Lucene search
K

16 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2017-2597

Malware in sbrugna...

8.8CVSS8.8AI score0.00367EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2018-21557

Malware in sbrugna...

8.8CVSS8.8AI score0.00367EPSS
Exploits0References3
OSV
OSV
added 2024/10/07 9:15 p.m.1 views

CVE-2024-45919

A security flaw has been discovered in Solvait version 24.4.2 that allows an attacker to elevate their privileges. By manipulating the Request ID and Action Type parameters in /AssignToMe/SetAction, an attacker can bypass approval workflows leading to unauthorized access to sensitive information ...

6.5CVSS5.7AI score
Exploits0References1
OSV
OSV
added 2024/03/26 9:15 p.m.1 views

CVE-2024-2909

A vulnerability classified as critical was found in Ruijie RG-EG350 up to 20240318. Affected by this vulnerability is the function setAction of the file /itboxpi/networksafe.php?a=set of the component HTTP POST Request Handler. The manipulation of the argument bandwidth leads to os command...

8.8CVSS5.6AI score
Exploits0References4
Cvelist
Cvelist
added 2024/03/26 9:0 p.m.14 views

CVE-2024-2909 Ruijie RG-EG350 HTTP POST Request setAction os command injection

A vulnerability classified as critical was found in Ruijie RG-EG350 up to 20240318. Affected by this vulnerability is the function setAction of the file /itboxpi/networksafe.php?a=set of the component HTTP POST Request Handler. The manipulation of the argument bandwidth leads to os command...

9CVSS9.3AI score0.03457EPSS
Exploits0References4
CNNVD
CNNVD
added 2024/03/26 12:0 a.m.2 views

Ruijie Networks RG-EG350 操作系统命令注入漏洞

Ruijie Networks RG-EG350 is a multi-service integrated gateway product from China's Ruijie Networks that solves today's small and medium-sized network egress challenges. An OS command injection vulnerability exists in Ruijie Networks RG-EG350 20240318 and earlier versions, which originates from a...

9CVSS9AI score0.03457EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2024/03/18 12:0 a.m.2 views

PT-2024-2500 · Ruijie · Ruijie Rg-Eg350

Name of the Vulnerable Software and Affected Versions: Ruijie RG-EG350 up to 20240318 Description: A critical vulnerability was found in the function setAction of the file /itbox pi/networksafe.php?a=set of the component HTTP POST Request Handler. The manipulation of the argument bandwidth leads ...

9CVSS9.1AI score0.03457EPSS
Exploits0References8
Zero Day Initiative
Zero Day Initiative
added 2021/07/15 12:0 a.m.59 views

Adobe Acrobat Reader DC setAction Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS3.1AI score0.4821EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/02/10 12:0 a.m.40 views

Adobe Acrobat Pro DC setAction Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS2AI score0.01228EPSS
Exploits0References1
OSV
OSV
added 2018/05/17 3:29 p.m.1 views

CVE-2018-9965

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

8.8CVSS6.1AI score
Exploits0References2
CNVD
CNVD
added 2018/04/28 12:0 a.m.1 views

Foxit Reader Link setAction Remote Code Execution Vulnerability

Foxit Reader is a small PDF document viewer and printing program. Foxit Reader has a security vulnerability in the Link setAction handling, which can be exploited to execute arbitrary code in the context of the current process, due to a lack of validation before performing an action on an object...

8.8CVSS7.7AI score0.00367EPSS
Exploits0References1
CNVD
CNVD
added 2017/12/21 12:0 a.m.1 views

Foxit Reader setAction Method Remote Code Execution Vulnerability

Foxit Reader is China's Foxit Foxit Software Corporation, a PDF document reader. A remote code execution vulnerability exists in the setAction method of the Link object in Foxit Reader version 8.3.1.21155, where the program fails to validate the existence of an object before performing an action ...

8.8CVSS8.4AI score0.00367EPSS
Exploits0References1
NVD
NVD
added 2017/12/20 2:29 p.m.16 views

CVE-2017-10959

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.1.21155. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

8.8CVSS8.8AI score0.00367EPSS
Exploits0References2
Cvelist
Cvelist
added 2017/12/20 2:0 p.m.16 views

CVE-2017-10959

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.1.21155. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

8.8AI score0.00367EPSS
Exploits0References2
Zero Day Initiative
Zero Day Initiative
added 2017/11/14 12:0 a.m.29 views

Foxit Reader Link setAction Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the setAction metho...

6.8CVSS8.7AI score0.00367EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2017/04/21 12:0 a.m.7 views

Foxit Reader Field setAction Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within Field object's...

6.8CVSS7AI score
Exploits0References1
Rows per page
Query Builder