Lucene search
+L

16529 matches found

BDU FSTEC
BDU FSTEC
added 2023/10/09 12:00 a.m.13 views

The vulnerability of PDF-XChange Editor’s document viewing and editing software lies in the possibility of an operation going beyond the buffer in memory, allowing attackers to execute arbitrary code.

The vulnerability of PDF-XChange Editor’s PDF document viewing and editing functionality lies in the issue of operations going beyond the buffer in memory when processing JPG files. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.7AI score0.00383EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/10/09 12:00 a.m.13 views

The vulnerability of PDF-XChange Editor’s document viewing and editing software lies in the possibility of an operation going beyond the buffer in memory, allowing attackers to execute arbitrary code.

The vulnerability of PDF-XChange Editor’s PDF document viewing and editing functionality lies in the issue of operations going beyond the buffer in memory when processing JPG files. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.7AI score0.00394EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/10/09 12:00 a.m.17 views

The vulnerability of PDF-XChange Editor’s document viewing and editing software lies in the possibility of an operation going beyond the buffer in memory, allowing attackers to execute arbitrary code.

The vulnerability of PDF-XChange Editor’s PDF document viewing and editing functionality lies in the issue of operations going beyond the buffer in memory when processing JPG files. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.7AI score0.00386EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/10/09 12:00 a.m.14 views

The vulnerability of the readFileIntoStream method in the PDF-XChange Editor software allows a malicious individual to gain unauthorized access to protected information.

The vulnerability of the readFileIntoStream method in the PDF-XChange Editor PDF document viewing and editing software is related to the use of a initially dangerous function. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

5.5CVSS5.9AI score0.0038EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/10/09 12:00 a.m.14 views

The vulnerability of PDF-XChange Editor’s PDF document viewing and editing software, related to the occurrence of operations outside the buffer in memory, allows attackers to gain unauthorized access to protected information.

The vulnerability of PDF-XChange Editor’s PDF document viewing and editing functionality lies in the issue of operations going beyond the buffer in memory during the processing of EMF files. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

3.3CVSS5.5AI score0.00411EPSS
SaveExploits0References4Affected Software1
Hacker One
Hacker One
added 2023/10/08 12:45 p.m.34 views

GitHub: GHES Management console EoP (editor to site admin)

Improper privilege management in GitHub Enterprise Server allowed editor role users to escalate privileges by making requests to the bootstrapping endpoint...

8.8CVSS8.9AI score0.00638EPSS
SaveExploits0
Fedora
Fedora
added 2023/10/07 1:45 a.m.66 views

[SECURITY] Fedora 38 Update: vim-9.0.1984-1.fc38

VIM VIsual editor iMproved is an updated and improved version of the vi editor. Vi was the first real screen-based editor for UNIX, and is still very popular. VIM improves on vi by adding new features: multiple windows, multi-level undo, block highlighting and more...

7.5CVSS7.1AI score0.0119EPSS
SaveExploits1
NVD
NVD
added 2023/10/06 1:15 p.m.33 views

CVE-2023-25480

Cross-Site Request Forgery CSRF vulnerability in BoldGrid Post and Page Builder by BoldGrid – Visual Drag and Drop Editor plugin = 1.24.1 versions...

8.8CVSS5.8AI score0.00256EPSS
SaveExploits0References1
OSV
OSV
added 2023/10/06 1:15 p.m.11 views

CVE-2023-25480

Cross-Site Request Forgery CSRF vulnerability in BoldGrid Post and Page Builder by BoldGrid – Visual Drag and Drop Editor plugin = 1.24.1 versions...

8.8CVSS5.8AI score0.00256EPSS
SaveExploits0References1
Prion
Prion
added 2023/10/06 1:15 p.m.30 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in BoldGrid Post and Page Builder by BoldGrid – Visual Drag and Drop Editor plugin = 1.24.1 versions...

6.8CVSS8.8AI score0.00256EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/10/06 12:41 p.m.44 views

CVE-2023-25480 WordPress Post and Page Builder by BoldGrid – Visual Drag and Drop Editor Plugin <= 1.24.1 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in BoldGrid Post and Page Builder by BoldGrid – Visual Drag and Drop Editor plugin = 1.24.1 versions...

4.3CVSS9AI score0.00256EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/10/06 12:00 a.m.15 views

WordPress Plugin Post and Page Builder by BoldGrid - Visual Drag and Drop Editor Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress Plugin Post and Page Builder...

8.8CVSS6.5AI score0.00256EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2023/10/06 12:00 a.m.13 views

The vulnerability of the dns_zone_editor module of the Control Web Panel (CWP) application, which was previously known as CentOS Web Panel, allows a hacker to execute arbitrary code.

The vulnerability of the dnszoneeditor module of the Control Web Panel formerly CentOS Web Panel relates to the failure to take measures to neutralize special elements. Exploiting this vulnerability may allow a malicious actor to execute arbitrary code remotely...

9CVSS8AI score0.02126EPSS
SaveExploits0References3
Patchstack
Patchstack
added 2023/10/06 12:00 a.m.12 views

WordPress Automated Editor Plugin <= 1.3 is vulnerable to Cross Site Request Forgery (CSRF)

Software Automated Editor Type Plugin Vulnerable versions = 1.3 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-45276 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID cc623180e80f Credits Prasanna V Balaji...

8.8CVSS6.6AI score0.00208EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2023/10/05 12:00 a.m.7 views

Vim Code Problem Vulnerability

Vim is a cross-platform text editor. A code issue vulnerability exists in previous versions of Vim 20d161ace307e28690229b68584f2d84556f8960 that stems from the presence of a null pointer dereference issue...

6.2CVSS7AI score0.00431EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2023/10/05 12:00 a.m.6 views

PT-2023-8851 · Vim +6 · Vim +6

Name of the Vulnerable Software and Affected Versions: vim versions prior to 20d161ace307e28690229b68584f2d84556f8960 Description: The issue is related to a NULL pointer dereference in the exmode of the vim text editor. Exploitation of this issue may allow an attacker to cause a denial of service...

7.8CVSS6.2AI score0.0119EPSS
SaveExploits13References134
OpenVAS
OpenVAS
added 2023/10/05 12:00 a.m.19 views

Fedora: Security Advisory for ckeditor (FEDORA-2023-79b5902a52)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.1CVSS6.6AI score0.00725EPSS
SaveExploits0References2
Fedora
Fedora
added 2023/10/04 3:51 p.m.111 views

[SECURITY] Fedora 38 Update: ckeditor-4.22.1-1.fc38

CKEditor is a text editor to be used inside web pages. It's a WYSIWYG editor, which means that the text being edited on it looks as similar as possible to the results users have when publishing it. It brings to the web common editing features found on desktop editing applications like Microsoft...

6.1CVSS5.6AI score0.00725EPSS
SaveExploits0
Fedora
Fedora
added 2023/10/04 3:49 p.m.42 views

[SECURITY] Fedora 37 Update: ckeditor-4.22.1-1.fc37

CKEditor is a text editor to be used inside web pages. It's a WYSIWYG editor, which means that the text being edited on it looks as similar as possible to the results users have when publishing it. It brings to the web common editing features found on desktop editing applications like Microsoft...

6.1CVSS5.6AI score0.00725EPSS
SaveExploits0
NVD
NVD
added 2023/10/04 12:15 p.m.23 views

CVE-2023-3361

A flaw was found in Red Hat OpenShift Data Science. When exporting a pipeline from the Elyra notebook pipeline editor as Python DSL or YAML, it reads S3 credentials from the cluster ds pipeline server and saves them in plain text in the generated output instead of an ID for a Kubernetes secret...

7.7CVSS7.6AI score0.0047EPSS
SaveExploits0References3
Rows per page
Query Builder