Lucene search
+L

2543 matches found

Zero Day Initiative
Zero Day Initiative
added 2023/10/11 12:00 a.m.26 views

Adobe Bridge Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Bridge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...

3.3CVSS5.8AI score0.00396EPSS
SaveExploits0References1
OSV
OSV
added 2023/10/10 2:15 p.m.6 views

CVE-2023-44470

Cross-Site Request Forgery CSRF vulnerability in Kvvaradha Kv TinyMCE Editor Add Fonts plugin = 1.1 versions...

8.8CVSS7.3AI score0.00221EPSS
SaveExploits0References1
NVD
NVD
added 2023/10/10 2:15 p.m.24 views

CVE-2023-44470

Cross-Site Request Forgery CSRF vulnerability in Kvvaradha Kv TinyMCE Editor Add Fonts plugin = 1.1 versions...

8.8CVSS6.5AI score0.00221EPSS
SaveExploits0References1
Prion
Prion
added 2023/10/10 2:15 p.m.16 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Kvvaradha Kv TinyMCE Editor Add Fonts plugin = 1.1 versions...

6.8CVSS8.8AI score0.00221EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2023/10/10 1:59 p.m.62 views

CVE-2023-44470

CVE-2023-44470 describes a Cross-Site Request Forgery (CSRF) vulnerability in the Kv TinyMCE Editor Add Fonts plugin for WordPress, affecting versions

8.8CVSS7AI score0.00221EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/10/10 1:59 p.m.13 views

CVE-2023-44470 WordPress Kv TinyMCE Editor Add Fonts Plugin <= 1.1 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Kvvaradha Kv TinyMCE Editor Add Fonts plugin = 1.1 versions...

5.4CVSS7.4AI score0.00221EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/10/10 12:00 a.m.13 views

PT-2023-29250 · Unknown · Kvvaradha Kv Tinymce Editor Add Fonts

Name of the Vulnerable Software and Affected Versions: Kvvaradha Kv TinyMCE Editor Add Fonts plugin versions = 1.1 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions...

8.8CVSS8.5AI score0.00221EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2023/10/10 12:00 a.m.7 views

WordPress Plugin kv-tinymce-editor-fonts Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress Plugin...

8.8CVSS6.5AI score0.00221EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2023/09/29 12:00 a.m.12 views

WordPress Kv TinyMCE Editor Add Fonts Plugin <= 1.1 is vulnerable to Cross Site Request Forgery (CSRF)

Software Kv TinyMCE Editor Add Fonts Type Plugin Vulnerable versions = 1.1 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-44470 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 229f3e0b60ce Credits Skalucy...

8.8CVSS6.6AI score0.00221EPSS
SaveExploits0References1Affected Software1
Mageia
Mageia
added 2023/09/11 1:07 p.m.53 views

Updated chromium-browser-stable packages fix security vulnerability

The chromium-browser-stable package has been updated to the 116.0.5845.140 release, fixing 5 vulnerabilities. High CVE-2023-4430: Use after free in Vulkan. Reported by Cassidy Kim@cassidy6564 on 2023-08-02 High CVE-2023-4429: Use after free in Loader. Reported by Anonymous on 2023-08-03 High...

8.8CVSS7.4AI score0.35025EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2023/09/07 12:00 a.m.21 views

Oracle Linux 7 : texlive (ELSA-2020-1036)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-1036 advisory. 2:2012-45.20130427r30134 - Related: 1650521, buffer overflow in t1checkunusualcharstring function 2:2012-44.20130427r30134 - Resolves: 1650521, buffer overflow ...

7.8CVSS7.6AI score0.02058EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2023/09/06 12:00 a.m.11 views

The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 are related to the issue of operations occurring outside the buffer in memory. This allows attackers to gain unauthorized access to protected information.

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 is related to the issue of operations going beyond the buffer in memory when processing embedded fonts. Exploiting thi...

5.5CVSS5.7AI score0.02351EPSS
SaveExploits0References6
BDU FSTEC
BDU FSTEC
added 2023/09/06 12:00 a.m.8 views

The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 are related to the issue of operations occurring outside the buffer in memory. This allows attackers to gain unauthorized access to protected information.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 are related to the issue of operations going beyond the buffer in memory when processing embedded fonts. Exploiting...

5.5CVSS5.8AI score0.02104EPSS
SaveExploits0References6
Veracode
Veracode
added 2023/08/30 3:33 p.m.27 views

Out-Of-Bounds Memory Access

Google Chrome is vulnerable to Out-Of-Bounds Memory Access. The vulnerability exists in the Fonts, which allows an attacker to perform an out of bounds memory read via a maliciously crafted HTML page...

8.1CVSS6.3AI score0.00981EPSS
SaveExploits0References8Affected Software1
OSV
OSV
added 2023/08/30 2:15 p.m.8 views

CVE-2023-34180

Unauth. Reflected Cross-Site Scripting XSS vulnerability in KAPlugins Google Fonts For WordPress plugin = 3.0.0 versions...

6.1CVSS7.3AI score0.00371EPSS
SaveExploits0References1
NVD
NVD
added 2023/08/30 2:15 p.m.32 views

CVE-2023-34180

Unauth. Reflected Cross-Site Scripting XSS vulnerability in KAPlugins Google Fonts For WordPress plugin = 3.0.0 versions...

7.1CVSS6.2AI score0.00371EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/08/30 1:43 p.m.34 views

CVE-2023-34180 WordPress Google Fonts For WordPress Plugin <= 3.0.0 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in KAPlugins Google Fonts For WordPress plugin = 3.0.0 versions...

7.1CVSS6.3AI score0.00371EPSS
SaveExploits0References1
CVE
CVE
added 2023/08/30 1:43 p.m.98 views

CVE-2023-34180

CVE-2023-34180: KA Plugins Google Fonts For WordPress? no—it's Google Fonts For WordPress Plugin (free-google-fonts) ≤ 3.0.0 with unauthenticated cross-site scripting (XSS). Exploitation details are not provided in the documents, but PatchStack notes a fixed version 3.0.1. NVD/NVD-derived data sh...

7.1CVSS6AI score0.00371EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2023/08/30 12:00 a.m.8 views

WordPress plugin free-google-fonts 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...

7.1CVSS6.8AI score0.00371EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2023/08/30 12:00 a.m.27 views

openSUSE 15 Security Update : chromium (openSUSE-SU-2023:0237-1)

The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2023:0237-1 advisory. - Out of bounds memory access in V8 in Google Chrome prior to 116.0.5845.110 allowed a remote attacker to perform an out of bounds memory read vi...

8.8CVSS8.2AI score0.35025EPSS
SaveExploits0References12
Rows per page
Query Builder