Lucene search
+L

2340 matches found

OSV
OSV
added 2020/05/21 4:15 p.m.3 views

ALPINE-CVE-2020-13114

An issue was discovered in libexif before 0.6.22. An unrestricted size in handling Canon EXIF MakerNote data could lead to consumption of large amounts of compute time for decoding EXIF data...

7.5CVSS6.9AI score0.02301EPSS
SaveExploits0References1
FreeBSD
FreeBSD
added 2020/05/18 12:0 a.m.42 views

libexif -- multiple vulnerabilities

Release notes: Lots of fixes exposed by fuzzers like AFL, ClusterFuzz, OSSFuzz and others: CVE-2016-6328: fixed integer overflow when parsing maker notes CVE-2017-7544: fixed buffer overread CVE-2018-20030: Fix for recursion DoS CVE-2019-9278: replaced integer overflow checks the compiler could...

9.1CVSS5AI score0.04059EPSS
SaveExploits1References10
RedHat Linux
RedHat Linux
added 2020/04/28 4:8 p.m.4 views

php: Uninitialized read in exif_process_IFD_in_MAKERNOTE

An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There is an uninitialized read in exifprocessIFDinMAKERNOTE because of mishandling the datalen variable...

7.5CVSS7.3AI score0.08202EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
added 2020/04/28 4:8 p.m.7 views

php: Uninitialized read in exif_process_IFD_in_MAKERNOTE

An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There is an uninitialized read in exifprocessIFDinMAKERNOTE because of mishandling the makernote-offset relationship to valuelen...

7.5CVSS7.3AI score0.06677EPSS
SaveExploits1References4
Microsoft KB
Microsoft KB
added 2020/04/10 12:0 a.m.10 views

You cannot start Windows Movie Maker 2012 when a graphics card that only supports DirectX 9 is installed on a Windows 7 or Windows Server 2008 R2-based computer

You cannot start Windows Movie Maker 2012 when a graphics card that only supports DirectX 9 is installed on a Windows 7 or Windows Server 2008 R2-based computer Symptoms Assume that a graphics card that only supports DirectX 9 is installed on a computer that is running Windows 7 or Windows Server...

6.2AI score
SaveExploits0
OSV
OSV
added 2020/02/13 3:15 p.m.7 views

CVE-2020-3734

Adobe Framemaker versions 2019.0.4 and below have a buffer error vulnerability. Successful exploitation could lead to arbitrary code execution...

8.8CVSS7.7AI score0.04528EPSS
SaveExploits0References1
OSV
OSV
added 2020/02/13 3:15 p.m.6 views

CVE-2020-3725

Adobe Framemaker versions 2019.0.4 and below have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution...

8.8CVSS7.5AI score0.03966EPSS
SaveExploits0References1
OSV
OSV
added 2020/02/13 3:15 p.m.5 views

CVE-2020-3721

Adobe Framemaker versions 2019.0.4 and below have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution...

8.8CVSS7.5AI score0.03966EPSS
SaveExploits0References1
OSV
OSV
added 2020/02/13 3:15 p.m.5 views

CVE-2020-3727

Adobe Framemaker versions 2019.0.4 and below have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution...

8.8CVSS7.5AI score0.0391EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/02/12 12:0 a.m.6 views

Adobe FrameMaker Out-of-Bounds Write Vulnerability (CNVD-2020-08149)

Adobe FrameMaker is a page layout software provided by the American company Audobee Adobe. An out-of-bounds write vulnerability exists in Adobe FrameMaker. An attacker can exploit the vulnerability to execute arbitrary code...

8.8CVSS7.6AI score0.0391EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/02/12 12:0 a.m.6 views

Adobe FrameMaker Out-of-Bounds Write Vulnerability (CNVD-2020-08156)

Adobe FrameMaker is a page layout software provided by the American company Audobee Adobe. An out-of-bounds write vulnerability exists in Adobe FrameMaker. An attacker can exploit the vulnerability to execute arbitrary code...

8.8CVSS7.6AI score0.0391EPSS
SaveExploits0References1
Malwarebytes
Malwarebytes
added 2020/02/07 7:24 p.m.76 views

Google Maps: online interventions with offline ramifications

The places where online life directly intersection with that lived offline will be forever fascinating, illustrated perfectly through a recent performance piece involving Google Maps, a cart, and an awful lot of mobile phones. Simon Weckert, an artist based in Berlin, Germany, showed how a little...

7.2AI score
SaveExploits0
RedHat Linux
RedHat Linux
added 2019/11/01 1:3 p.m.8 views

php: Uninitialized read in exif_process_IFD_in_MAKERNOTE

An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There is an uninitialized read in exifprocessIFDinMAKERNOTE because of mishandling the makernote-offset relationship to valuelen...

7.5CVSS7.3AI score0.06677EPSS
SaveExploits1References4
CNVD
CNVD
added 2019/10/16 12:0 a.m.6 views

WordPress Popup Maker Plugin Has Unspecified Vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers.Popup Maker is a popup window plugin used in it. A security vulnerability exists in WordPress Popup Maker plugin versions...

9.1CVSS6.4AI score0.0931EPSS
SaveExploits2References1
NVD
NVD
added 2019/10/14 2:15 p.m.30 views

CVE-2019-17574

An issue was discovered in the Popup Maker plugin before 1.8.13 for WordPress. An unauthenticated attacker can partially control the arguments of the doaction function to invoke certain popmake or pum methods, as demonstrated by controlling content and delivery of popmake-system-info.txt aka the...

9.1CVSS9.3AI score0.0931EPSS
SaveExploits2References3
OSV
OSV
added 2019/10/14 2:15 p.m.15 views

CVE-2019-17574

An issue was discovered in the Popup Maker plugin before 1.8.13 for WordPress. An unauthenticated attacker can partially control the arguments of the doaction function to invoke certain popmake or pum methods, as demonstrated by controlling content and delivery of popmake-system-info.txt aka the...

9.1CVSS7.2AI score
SaveExploits0References3
Prion
Prion
added 2019/10/14 2:15 p.m.19 views

Deserialization of untrusted data

An issue was discovered in the Popup Maker plugin before 1.8.13 for WordPress. An unauthenticated attacker can partially control the arguments of the doaction function to invoke certain popmake or pum methods, as demonstrated by controlling content and delivery of popmake-system-info.txt aka the...

6.4CVSS9.2AI score0.0931EPSS
SaveExploits2References3Affected Software1
Cvelist
Cvelist
added 2019/10/14 1:55 p.m.33 views

CVE-2019-17574

An issue was discovered in the Popup Maker plugin before 1.8.13 for WordPress. An unauthenticated attacker can partially control the arguments of the doaction function to invoke certain popmake or pum methods, as demonstrated by controlling content and delivery of popmake-system-info.txt aka the...

9.3AI score0.0931EPSS
SaveExploits2References3
CVE
CVE
added 2019/10/14 1:55 p.m.176 views

CVE-2019-17574

The CVE concerns the WordPress Popup Maker plugin prior to version 1.8.13. An unauthenticated attacker can partially control the arguments passed to the do_action function to invoke certain popmake_ or pum_ methods, demonstrated by manipulation of the popmake-system-info.txt “support debug text f...

9.1CVSS9.1AI score0.0931EPSS
SaveExploits2References3Affected Software1
wpexploit
wpexploit
added 2019/10/14 12:0 a.m.133 views

Popup-Maker < 1.8.12 - Multiple Vulnerabilities

An attacker can partially control the arguments of the doaction, during the initialization of the PUMSite . Because of this, an attacker can call any method which contains an action starting from popmake or pum . This will lead to successful execution of functions which do not require arguments...

6.4CVSS1.6AI score0.0931EPSS
SaveExploits2References1
Rows per page
Query Builder