Lucene search
+L

14958 matches found

OSV
OSV
added 2024/04/03 5:15 p.m.9 views

CVE-2024-30327

Foxit PDF Reader template Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious pa...

7.8CVSS6.3AI score0.00895EPSS
SaveExploits0References2
NVD
NVD
added 2024/04/03 5:15 p.m.21 views

CVE-2024-30323

Foxit PDF Reader template Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a maliciou...

7.8CVSS8.1AI score0.00862EPSS
SaveExploits0References2
OSV
OSV
added 2024/04/03 5:15 p.m.7 views

CVE-2024-30323

Foxit PDF Reader template Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a maliciou...

7.8CVSS6.3AI score0.00862EPSS
SaveExploits0References2
NVD
NVD
added 2024/04/03 5:15 p.m.22 views

CVE-2024-30327

Foxit PDF Reader template Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious pa...

7.8CVSS8.1AI score0.00895EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/04/03 4:22 p.m.15 views

CVE-2024-30327 Foxit PDF Reader template Use-After-Free Remote Code Execution Vulnerability

Foxit PDF Reader template Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious pa...

7.8CVSS7.3AI score0.00895EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/04/03 4:22 p.m.44 views

CVE-2024-30327 Foxit PDF Reader template Use-After-Free Remote Code Execution Vulnerability

Foxit PDF Reader template Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious pa...

7.8CVSS8.2AI score0.00895EPSS
SaveExploits0References2
CVE
CVE
added 2024/04/03 4:22 p.m.85 views

CVE-2024-30327

CVE-2024-30327 affects Foxit PDF Reader (and by extension Foxit PDF Editor) with a Use-After-Free in template objects during processing of template documents. The flaw stems from not validating object existence before operations, enabling arbitrary code execution in the current process when a use...

7.8CVSS8.2AI score0.00895EPSS
SaveExploits0References2Affected Software2
Cvelist
Cvelist
added 2024/04/03 4:21 p.m.47 views

CVE-2024-30323 Foxit PDF Reader template Out-Of-Bounds Read Remote Code Execution Vulnerability

Foxit PDF Reader template Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a maliciou...

7.8CVSS8.2AI score0.00862EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/04/03 4:21 p.m.19 views

CVE-2024-30323 Foxit PDF Reader template Out-Of-Bounds Read Remote Code Execution Vulnerability

Foxit PDF Reader template Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a maliciou...

7.8CVSS8AI score0.00862EPSS
SaveExploits0References2
OSV
OSV
added 2024/04/03 5:15 a.m.10 views

CVE-2024-31011

Arbitrary file write vulnerability in beescms v.4.0, allows a remote attacker to execute arbitrary code via a file path that was not isolated and the suffix was not verified in admintemplate.php...

9.8CVSS6.1AI score0.0123EPSS
SaveExploits1References1
NVD
NVD
added 2024/04/03 5:15 a.m.48 views

CVE-2024-2322

The WooCommerce Cart Abandonment Recovery WordPress plugin before 1.2.27 does not have CSRF check in its bulk actions, which could allow attackers to make logged in admins delete arbitrary email templates as well as delete and unsubscribe users from abandoned orders via CSRF attacks...

6.8CVSS6.6AI score0.00353EPSS
SaveExploits2References1
NVD
NVD
added 2024/04/03 3:15 a.m.17 views

CVE-2024-24724

Gibbon through 26.0.00 allows /modules/School%20Admin/messengerSettings.php Server Side Template Injection leading to Remote Code Execution because input is passed to the Twig template engine messengerSettings.php without sanitization...

9.8CVSS7.5AI score0.26089EPSS
SaveExploits4References2
OSV
OSV
added 2024/04/03 12:00 a.m.10 views

CVE-2024-24724

Gibbon through 26.0.00 allows /modules/School%20Admin/messengerSettings.php Server Side Template Injection leading to Remote Code Execution because input is passed to the Twig template engine messengerSettings.php without sanitization...

9.8CVSS9.8AI score
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2024/04/03 12:00 a.m.16 views

CVE-2024-24724

Gibbon through 26.0.00 allows /modules/School%20Admin/messengerSettings.php Server Side Template Injection leading to Remote Code Execution because input is passed to the Twig template engine messengerSettings.php without sanitization...

7.8AI score0.26089EPSS
SaveExploits4References2
CVE
CVE
added 2024/04/03 12:00 a.m.142 views

CVE-2024-24724

CVE-2024-24724 affects Gibbon LMS (versions through 26.0.00). The vulnerability is a Server-Side Template Injection in /modules/School Admin/messengerSettings.php where user input is passed to the Twig template engine without sanitization, enabling Remote Code Execution. Exploitation is demonstra...

9.8CVSS7.7AI score0.26089EPSS
SaveExploits4References2Affected Software1
CNNVD
CNNVD
added 2024/04/03 12:00 a.m.11 views

Foxit PDF Reader 安全漏洞

Foxit PDF Reader is a PDF document reader and printer with fast startup speed and rich features. An out-of-bounds read vulnerability exists in Foxit PDF Reader template, which can be exploited by a remote attacker to submit a special file request and trick the user into parsing it, which can cras...

7.8CVSS7.5AI score0.00862EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2024/04/03 12:00 a.m.32 views

CVE-2024-24724

Gibbon through 26.0.00 allows /modules/School%20Admin/messengerSettings.php Server Side Template Injection leading to Remote Code Execution because input is passed to the Twig template engine messengerSettings.php without sanitization...

7.8AI score0.26089EPSS
SaveExploits4References2
OSV
OSV
added 2024/04/02 7:15 a.m.5 views

DEBIAN-CVE-2024-26669

In the Linux kernel, the following vulnerability has been resolved: net/sched: flower: Fix chain template offload When a qdisc is deleted from a net device the stack instructs the underlying driver to remove its flow offload callback from the associated filter block using the 'FLOWBLOCKUNBIND'...

7.1CVSS5.7AI score0.00238EPSS
SaveExploits0References1
NVD
NVD
added 2024/04/02 7:15 a.m.25 views

CVE-2024-26669

In the Linux kernel, the following vulnerability has been resolved: net/sched: flower: Fix chain template offload When a qdisc is deleted from a net device the stack instructs the underlying driver to remove its flow offload callback from the associated filter block using the 'FLOWBLOCKUNBIND'...

7.1CVSS7.5AI score0.00238EPSS
SaveExploits0References3
OSV
OSV
added 2024/04/02 7:15 a.m.10 views

UBUNTU-CVE-2024-26669

In the Linux kernel, the following vulnerability has been resolved: net/sched: flower: Fix chain template offload When a qdisc is deleted from a net device the stack instructs the underlying driver to remove its flow offload callback from the associated filter block using the 'FLOWBLOCKUNBIND'...

7.1CVSS6.2AI score0.00238EPSS
SaveExploits0References25
Rows per page
Query Builder