Lucene search
+L

290 matches found

Cvelist
Cvelist
•added 2024/11/22 9:04 p.m.•26 views

CVE-2024-8827 PDF-XChange Editor PPM File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

PDF-XChange Editor PPM File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must vis...

7.8CVSS0.00358EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/11/22 12:00 a.m.•14 views

PDF-XChange Editor 缓冲区错误漏洞

PDF-XChange Editor is a PDF editor software and PDF reader. PDF-XChange Editor PPM file parsing has an out-of-bounds write remote code execution vulnerability that can be exploited by an attacker to execute code in the context of the current process...

7.8CVSS8.4AI score0.00358EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/22 12:00 a.m.•0 views

CVE-2024-8827: Out-of-bounds Write

PDF-XChange Editor PPM File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must vis...

7.8CVSS7.9AI score0.00358EPSS
SaveExploits0References1
CNVD
CNVD
•added 2024/09/23 12:00 a.m.•21 views

PDF-XChange Editor PPM File Parsing Out-of-Bounds Write Remote Code Execution Vulnerability

PDF-XChange Editor is a PDF editor software and PDF reader. PDF-XChange Editor PPM file parsing has an out-of-bounds write remote code execution vulnerability that can be exploited by an attacker to execute code in the context of the current process...

7.8CVSS7.9AI score0.00358EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2024/09/17 12:00 a.m.•21 views

PDF-XChange Editor PPM File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS6.9AI score0.00358EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2024/06/12 12:00 a.m.•43 views

Apple macOS PPM Image Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS. Interaction with the ImageIO framework is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the ImageIO...

7.8CVSS6.9AI score0.00383EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/06/06 12:00 a.m.•14 views

PT-2024-6432 · Pdf Xchange · Pdf-Xchange Editor

Name of the Vulnerable Software and Affected Versions: PDF-XChange Editor affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this, where the target must...

10CVSS7.2AI score0.00358EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
•added 2024/02/29 12:00 a.m.•25 views

CentOS 9 : libjpeg-turbo-2.0.90-6.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the libjpeg- turbo-2.0.90-6.el9 build changelog. - The PPM reader in libjpeg-turbo through 2.0.90 mishandles use of tjLoadImage for loading a 16-bit binary PPM file into a grayscale buffer...

5.5CVSS7AI score0.01051EPSS
SaveExploits0References2
Openbugbounty
Openbugbounty
•added 2023/12/09 1:16 a.m.•9 views

ppm-technology.com Improper Access Control vulnerability OBB-3807308

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

7AI score
SaveExploits0
OSV
OSV
•added 2023/11/09 12:15 a.m.•14 views

CVE-2023-37790

Jaspersoft Clarity PPM version 14.3.0.298 was discovered to contain an arbitrary file upload vulnerability via the Profile Picture Upload function...

5.4CVSS5.9AI score0.00494EPSS
SaveExploits2References1
NVD
NVD
•added 2023/11/09 12:15 a.m.•20 views

CVE-2023-37790

Jaspersoft Clarity PPM version 14.3.0.298 was discovered to contain an arbitrary file upload vulnerability via the Profile Picture Upload function...

5.4CVSS0.00494EPSS
SaveExploits2References1
Prion
Prion
•added 2023/11/09 12:15 a.m.•21 views

Design/Logic Flaw

Jaspersoft Clarity PPM version 14.3.0.298 was discovered to contain an arbitrary file upload vulnerability via the Profile Picture Upload function...

4.9CVSS7.8AI score0.00494EPSS
SaveExploits2References1Affected Software1
Tenable Nessus
Tenable Nessus
•added 2023/11/09 12:00 a.m.•40 views

NewStart CGSL MAIN 6.06 : libjpeg-turbo Multiple Vulnerabilities (NS-SA-2023-0130)

The remote NewStart CGSL host, running version MAIN 6.06, has libjpeg-turbo packages installed that are affected by multiple vulnerabilities: - Libjpeg-turbo versions 2.0.91 and 2.0.90 is vulnerable to a denial of service vulnerability caused by a divide by zero when processing a crafted GIF imag...

7.1AI score0.01787EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
•added 2023/11/08 12:00 a.m.•11 views

PT-2023-26110 · Jaspersoft · Jaspersoft Clarity Ppm

Name of the Vulnerable Software and Affected Versions: Jaspersoft Clarity PPM version 14.3.0.298 Description: The issue is related to an arbitrary file upload vulnerability via the Profile Picture Upload function. This allows for potential malicious file uploads. Recommendations: For Jaspersoft...

5.4CVSS5.5AI score0.00494EPSS
SaveExploits2References5
Vulnrichment
Vulnrichment
•added 2023/11/08 12:00 a.m.•9 views

CVE-2023-37790

Jaspersoft Clarity PPM version 14.3.0.298 was discovered to contain an arbitrary file upload vulnerability via the Profile Picture Upload function...

7.7AI score0.00494EPSS
SaveExploits2References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/08 12:00 a.m.•1 views

CVE-2023-37790: Improper Neutralization of Input During Web Page Generation

Jaspersoft Clarity PPM version 14.3.0.298 was discovered to contain an arbitrary file upload vulnerability via the Profile Picture Upload function...

5.4CVSS6AI score0.00494EPSS
SaveExploits2References2
CVE
CVE
•added 2023/11/08 12:00 a.m.•67 views

CVE-2023-37790

CVE-2023-37790 affects Jaspersoft Clarity PPM 14.3.0.298. Affected component: Profile Picture Upload; vulnerability is an arbitrary file upload vulnerability. No exploitation details are provided in the initial/connected docs. A remediation note from PT-Security recommends disabling the Profile P...

5.4CVSS5.7AI score0.00494EPSS
SaveExploits2References1Affected Software1
Cvelist
Cvelist
•added 2023/11/08 12:00 a.m.•31 views

CVE-2023-37790

Jaspersoft Clarity PPM version 14.3.0.298 was discovered to contain an arbitrary file upload vulnerability via the Profile Picture Upload function...

6AI score0.00494EPSS
SaveExploits2References1
Tenable Nessus
Tenable Nessus
•added 2023/09/07 12:00 a.m.•39 views

Oracle Linux 7 : qt (ELSA-2020-1172)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-1172 advisory. 1:4.8.7-8 - Fix QImage allocation failure in qgifhandler Resolves: bz1667863 - Fix QTgaFile CPU exhaustion Resolves: bz1667879 - Fix QBmpHandler...

9.8CVSS6.8AI score0.03382EPSS
SaveExploits1References7
Tenable Nessus
Tenable Nessus
•added 2023/08/23 12:00 a.m.•40 views

Amazon Linux 2 : libjpeg-turbo (ALAS-2023-2214)

The version of libjpeg-turbo installed on the remote host is prior to 2.0.90-2. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-2214 advisory. The PPM reader in libjpeg-turbo through 2.0.90 mishandles use of tjLoadImage for loading a 16-bit binary PPM file into a...

5.5CVSS7AI score0.01051EPSS
SaveExploits0References4
Rows per page
Query Builder