9720 matches found
The vulnerability of the tpm2_checkquote component in the Trusted Platform Module tools allows a perpetrator to access protected information.
The vulnerability of the tpm2checkquote component in the Trusted Platform Module tools repository is related to incorrect data regarding changes. Exploiting this vulnerability can allow an attacker to gain access to protected information through specially crafted queries...
CVE-2025-66521
A stored cross-site scripting XSS vulnerability exists in pdfonline.foxit.com within the Trusted Certificates feature. A crafted payload can be injected as the certificate name, which is later rendered into the DOM without proper sanitization. As a result, the injected script executes each time t...
SUSE CVE-2025-68161
The Socket Appender in Apache Log4j Core versions 2.0-beta9 through 2.25.2 does not perform TLS hostname verification of the peer certificate, even when the verifyHostName https://logging.apache.org/log4j/2.x/manual/appenders/network.htmlSslConfiguration-attr-verifyHostName configuration attribut...
CVE-2025-66521
A stored cross-site scripting XSS vulnerability exists in pdfonline.foxit.com within the Trusted Certificates feature. A crafted payload can be injected as the certificate name, which is later rendered into the DOM without proper sanitization. As a result, the injected script executes each time t...
CVE-2025-66521
A stored cross-site scripting XSS vulnerability exists in pdfonline.foxit.com within the Trusted Certificates feature. A crafted payload can be injected as the certificate name, which is later rendered into the DOM without proper sanitization. As a result, the injected script executes each time t...
CVE-2025-66521 Foxit pdfonline.foxit.com Stored Cross-Site Scripting in Trusted Certificates Feature
A stored cross-site scripting XSS vulnerability exists in pdfonline.foxit.com within the Trusted Certificates feature. A crafted payload can be injected as the certificate name, which is later rendered into the DOM without proper sanitization. As a result, the injected script executes each time t...
CVE-2025-66521 Foxit pdfonline.foxit.com Stored Cross-Site Scripting in Trusted Certificates Feature
A stored cross-site scripting XSS vulnerability exists in pdfonline.foxit.com within the Trusted Certificates feature. A crafted payload can be injected as the certificate name, which is later rendered into the DOM without proper sanitization. As a result, the injected script executes each time t...
EUVD-2025-204455
A stored cross-site scripting XSS vulnerability exists in pdfonline.foxit.com within the Trusted Certificates feature. A crafted payload can be injected as the certificate name, which is later rendered into the DOM without proper sanitization. As a result, the injected script executes each time t...
CVE-2025-66521
Summary: CVE-2025-66521 is a stored XSS in Foxit’s pdfonline.foxit.com, specifically in the Trusted Certificates feature. What’s affected: The certificate name field accepts crafted input that is later rendered into the DOM without proper sanitization. Root cause: Insufficient sanitization of the...
CVE-2025-34451
A flaw was found in proxychains-ng. An attacker can exploit a stack-based buffer overflow vulnerability in the proxyfromstring function by providing crafted proxy configuration entries containing overly long username or password fields. This can lead to memory corruption or application crashes,...
CVE-2025-47319
Information disclosure while exposing internal TA-to-TA communication APIs to HLOS...
Foxit PDF Editor 安全漏洞
Foxit PDF Editor is a PDF editor from the Chinese company Foxit Foxit. A security vulnerability exists in Foxit PDF Editor, which stems from the certificate name not being properly cleaned up in the Trusted Certificates feature, which could lead to a stored cross-site scripting attack...
PT-2025-52433
A stored cross-site scripting XSS vulnerability exists in pdfonline.foxit.com within the Trusted Certificates feature. A crafted payload can be injected as the certificate name, which is later rendered into the DOM without proper sanitization. As a result, the injected script executes each time t...
CVE-2025-14101
Authorization Bypass Through User-Controlled Key vulnerability in GG Soft Software Services Inc. PaperWork allows Exploitation of Trusted Identifiers.This issue affects PaperWork: from 5.2.0.9427 before 6.0...
CVE-2025-47319
Information disclosure while exposing internal TA-to-TA communication APIs to HLOS...
CVE-2025-47325
CVE-2025-47325 affects Qualcomm embedded platform firmware; vulnerability arises from an unreliable pointer dereference in TZ firmware when processing system calls with invalid parameters, leading to information disclosure. Exploitation status is not detailed in the provided documents. Red Hat/NV...
CVE-2025-47319
CVE-2025-47319 describes information disclosure in Qualcomm embedded platform firmware caused by exposing internal TA-to-TA (Trusted Application to Trusted Application) communication APIs to HLOS (Host Linux Operating System). The CVE indicates a LOCAL attack vector with HIGH privileges required ...
EUVD-2025-204032
Information disclosure while exposing internal TA-to-TA communication APIs to HLOS...