Lucene search
+L

10193 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 8:50 a.m.30 views

CVE-2021-31436

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.931. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.7AI score0.02761EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 8:49 a.m.12 views

CVE-2021-22280

Improper DLL loading algorithms in B Automation Studio versions =4.0 and 4.12 may allow an authenticated local attacker to execute code in the context of the product...

7.2CVSS6.9AI score0.00166EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 8:49 a.m.12 views

CVE-2021-22289

Improper Input Validation vulnerability in the project upload mechanism in B Automation Studio version =4.0 may allow an unauthenticated network attacker to execute code...

9.8CVSS7.2AI score0.00769EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 8:49 a.m.10 views

CVE-2025-47552

Deserialization of Untrusted Data vulnerability in Digital zoom studio DZS Video Gallery allows Object Injection.This issue affects DZS Video Gallery: from n/a through 12.37...

9.8CVSS5.2AI score0.00325EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 8:46 a.m.8 views

CVE-2025-32300

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Digital zoom studio DZS Video Gallery allows Reflected XSS.This issue affects DZS Video Gallery: from n/a through 12.25...

7.1CVSS5.2AI score0.00187EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 8:35 a.m.15 views

CVE-2020-24682

Unquoted Search Path or Element vulnerability in B Industrial Automation Automation Studio, B Industrial Automation NET/PVI allows Target Programs with Elevated Privileges.This issue affects Automation Studio: from 4.0 through 4.6, from 4.7.0 before 4.7.7 SP, from 4.8.0 before 4.8.6 SP, from 4.9....

7.8CVSS6.9AI score0.00149EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 8:35 a.m.21 views

CVE-2020-17427

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.922. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.8AI score0.03671EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 8:35 a.m.13 views

CVE-2020-17424

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.922. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.8AI score0.0372EPSS
SaveExploits0References1
NVD
NVD
added 2026/01/08 10:15 a.m.6 views

CVE-2025-22509

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in TMRW-studio Atlas atlas allows PHP Local File Inclusion.This issue affects Atlas: from n/a through = 2.1.0...

8.1CVSS0.00532EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/08 3:14 a.m.11 views

CVE-2025-47553

Deserialization of Untrusted Data vulnerability in Digital zoom studio DZS Video Gallery allows Object Injection.This issue affects DZS Video Gallery: from n/a through 12.25...

8.8CVSS5.2AI score0.00298EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/01/08 12:0 a.m.10 views

PT-2026-1784

Name of the Vulnerable Software and Affected Versions TMRW-studio Atlas versions through 2.1.0 Description The software contains an Improper Control of Filename for Include/Require Statement issue, also known as a PHP Remote File Inclusion. This allows for PHP Local File Inclusion. Recommendation...

9.8CVSS6.7AI score0.00532EPSS
SaveExploits0References3
NVD
NVD
added 2026/01/07 1:15 p.m.10 views

CVE-2025-47552

Deserialization of Untrusted Data vulnerability in Digital zoom studio DZS Video Gallery allows Object Injection.This issue affects DZS Video Gallery: from n/a through 12.37...

9.8CVSS0.00325EPSS
SaveExploits0References1
NVD
NVD
added 2026/01/07 12:17 p.m.9 views

CVE-2025-32300

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Digital zoom studio DZS Video Gallery allows Reflected XSS.This issue affects DZS Video Gallery: from n/a through 12.25...

7.1CVSS0.00187EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/07 9:10 a.m.20 views

CVE-2019-16765

If an attacker can get a user to open a specially prepared directory tree as a workspace in Visual Studio Code with the CodeQL extension active, arbitrary code of the attacker's choosing may be executed on the user's behalf. This is fixed in version 1.0.1 of the extension. Users should upgrade to...

7.8CVSS7AI score0.04731EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/07 9:8 a.m.9 views

CVE-2024-2747

CWE-428: Unquoted search path or element vulnerability exists in Easergy Studio, which could cause privilege escalation when a valid user replaces a trusted file name on the system and reboots the machine...

7.8CVSS7.1AI score0.00166EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/01/07 12:0 a.m.24 views

PT-2026-1643

Name of the Vulnerable Software and Affected Versions Digital zoom studio DZS Video Gallery versions through 12.25 Description The software contains a flaw related to improper input handling during web page generation, leading to a Reflected Cross-site Scripting XSS condition. This allows for the...

7.1CVSS6.1AI score0.00187EPSS
SaveExploits0References3
NVD
NVD
added 2026/01/06 5:15 p.m.10 views

CVE-2025-47553

Deserialization of Untrusted Data vulnerability in Digital zoom studio DZS Video Gallery allows Object Injection.This issue affects DZS Video Gallery: from n/a through 12.25...

8.8CVSS0.00298EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/01/06 4:47 p.m.13 views

CVE-2025-47553

Deserialization of Untrusted Data vulnerability in Digital zoom studio DZS Video Gallery allows Object Injection.This issue affects DZS Video Gallery: from n/a through 12.25...

8.8CVSS5.2AI score0.00298EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/01/06 12:0 a.m.18 views

PT-2026-1495

Name of the Vulnerable Software and Affected Versions Digital zoom studio DZS Video Gallery versions through 12.25 Description A flaw exists in Digital zoom studio DZS Video Gallery that allows for object injection due to deserialization of untrusted data. This issue could potentially allow an...

8.8CVSS6.7AI score0.00298EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2026/01/01 5:33 p.m.7 views

CVE-2025-62989

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Gora Tech Cooked cooked allows Stored XSS.This issue affects Cooked: from n/a through = 1.11.3...

5.9CVSS5.9AI score0.00145EPSS
SaveExploits0References1
Rows per page
Query Builder