Lucene search
+L

8037 matches found

Cvelist
Cvelist
added 2024/04/12 9:30 a.m.108 views

CVE-2024-3054 WPvivid Backup & Migration Plugin <= 0.9.99 - Authenticated (Admin+) PHAR Deserialization

WPvivid Backup & Migration Plugin for WordPress is vulnerable to PHAR Deserialization in all versions up to, and including, 0.9.99 via deserialization of untrusted input at the wpvividstggetcustomexcludepathfree action. This is due to the plugin not providing sufficient path validation on the...

7.2CVSS7.1AI score0.41543EPSS
SaveExploits0References2
Friends Of PHP
Friends Of PHP
added 2024/04/10 4:24 p.m.44 views

Deserialization of Untrusted Data in timber/timber

Summary Timber is vulnerable to PHAR deserialization due to a lack of checking the input before passing it into the fileexists function. If an attacker can upload files of any type to the server, he can pass in the phar:// protocol to unserialize the uploaded file and instantiate arbitrary PHP...

8CVSS8.2AI score0.00454EPSS
SaveExploits0Affected Software1
NCSC
NCSC
added 2024/04/09 12:0 a.m.11 views

Vulnerabilities fixed in SAP products

SAP has fixed vulnerabilities in several SAP products, including Netweaver, HANA, Fiori and Business Objects. A malicious party can exploit the vulnerabilities to launch attacks execute attacks that can lead to the following categories of damage: Cross-Site Scripting XSS. Denial-of-Service DoS...

8.8CVSS6.3AI score0.00727EPSS
SaveExploits0
CNVD
CNVD
added 2024/04/09 12:0 a.m.57 views

Foxit PDF Reader Code Execution Vulnerability (CNVD-2024-20601)

Foxit PDF Reader is China Foxit Foxit company a PDF reader. Foxit PDF Reader has a code execution vulnerability that stems from a post-release reuse problem when dealing with Doc objects, which can be exploited by an attacker to execute arbitrary code in the context of the current process...

7.8CVSS7.7AI score0.00914EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2024/04/04 12:0 a.m.13 views

The vulnerability of the module for signing and encrypting JSON objects in Erlang and Elixir programming languages, namely erlang-jose (JOSE for Erlang), involves an uncontrolled resource consumption. This allows a malicious actor to trigger a service failure.

The vulnerability of the module for signing and encrypting JSON objects in Erlang and Elixir programming languages, namely erlang-jose JOSE for Erlang, is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures remotel...

7.8CVSS6.1AI score0.00887EPSS
SaveExploits0References11Affected Software4
NVD
NVD
added 2024/04/03 5:15 p.m.22 views

CVE-2024-30334

Foxit PDF Reader Doc Object Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious...

7.8CVSS8.2AI score0.00914EPSS
SaveExploits0References2
OSV
OSV
added 2024/04/03 5:15 p.m.4 views

CVE-2024-30331

Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious pa...

7.8CVSS6.2AI score0.00914EPSS
SaveExploits0References2
OSV
OSV
added 2024/04/03 5:15 p.m.6 views

CVE-2024-30330

Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious pa...

7.8CVSS6.3AI score0.00899EPSS
SaveExploits0References2
NVD
NVD
added 2024/04/03 5:15 p.m.25 views

CVE-2024-30328

Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious pa...

7.8CVSS8.1AI score0.00914EPSS
SaveExploits0References2
OSV
OSV
added 2024/04/03 5:15 p.m.8 views

CVE-2024-30332

Foxit PDF Reader Doc Object Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious...

7.8CVSS6.2AI score0.00914EPSS
SaveExploits0References2
OSV
OSV
added 2024/04/03 5:15 p.m.2 views

CVE-2024-30324

Foxit PDF Reader Doc Object Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious...

7.8CVSS6.3AI score0.00914EPSS
SaveExploits0References2
OSV
OSV
added 2024/04/03 5:15 p.m.7 views

CVE-2024-30325

Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious pa...

7.8CVSS6.3AI score0.00914EPSS
SaveExploits0References2
NVD
NVD
added 2024/04/03 5:15 p.m.19 views

CVE-2024-30323

Foxit PDF Reader template Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a maliciou...

7.8CVSS8.1AI score0.00862EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/04/03 4:23 p.m.17 views

CVE-2024-30333 Foxit PDF Reader Doc Object Use-After-Free Remote Code Execution Vulnerability

Foxit PDF Reader Doc Object Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious...

7.8CVSS7.3AI score0.00914EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/04/03 4:23 p.m.36 views

CVE-2024-30333 Foxit PDF Reader Doc Object Use-After-Free Remote Code Execution Vulnerability

Foxit PDF Reader Doc Object Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious...

7.8CVSS8.2AI score0.00914EPSS
SaveExploits0References2
CVE
CVE
added 2024/04/03 4:23 p.m.74 views

CVE-2024-30333

CVE-2024-30333 is a Foxit PDF Reader Doc Object Use-After-Free Remote Code Execution vulnerability. The flaw arises from not validating the existence of a Doc object before performing operations, enabling an attacker to execute code in the process context. Exploitation requires user interaction (...

7.8CVSS8.2AI score0.00914EPSS
SaveExploits0References2Affected Software2
CVE
CVE
added 2024/04/03 4:23 p.m.68 views

CVE-2024-30331

CVE-2024-30331 affects Foxit PDF Reader/Editor (AcroForm Use-After-Free in AcroForms handling). The flaw arises from not validating object existence before operations on Doc objects, enabling code execution in the process context when a user opens a malicious file/page or visits a crafted page. T...

7.8CVSS8.2AI score0.00914EPSS
SaveExploits0References2Affected Software2
Vulnrichment
Vulnrichment
added 2024/04/03 4:22 p.m.24 views

CVE-2024-30330 Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability

Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious pa...

7.8CVSS8AI score0.00899EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/04/03 4:22 p.m.39 views

CVE-2024-30330 Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability

Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious pa...

7.8CVSS8.2AI score0.00899EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/04/03 4:22 p.m.46 views

CVE-2024-30329 Foxit PDF Reader Annotation Use-After-Free Information Disclosure Vulnerability

Foxit PDF Reader Annotation Use-After-Free Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a...

3.3CVSS5.4AI score0.00711EPSS
SaveExploits0References2
Rows per page
Query Builder