Lucene search
+L

9909 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/02/18 12:00 a.m.•6 views

CVE-2022-24364: Use After Free

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

8.8CVSS7.9AI score0.02543EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/02/18 12:00 a.m.•5 views

CVE-2022-24368: Use After Free

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader 11.1.0.52543. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

6.5CVSS6.3AI score0.02095EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/02/18 12:00 a.m.•5 views

CVE-2022-24363: Use After Free

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

8.8CVSS7.9AI score0.02543EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/02/18 12:00 a.m.•7 views

CVE-2022-24360: Use After Free

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

8.8CVSS7.9AI score0.02543EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/02/18 12:00 a.m.•6 views

CVE-2022-24358: Out-of-bounds Read

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

8.8CVSS7.9AI score0.02543EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/02/18 12:00 a.m.•5 views

CVE-2022-24357: Use After Free

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

8.8CVSS7.9AI score0.02543EPSS
SaveExploits0References2
CNVD
CNVD
•added 2022/02/17 12:00 a.m.•77 views

Atlassian Jira Service Management Server Licensing Issue Vulnerability

Atlassian Jira Service is a server-based version of Atlassian Australia's IT service desk and request tracking system, which is used to receive, track and manage requests from team clients. An authorization issue vulnerability exists in Atlassian Jira Service Management Server, which stems from...

4.3CVSS3.8AI score0.00845EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2022/02/15 4:15 a.m.•23 views

CVE-2021-43948

Affected versions of Atlassian Jira Service Management Server and Data Center allow authenticated remote attackers to view the names of private objects via an Improper Authorization vulnerability in the "Move objects" feature. The affected versions are before version 4.21.0...

4.3CVSS5.8AI score0.00845EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2022/02/15 3:35 a.m.•21 views

CVE-2021-43948

Affected versions of Atlassian Jira Service Management Server and Data Center allow authenticated remote attackers to view the names of private objects via an Improper Authorization vulnerability in the "Move objects" feature. The affected versions are before version 4.21.0...

6.7AI score0.00845EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2022/02/15 12:00 a.m.•30 views

Atlassian Jira Service Management Server and Data Center security vulnerabilities

Atlassian Jira Service is a server-based version of Atlassian Australia's IT service desk and request tracking system, which is used to receive, track and manage requests from team clients. An authorization issue vulnerability exists in Atlassian Jira Service Management Server, which stems from...

4.3CVSS5.7AI score0.00845EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2022/02/15 12:00 a.m.•2 views

PT-2022-11948

Name of the Vulnerable Software and Affected Versions Atlassian Jira Service Management Server and Data Center versions prior to 4.21.0 Description The issue allows authenticated remote attackers to view the names of private objects due to an Improper Authorization vulnerability in the "Move...

4.3CVSS0.00845EPSS
SaveExploits0References4
Mend
Mend
•added 2022/02/11 8:00 p.m.•6 views

CVE-2021-23555

The package vm2 before 3.9.6 are vulnerable to Sandbox Bypass via direct access to host error objects generated by node internals during generation of a stacktraces, which can lead to execution of arbitrary code on the host machine...

10CVSS0.02876EPSS
SaveExploits1References3
attackerkb
attackerkb
•added 2022/02/11 8:00 p.m.•15 views

CVE-2021-23555

The package vm2 before 3.9.6 are vulnerable to Sandbox Bypass via direct access to host error objects generated by node internals during generation of a stacktraces, which can lead to execution of arbitrary code on the host machine...

10CVSS7.6AI score0.02876EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2022/02/11 12:00 a.m.•40 views

vm2 security vulnerabilities

Vm2 is an advanced virtual machine/sandbox for Node.js by individual developer Patrik Simek in the Czech Republic. to run untrusted code using whitelisted Node built-in modules. vm2 suffers from a security vulnerability that stems from being susceptible to sandbox bypass attacks by directly...

10CVSS8.8AI score0.02876EPSS
SaveExploits1References5
CNVD
CNVD
•added 2022/02/10 12:00 a.m.•98 views

SAP Business Objects Web Intelligence跨站脚本漏洞

SAP Business Objects Web Intelligence is a centralized suite from SAP, a German company used for data reporting, visualization and sharing. SAP Business Objects Web Intelligence is vulnerable to a cross-site scripting vulnerability that could be exploited by attackers to compromise vulnerable...

5.4CVSS1.5AI score0.00489EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/02/10 12:00 a.m.•55 views

Foxit PDF Reader Doc Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS1AI score0.02095EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/02/10 12:00 a.m.•34 views

Foxit PDF Reader Doc Object Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of D...

7.8CVSS2.2AI score0.02543EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/02/10 12:00 a.m.•35 views

Foxit PDF Reader Doc Object Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of D...

7.8CVSS2.2AI score0.02543EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/02/10 12:00 a.m.•35 views

Foxit PDF Reader Doc Object Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of D...

7.8CVSS2.2AI score0.02543EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/02/10 12:00 a.m.•2 views

PT-2022-16642

Name of the Vulnerable Software and Affected Versions Foxit PDF Reader version 11.1.0.52543 Description This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a malicious file. The...

8.8CVSS0.02543EPSS
SaveExploits0References5
Rows per page
Query Builder