Lucene search
+L

9410 matches found

OSV
OSV
added 2023/06/06 4:15 p.m.14 views

CVE-2023-32281

The affected application lacks proper validation of user-supplied data when parsing project files e.g., CSP. This could lead to an out-of-bounds read in the FontManager. An attacker could leverage this vulnerability to execute arbitrary code in the context of the current process...

7.8CVSS6.1AI score0.00227EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/06/06 12:00 a.m.16 views

Horner Automation Cscape 缓冲区错误漏洞

Horner Automation Cscape is a suite of programming software for industrial control system development from Horner Automation. A buffer error vulnerability exists in Horner Automation Cscape v9.90 SP8 and Cscape EnvisionRV v4.70, which stems from a lack of proper validation of user-supplied data...

7.8CVSS8AI score0.00227EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2023/06/03 2:15 a.m.11 views

CVE-2023-0584

The VK Blocks plugin for WordPress is vulnerable to improper authorization via the REST 'updateoptions' function in versions up to, and including, 1.57.0.5. This allows authenticated attackers, with contributor-level permissions or above, to change the 'vkfontawesomeversion' option to an arbitrar...

4.3CVSS6.7AI score0.00508EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2023/06/03 2:13 a.m.6 views

SUSE CVE-2023-29537

Multiple race conditions in the font initialization could have led to memory corruption and execution of attacker-controlled code. This vulnerability affects Firefox for Android 112, Firefox 112, and Focus for Android 112...

7.5CVSS8.8AI score0.00552EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2023/06/03 12:00 a.m.14 views

WordPress plugin VK Blocks 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

4.3CVSS6.6AI score0.00508EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2023/06/03 12:00 a.m.17 views

PT-2023-16383 · WordPress · Vk Blocks

Name of the Vulnerable Software and Affected Versions: VK Blocks plugin for WordPress versions up to, and including, 1.57.0.5 Description: The issue concerns improper authorization via the REST update options function. This allows authenticated attackers with contributor-level permissions or abov...

4.3CVSS5.6AI score0.00508EPSS
SaveExploits0References6
NVD
NVD
added 2023/06/02 5:15 p.m.21 views

CVE-2023-29537

Multiple race conditions in the font initialization could have led to memory corruption and execution of attacker-controlled code. This vulnerability affects Firefox for Android 112, Firefox 112, and Focus for Android 112...

7.5CVSS7.1AI score0.00552EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2023/06/02 5:15 p.m.3 views

CVE-2023-29537

Multiple race conditions in the font initialization could have led to memory corruption and execution of attacker-controlled code. This vulnerability affects Firefox for Android 112, Firefox 112, and Focus for Android 112...

7.5CVSS7.3AI score0.00552EPSS
SaveExploits0References5
Prion
Prion
added 2023/06/02 5:15 p.m.22 views

Race condition

Multiple race conditions in the font initialization could have led to memory corruption and execution of attacker-controlled code. This vulnerability affects Firefox for Android 112, Firefox 112, and Focus for Android 112...

5.1CVSS7.5AI score0.00552EPSS
SaveExploits0References4Affected Software2
OSV
OSV
added 2023/06/02 12:00 a.m.8 views

CVE-2023-29537

Multiple race conditions in the font initialization could have led to memory corruption and execution of attacker-controlled code. This vulnerability affects Firefox for Android 112, Firefox 112, and Focus for Android 112...

7.4AI score
SaveExploits0References6
Cvelist
Cvelist
added 2023/06/02 12:00 a.m.34 views

CVE-2023-29537

Multiple race conditions in the font initialization could have led to memory corruption and execution of attacker-controlled code. This vulnerability affects Firefox for Android 112, Firefox 112, and Focus for Android 112...

7.8AI score0.00552EPSS
SaveExploits0References4
Debian CVE
Debian CVE
added 2023/06/02 12:00 a.m.35 views

CVE-2023-29537

Multiple race conditions in the font initialization could have led to memory corruption and execution of attacker-controlled code. This vulnerability affects Firefox for Android 112, Firefox 112, and Focus for Android 112...

7.5CVSS9AI score0.00552EPSS
SaveExploits0
CVE
CVE
added 2023/06/02 12:00 a.m.180 views

CVE-2023-29537

CVE-2023-29537 concerns multiple race conditions in font initialization that could cause memory corruption and allow attacker-controlled code execution. Affected products include Mozilla Firefox on Android, Firefox versions before 112, and Focus for Android before 112. The vulnerability’s root ca...

7.5CVSS7.4AI score0.00552EPSS
SaveExploits0References4Affected Software3
Fedora
Fedora
added 2023/05/31 1:35 a.m.35 views

[SECURITY] Fedora 38 Update: texlive-base-20220321-72.fc38

The TeX Live software distribution offers a complete TeX system for a variety of Unix, Macintosh, Windows and other platforms. It encompasses programs for editing, typesetting, previewing and printing of TeX documents in many different languages, and a large collection of TeX macros and font...

8.8CVSS7AI score0.00804EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2023/05/26 12:00 a.m.4 views

PT-2023-4766 · Adobe · Acrobat Reader

Name of the Vulnerable Software and Affected Versions: Adobe Acrobat Reader versions 23.003.20244 and earlier Adobe Acrobat Reader versions 20.005.30467 and earlier Description: The issue is related to an out-of-bounds read vulnerability in Adobe Acrobat and Reader, which could lead to disclosure...

5.5CVSS5.1AI score0.02353EPSS
SaveExploits0References10
Zero Day Initiative
Zero Day Initiative
added 2023/05/25 12:00 a.m.24 views

Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

3.3CVSS5.9AI score0.00261EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/05/25 12:00 a.m.28 views

Adobe Acrobat Reader DC Font Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS6.8AI score0.00351EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/05/25 12:00 a.m.42 views

Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS6.8AI score0.00284EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/05/25 12:00 a.m.62 views

Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS6.8AI score0.00284EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/05/24 12:00 a.m.6 views

PT-2023-4764 · Adobe · Acrobat Reader +1

Name of the Vulnerable Software and Affected Versions: Adobe Acrobat Reader versions 23.003.20244 and earlier Adobe Acrobat Reader versions 20.005.30467 and earlier Adobe Acrobat 2020 Adobe Acrobat Reader 2020 Description: The issue is related to an Access of Uninitialized Pointer that could resu...

7.8CVSS7.7AI score0.02766EPSS
SaveExploits0References12
Rows per page
Query Builder