Lucene search
+L

9417 matches found

Zero Day Initiative
Zero Day Initiative
added 2022/04/28 12:00 a.m.28 views

Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS4.8AI score0.10108EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/04/28 12:00 a.m.27 views

Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS4.8AI score0.10626EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/04/28 12:00 a.m.30 views

Adobe Photoshop Font Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Photoshop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS4.2AI score0.02835EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/04/28 12:00 a.m.34 views

Adobe Acrobat Reader DC Font Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS4.8AI score0.12862EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/04/28 12:00 a.m.27 views

Adobe Acrobat Reader DC Font Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS4.8AI score0.1224EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/04/28 12:00 a.m.22 views

Adobe Acrobat Reader DC Font Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS4.8AI score0.12464EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/04/28 12:00 a.m.41 views

Adobe Acrobat Reader DC Font Parsing Uninitialized Variable Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS5.7AI score0.14665EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2022/04/22 12:00 a.m.10 views

FreeType 缓冲区错误漏洞

FreeType is an open source font rendering library written in the C language. A security vulnerability exists in FreeType, which stems from the commit 1e2eb65048f75c64b68708efed6ce904c31f3b2f was found to contain a heap buffer overflow via the function sfntinitface...

9.8CVSS7.5AI score0.02736EPSS
SaveExploits1References18
OSV
OSV
added 2022/04/15 5:15 p.m.12 views

CVE-2022-27851

Cross-Site Request Forgery CSRF in Use Any Font WordPress plugin = 6.1.7 allows an attacker to deactivate the API key...

4.3CVSS5.8AI score0.00397EPSS
SaveExploits0References2
NVD
NVD
added 2022/04/15 5:15 p.m.31 views

CVE-2022-27851

Cross-Site Request Forgery CSRF in Use Any Font WordPress plugin = 6.1.7 allows an attacker to deactivate the API key...

5.4CVSS0.00397EPSS
SaveExploits0References2
CVE
CVE
added 2022/04/15 4:24 p.m.87 views

CVE-2022-27851

The CVE-2022-27851 entry concerns a CSRF vulnerability in the WordPress plugin Use Any Font, versions up to 6.1.7, that allows an attacker to deactivate the API key. Root cause: missing CSRF protection on the API key deactivation action. Impact: an attacker could cause a admin user to deactivate ...

5.4CVSS4.8AI score0.00397EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2022/04/15 4:24 p.m.42 views

CVE-2022-27851 WordPress Use Any Font plugin <= 6.1.7 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF in Use Any Font WordPress plugin = 6.1.7 allows an attacker to deactivate the API key...

5.4CVSS5.9AI score0.00397EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2022/04/15 12:00 a.m.13 views

WordPress插件 Use Any Font跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress plugin Use Any Font 6.1.7 and its...

5.4CVSS5.2AI score0.00397EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2022/04/12 11:00 p.m.13 views

CVE-2022-27791

Acrobat Reader DC versions 22.001.20085 and earlier, 20.005.3031x and earlier and 17.012.30205 and earlier is affected by a stack-based buffer overflow vulnerability due to insecure processing of a font, potentially resulting in arbitrary code execution in the context of the current user...

9.3CVSS7.9AI score0.18297EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2022/04/12 11:00 p.m.7 views

CVE-2022-27786

Acrobat Reader DC versions 22.001.20085 and earlier, 20.005.3031x and earlier and 17.012.30205 and earlier are affected by a use-after-free vulnerability in the processing of fonts that could result in arbitrary code execution in the context of the current user. Exploitation of this issue require...

9.3CVSS6.4AI score0.12464EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2022/04/12 11:00 p.m.5 views

CVE-2022-27785

Acrobat Reader DC versions 22.001.20085 and earlier, 20.005.3031x and earlier and 17.012.30205 and earlier are affected by a use-after-free vulnerability in the processing of fonts that could result in arbitrary code execution in the context of the current user. Exploitation of this issue require...

9.3CVSS6.4AI score0.12862EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2022/04/12 11:00 p.m.3 views

CVE-2022-27790

Acrobat Reader DC versions 22.001.20085 and earlier, 20.005.3031x and earlier and 17.012.30205 and earlier are affected by a use-after-free vulnerability in the processing of fonts that could result in arbitrary code execution in the context of the current user. Exploitation of this issue require...

9.3CVSS7.6AI score0.1224EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2022/04/11 12:00 a.m.15 views

The vulnerability of the put_font function in the genpict2e.c component of the Fig2dev file conversion utility, related to copying buffers without checking the input data, allows a malicious actor to cause service failures.

The vulnerability of the putfont function in the genpict2e.c component of the Fig2dev file conversion utility is related to the copying of buffers without checking the input data. Exploiting this vulnerability allows an attacker to cause service interruptions by converting xfig files into pict2e...

7.1CVSS5.8AI score0.00699EPSS
SaveExploits1References5Affected Software2
Patchstack
Patchstack
added 2022/04/11 12:00 a.m.14 views

WordPress Custom Font Uploader plugin <= 2.1.0 - Arbitrary Plugin Installation, Activation and Deactivation vulnerability

Arbitrary Plugin Installation, Activation and Deactivation vulnerability discovered by Mary JJ Jay in WordPress Custom Font Uploader plugin versions = 2.1.0. Solution Deactivate and delete. This plugin has been closed as of March 9, 2022 and is not available for download. This closure is temporar...

2.6AI score
SaveExploits0References2Affected Software1
ALT Linux
ALT Linux
added 2022/04/07 12:00 a.m.82 views

Security fix for the ALT Linux 10 package java-1.8.0-openjdk version 0:1.8.0.322.b06-alt2_1jpp8

0:1.8.0.322.b06-alt21jpp8 built April 7, 2022 Andrey Cherepanov in task 295626 --- Feb. 18, 2022 Andrey Cherepanov - New version. - Security fixes: + JDK-8264934, CVE-2022-21248: Enhance cross VM serialization + JDK-8268488: More valuable DerValues + JDK-8268494: Better inlining of inlined...

5CVSS1.1AI score0.08346EPSS
SaveExploits0
Rows per page
Query Builder