Lucene search
+L

4427 matches found

CNNVD
CNNVD
added 2024/10/02 12:00 a.m.7 views

Zenario CMS 安全漏洞

Zenario CMS is an open source application. Provides a Web-based content management system . A security vulnerability exists in Zenario CMS version 9.7.61188. The vulnerability stems from the application's lack of effective validation of uploaded files. An attacker can exploit the vulnerability to...

4.8CVSS7.1AI score0.00343EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
added 2024/09/30 12:00 a.m.23 views

The vulnerability of PDF-XChange Editor’s PDF document viewing and editing software lies in the possibility of an operation going beyond the buffer in memory, allowing an attacker to execute arbitrary code.

The vulnerability of PDF-XChange Editor’s PDF document viewing and editing functionality is related to the execution of operations outside the buffer during file U3D processing. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.9AI score0.00282EPSS
SaveExploits0References6Affected Software3
OpenVAS
OpenVAS
added 2024/09/27 12:00 a.m.22 views

Ubuntu: Security Advisory (USN-7038-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS7.1AI score0.00332EPSS
SaveExploits0References2
OSV
OSV
added 2024/09/26 9:09 a.m.8 views

USN-7038-1 apr vulnerability

Thomas Stangner discovered a permission vulnerability in the Apache Portable Runtime APR library. A local attacker could possibly use this issue to read named shared memory segments, potentially exposing sensitive application data...

5.5CVSS6.3AI score0.00332EPSS
SaveExploits0References2
Ubuntu
Ubuntu
added 2024/09/26 9:09 a.m.242 views

USN-7038-1: APR vulnerability

Thomas Stangner discovered a permission vulnerability in the Apache Portable Runtime APR library. A local attacker could possibly use this issue to read named shared memory segments, potentially exposing sensitive application data...

5.5CVSS6.5AI score0.00332EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2024/09/26 12:00 a.m.26 views

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS : APR vulnerability (USN-7038-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-7038-1 advisory. Thomas Stangner discovered a permission vulnerability in the Apache Portable Runtime APR library. A local attacker...

5.5CVSS6.5AI score0.00332EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2024/09/26 12:00 a.m.11 views

The vulnerability of PDF-XChange Editor’s PDF document viewing and editing software, related to the occurrence of operations outside the buffer in memory, allows attackers to disclose protected information.

The vulnerability of PDF-XChange Editor’s PDF document viewing and editing software lies in the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose protected information...

3.3CVSS6.2AI score0.00345EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/09/26 12:00 a.m.11 views

The vulnerability of PDF-XChange Editor’s PDF document viewing and editing software lies in the possibility of an operation going beyond the buffer in memory, allowing an attacker to execute arbitrary code.

The vulnerability of PDF document viewing and editing software PDF-XChange Editor lies in the execution of operations beyond the buffer in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code using a specially created XPS file...

7.8CVSS8AI score0.00282EPSS
SaveExploits0References7Affected Software3
CNNVD
CNNVD
added 2024/09/25 12:00 a.m.10 views

CS-Cart 安全漏洞

CS-Cart is an e-commerce platform from CS-Cart Inc. A security vulnerability exists in CS-Cart version 4.16.1. A remote attacker can exploit the vulnerability to obtain sensitive information via the productdata parameter in the PDF add-on...

8.8CVSS6.5AI score0.0128EPSS
SaveExploits1References2
OSV
OSV
added 2024/09/23 10:15 p.m.6 views

DEBIAN-CVE-2018-20072

Insufficient data validation in PDF in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform out of bounds memory access via a crafted PDF file. Chromium security severity: Low...

7.8CVSS5.3AI score0.00164EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2024/09/23 12:00 a.m.11 views

The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020, as well as Adobe Acrobat 2024, are related to data type mixing errors. These vulnerabilities allow attackers to execute arbitrary code.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 are related to data type mixing errors. Exploiting these vulnerabilities can allow attackers to execute arbitrary co...

8.6CVSS6.1AI score0.00525EPSS
SaveExploits0References2
Fedora
Fedora
added 2024/09/14 1:26 a.m.24 views

[SECURITY] Fedora 39 Update: apr-1.7.5-1.fc39

The mission of the Apache Portable Runtime APR is to provide a free library of C data structures and routines, forming a system portability layer to as many operating systems as possible, including Unices, MS Win32, BeOS and OS/2...

5.5CVSS6.9AI score0.00332EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2024/09/14 12:00 a.m.17 views

Fedora 39 : apr (2024-318343049c)

The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-318343049c advisory. This update to the apr package fixes a security issue in the handling of shared memory permissions. SECURITY: CVE-2023-49582: Apache Portable Runtime APR:...

5.5CVSS6.4AI score0.00332EPSS
SaveExploits0References2
Fedora
Fedora
added 2024/09/13 8:59 p.m.16 views

[SECURITY] Fedora 41 Update: apr-1.7.5-1.fc41

The mission of the Apache Portable Runtime APR is to provide a free library of C data structures and routines, forming a system portability layer to as many operating systems as possible, including Unices, MS Win32, BeOS and OS/2...

7.3AI score
SaveExploits0
Photon
Photon
added 2024/09/13 12:00 a.m.13 views

Moderate Photon OS Security Update - PHSA-2024-5.0-91-0375

Updates of 'apr', 'runc' packages of Photon OS have been released...

5.5CVSS6.3AI score0.00332EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2024/09/13 12:00 a.m.16 views

Vulnerability of the Adobe Acrobat browser extension developed by Microsoft Edge, allowing a hacker to execute arbitrary code

The vulnerability of the Adobe Acrobat browser extension for Microsoft Edge relates to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created malicious PDF file...

7.8CVSS6.4AI score0.00483EPSS
SaveExploits0References5Affected Software1
OpenVAS
OpenVAS
added 2024/09/11 12:00 a.m.19 views

Mageia: Security Advisory (MGASA-2024-0292)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS6.7AI score0.00332EPSS
SaveExploits0References4
OSV
OSV
added 2024/09/10 4:40 p.m.17 views

MGASA-2024-0292 Updated apr packages fix security vulnerability

Lax permissions set by the Apache Portable Runtime library on Unix platforms would allow local users read access to named shared memory segments, potentially revealing sensitive application data. CVE-2023-49582...

5.5CVSS6.6AI score0.00332EPSS
SaveExploits0References3
Mageia
Mageia
added 2024/09/10 4:40 p.m.25 views

Updated apr packages fix security vulnerability

Lax permissions set by the Apache Portable Runtime library on Unix platforms would allow local users read access to named shared memory segments, potentially revealing sensitive application data. CVE-2023-49582...

5.5CVSS6.6AI score0.00332EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2024/09/10 12:00 a.m.16 views

Fedora: Security Advisory (FEDORA-2024-b40491b84b)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS7.1AI score0.00332EPSS
SaveExploits0References3
Rows per page
Query Builder