Lucene search
+L

20613 matches found

BDU FSTEC
BDU FSTEC
•added 2024/11/11 12:00 a.m.•24 views

Foxit PDF Editor Use After Free

The vulnerability of the Foxit PDF Editor formerly Foxit PhantomPDF PDF editing software is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code using a specially created PDF file...

7.8CVSS8.3AI score0.0081EPSS
SaveExploits0References4Affected Software2
OpenVAS
OpenVAS
•added 2024/11/11 12:00 a.m.•34 views

Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2024-2898)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.3CVSS6.2AI score0.00366EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2024/11/11 12:00 a.m.•21 views

Foxit PDF Editor Heap Buffer Overflow

The vulnerability of the Foxit PDF Editor formerly Foxit PhantomPDF PDF editing program is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created PDF file...

7.8CVSS8.4AI score0.00764EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
•added 2024/11/11 12:00 a.m.•22 views

Foxit PDF Editor Heap Buffer Overflow

The vulnerability of the Foxit PDF Editor formerly Foxit PhantomPDF PDF editing program is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created PDF file...

7.8CVSS8.4AI score0.00751EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
•added 2024/11/11 12:00 a.m.•25 views

Foxit PDF Editor Heap Buffer Overflow

The vulnerability of the Foxit PDF Editor formerly Foxit PhantomPDF PDF editing program is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created PDF file...

7.8CVSS8.4AI score0.00748EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
•added 2024/11/11 12:00 a.m.•22 views

Foxit PDF Editor Use After Free

The vulnerability of the Foxit PDF Editor formerly Foxit PhantomPDF PDF editing software is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code using a specially created PDF file...

7.8CVSS8.3AI score0.0081EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
•added 2024/11/11 12:00 a.m.•23 views

Foxit PDF Editor Use After Free

The vulnerability of the Foxit PDF Editor formerly Foxit PhantomPDF PDF editing software is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code using a specially created PDF file...

7.8CVSS8.3AI score0.00914EPSS
SaveExploits0References4Affected Software2
Fedora
Fedora
•added 2024/11/09 1:46 a.m.•31 views

[SECURITY] Fedora 41 Update: radare2-5.9.6-1.fc41

The radare2 is a reverse-engineering framework that is multi-architecture, multi-platform, and highly scriptable. Radare2 provides a hexadecimal editor, wrapped I/O, file system support, debugger support, diffing between two functions or binaries, and code analysis at opcode, basic block, and...

5.5CVSS5.9AI score0.00202EPSS
SaveExploits0
Fedora
Fedora
•added 2024/11/09 12:58 a.m.•27 views

[SECURITY] Fedora 39 Update: radare2-5.9.6-1.fc39

The radare2 is a reverse-engineering framework that is multi-architecture, multi-platform, and highly scriptable. Radare2 provides a hexadecimal editor, wrapped I/O, file system support, debugger support, diffing between two functions or binaries, and code analysis at opcode, basic block, and...

5.5CVSS5.9AI score0.00202EPSS
SaveExploits0
osv_rlsa
osv_rlsa
•added 2024/11/08 3:57 p.m.•35 views

RLSA-2024:8678 Important: grafana security update

Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fixes: golang-fips: Golang FIPS zeroed buffer CVE-2024-9355 dompurify: nesting-based mutation XSS vulnerability CVE-2024-47875 For more details about the security issues, includi...

10CVSS6.6AI score0.01134EPSS
SaveExploits3References3
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/11/08 12:13 p.m.•12 views

Malicious code in pixiv-novel-editor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ab4e5119a339b3970c17507784181c47d0872a8f642804a5d5a1bd4182e381e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
vulnersOsv
vulnersOsv
•added 2024/11/08 12:30 a.m.•6 views

@formbird/angular-elements (>=6.5.59, <=6.5.67), @griddo/ax (>=11.4.15, <=12.15.0-beta.1) +17 more potentially affected by CVE-2024-51434 via froala-editor (>=4.0.0, <=4.3.0)

froala-editor NPM version =4.0.0, =6.5.59, =11.4.15, =26.2.3, =26.2.3, =14.0.0-109224, =14.0.0-109224, =2.0.2, =1.6.4, =4.0.0, =4.0.0, =4.0.0, =4.3.0 - aurelia2-froala-editor 1.0.0 - froalaadmin 4.0.7 and more Source cves: CVE-2024-51434 Source advisory: GHSA-549P-5C7F-C5P4...

6.1CVSS5.8AI score0.00375EPSS
SaveExploits0
osv_ghsa
osv_ghsa
•added 2024/11/08 12:30 a.m.•17 views

GHSA-549P-5C7F-C5P4 Froala WYSIWYG editor allows cross-site scripting (XSS)

Inconsistent tag parsing allows for XSS in Froala WYSIWYG editor 4.3.0 and earlier...

6.1CVSS5.8AI score0.00375EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2024/11/08 12:30 a.m.•37 views

Froala WYSIWYG editor allows cross-site scripting (XSS)

Inconsistent tag parsing allows for XSS in Froala WYSIWYG editor 4.3.0 and earlier...

6.1CVSS5.8AI score0.00375EPSS
SaveExploits0References3Affected Software2
vulnersOsv
vulnersOsv
•added 2024/11/08 12:30 a.m.•4 views

@formbird/angular-elements (>=6.5.59, <=6.5.67), @griddo/ax (>=11.4.15, <=12.15.0-beta.1) +17 more potentially affected by CVE-2024-51434 via froala-editor (>=4.0.0, <=4.3.0)

froala-editor NPM version =4.0.0, =6.5.59, =11.4.15, =26.2.3, =26.2.3, =14.0.0-109224, =14.0.0-109224, =2.0.2, =1.6.4, =4.0.0, =4.0.0, =4.0.0, =4.3.0 - aurelia2-froala-editor 1.0.0 - froalaadmin 4.0.7 and more Source cves: CVE-2024-51434 Source advisory: OSV:GHSA-549P-5C7F-C5P4...

6.1CVSS5.8AI score0.00375EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2024/11/08 12:00 a.m.•33 views

EulerOS 2.0 SP9 : vim (EulerOS-SA-2024-2823)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Vim is an open source command line text editor. Vim v9.1.0647 has double free in src/alloc.c:616. When closing a window, the corresponding tagstack...

5.3CVSS6.9AI score0.00366EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
•added 2024/11/08 12:00 a.m.•31 views

EulerOS 2.0 SP10 : vim (EulerOS-SA-2024-2918)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Vim is an open source command line text editor.double-free in dialogchanged in Vim v9.1.0648.When abandoning a buffer, Vim may ask the user what to d...

5.3CVSS6.9AI score0.00366EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
•added 2024/11/08 12:00 a.m.•28 views

EulerOS 2.0 SP9 : vim (EulerOS-SA-2024-2841)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Vim is an open source command line text editor. Vim v9.1.0647 has double free in src/alloc.c:616. When closing a window, the corresponding tagstack...

5.3CVSS6.9AI score0.00366EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
•added 2024/11/08 12:00 a.m.•34 views

EulerOS 2.0 SP10 : vim (EulerOS-SA-2024-2898)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Vim is an open source command line text editor.double-free in dialogchanged in Vim v9.1.0648.When abandoning a buffer, Vim may ask the user what to d...

5.3CVSS6.9AI score0.00366EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
•added 2024/11/07 3:31 p.m.•41 views

Moodle vulnerable to site administration SQL injection via XMLDB editor

A SQL injection risk flaw was found in the XMLDB editor tool available to site administrators...

7.2CVSS6.8AI score0.00796EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder