Lucene search
+L

19791 matches found

osv_cve
osv_cve
•added 2024/12/30 1:00 a.m.•21 views

CVE-2024-13032 Antabot White-Jotter Article Editor editor server-side request forgery

A vulnerability classified as problematic was found in Antabot White-Jotter up to 0.2.2. Affected by this vulnerability is an unknown functionality of the file /admin/content/editor of the component Article Editor. The manipulation of the argument articleCover leads to server-side request forgery...

5.1CVSS5AI score
SaveExploits0References6
Mend
Mend
•added 2024/12/30 1:00 a.m.•6 views

CVE-2024-13032

A vulnerability classified as problematic was found in Antabot White-Jotter up to 0.2.2. Affected by this vulnerability is an unknown functionality of the file /admin/content/editor of the component Article Editor. The manipulation of the argument articleCover leads to server-side request forgery...

5.1CVSS0.00541EPSS
SaveExploits1References6
CVE
CVE
•added 2024/12/30 12:31 a.m.•80 views

CVE-2024-13031

The CVE-2024-13031 affects Antabot White-Jotter up to version 0.2.2. Affected component: /admin/content/editor in the Article Content Editor. Root cause: cross-site scripting due to an issue in the editor’s handling, enabling remote exploitation. The vulnerability is publicly disclosed and can be...

5.1CVSS3.5AI score0.00389EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
•added 2024/12/30 12:31 a.m.•45 views

CVE-2024-13031 Antabot White-Jotter Article Content Editor editor cross site scripting

A vulnerability classified as problematic has been found in Antabot White-Jotter up to 0.2.2. Affected is an unknown function of the file /admin/content/editor of the component Article Content Editor. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. Th...

5.1CVSS0.00389EPSS
SaveExploits1References4
Mend
Mend
•added 2024/12/30 12:31 a.m.•11 views

CVE-2024-13031

A vulnerability classified as problematic has been found in Antabot White-Jotter up to 0.2.2. Affected is an unknown function of the file /admin/content/editor of the component Article Content Editor. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. Th...

5.1CVSS0.00389EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/30 12:00 a.m.•8 views

CVE-2024-13032: Server-Side Request Forgery (SSRF)

A vulnerability classified as problematic was found in Antabot White-Jotter up to 0.2.2. Affected by this vulnerability is an unknown functionality of the file /admin/content/editor of the component Article Editor. The manipulation of the argument articleCover leads to server-side request forgery...

5.1CVSS4.8AI score0.00541EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/30 12:00 a.m.•10 views

CVE-2024-13031: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic has been found in Antabot White-Jotter up to 0.2.2. Affected is an unknown function of the file /admin/content/editor of the component Article Content Editor. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. Th...

5.1CVSS3.5AI score0.00389EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/12/30 12:00 a.m.•18 views

White-Jotter 代码问题漏洞

White-Jotter is a front-end and back-end separation project developed by Antabot personal developer using Vue+Spring Boot, with a full set of development tutorials. A code issue vulnerability exists in White-Jotter 0.2.2 and earlier versions, which stems from the articleCover parameter of the fil...

5.1CVSS5.4AI score0.00541EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2024/12/30 12:00 a.m.•6 views

PT-2024-17888

Name of the Vulnerable Software and Affected Versions Antabot White-Jotter versions up to 0.2.2 Description A problematic vulnerability has been found in the component Article Content Editor, specifically in an unknown function of the file /admin/content/editor. This manipulation leads to cross...

5.1CVSS0.00389EPSS
SaveExploits1References11
CNNVD
CNNVD
•added 2024/12/30 12:00 a.m.•21 views

White-Jotter 代码注入漏洞

White-Jotter is an Antabot personal developer's front-end and back-end separation project using Vue+Spring Boot development, comes with a full set of development tutorials. Antabot White-Jotter 0.2.2 and earlier versions have a code injection vulnerability that originates from the component artic...

5.1CVSS5.2AI score0.00389EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2024/12/30 12:00 a.m.•24 views

PT-2024-17889 · Unknown · Antabot White-Jotter

Name of the Vulnerable Software and Affected Versions: Antabot White-Jotter versions up to 0.2.2 Description: A problematic issue has been found in the Article Editor component, specifically in the /admin/content/editor file, affecting an unknown functionality. The manipulation of the articleCove...

5.1CVSS4.9AI score0.00541EPSS
SaveExploits1References10
BDU FSTEC
BDU FSTEC
•added 2024/12/25 12:00 a.m.•22 views

Foxit PDF Reader PDF Code Execution

The vulnerability of the PDF document viewing program Foxit PDF Reader formerly Foxit Reader and the PDF file editing program Foxit PDF Editor formerly Foxit PhantomPDF is related to memory overflow attacks. Exploiting this vulnerability allows an attacker to execute arbitrary code using a...

7.8CVSS7.7AI score0.00862EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
•added 2024/12/25 12:00 a.m.•25 views

Foxit PDF Reader Use After Free

The vulnerability of the PDF document viewing program Foxit PDF Reader formerly Foxit Reader and the PDF file editing program Foxit PDF Editor formerly Foxit PhantomPDF is related to the use of pointers after memory release during the processing of Doc objects in AcroForms. Exploiting this...

7.8CVSS7.6AI score0.00899EPSS
SaveExploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
•added 2024/12/25 12:00 a.m.•18 views

PDF Foxit Reader AcroForm Handler Memory Management Code Execution

The vulnerability of the AcroForm Handler component in the PDF Foxit Reader formerly Foxit Reader and Foxit PDF Editor formerly Foxit PhantomPDF software for viewing electronic documents is related to the use of memory after it is released during object processing. Exploiting this vulnerability...

7.8CVSS7.6AI score0.00914EPSS
SaveExploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
•added 2024/12/25 12:00 a.m.•22 views

Foxit PDF Reader Use After Free

The vulnerability of the PDF document viewing program Foxit PDF Reader formerly Foxit Reader and the PDF file editing program Foxit PDF Editor formerly Foxit PhantomPDF is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.6AI score0.00922EPSS
SaveExploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
•added 2024/12/25 12:00 a.m.•26 views

Foxit PDF Reader Pointer Handling Code Execution

The vulnerability of the PDF document viewing program Foxit PDF Reader formerly Foxit Reader and the PDF file editing program Foxit PDF Editor formerly Foxit PhantomPDF is related to a bug in the handling of pointers after memory release during the processing of AcroForm objects. Exploiting this...

7.8CVSS7.6AI score0.00914EPSS
SaveExploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
•added 2024/12/25 12:00 a.m.•20 views

Foxit PDF Reader Use After Free

The vulnerability of the PDF document viewing program Foxit PDF Reader formerly Foxit Reader and the PDF file editing program Foxit PDF Editor formerly Foxit PhantomPDF is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.6AI score0.00895EPSS
SaveExploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
•added 2024/12/25 12:00 a.m.•15 views

Foxit PDF Reader Use After Free

The vulnerability of the PDF document viewing program Foxit PDF Reader formerly Foxit Reader and the PDF file editing program Foxit PDF Editor formerly Foxit PhantomPDF is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.6AI score0.00914EPSS
SaveExploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
•added 2024/12/25 12:00 a.m.•22 views

Foxit PDF Reader Use After Free

The vulnerability of the PDF document viewing program Foxit PDF Reader formerly Foxit Reader and the PDF file editing program Foxit PDF Editor formerly Foxit PhantomPDF is related to a memory corruption issue after object handling. Exploiting this vulnerability can allow an attacker to execute...

7.8CVSS7.7AI score0.00914EPSS
SaveExploits0References5Affected Software2
Github Security Blog
Github Security Blog
•added 2024/12/19 10:47 a.m.•2 views

Malware in metamodel-editor

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Rows per page
Query Builder