injection SSTI via the Theme Editor Function...

7.2CVSS5.4AI score0.00923EPSS
SaveExploits1References7Affected Software1
Snyk
Snyk
•added 2024/12/18 8:40 p.m.•8 views

Improper Neutralization of Special Elements Used in a Template Engine

Overview opencart/opencart is a shopping cart system Affected versions of this package are vulnerable to Improper Neutralization of Special Elements Used in a Template Engine via the Theme Editor due to improper sanitization. An attacker can manipulate server-side templates and execute arbitrary...

7.5CVSS6.2AI score0.00923EPSS
SaveExploits1References2
NVD
NVD
•added 2024/12/18 8:15 p.m.•26 views

CVE-2024-36694

OpenCart 4.0.2.3 is vulnerable to Server-Side Template Injection SSTI via the Theme Editor Function...

7.2CVSS0.00923EPSS
SaveExploits1References5
Rows per page
Query Builder