196 matches found
CVE-2026-16377 Mitigation bypass in the PDF Viewer component
Mitigation bypass in the PDF Viewer component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13...
Cross-site Scripting (XSS)
Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS in the extensionsRequired field of glTF files processed by the 3D file viewer. An attacker can execute arbitrary JavaScript code in the context of another user by uploading a crafted glTF file containing malicio...
CVE-2026-30041
FastStone Image Viewer versions 8.3 and earlier are vulnerable to an integer overflow within the PSD parser component. The root cause is a lack of proper validation for the height value in PSD files, which leads to a subsequent heap-based buffer overflow. Attackers can exploit this by supplying a...
The vulnerability of PDF viewing and editing programs such as Adobe Acrobat, Adobe Acrobat Reader, and Adobe Acrobat 2024 lies in an uncontrolled search path element, allowing attackers to execute arbitrary code.
The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat, Adobe Acrobat Reader, and Adobe Acrobat 2024 are related to an uncontrolled search path element. Exploiting these vulnerabilities can allow attackers to execute arbitrary code by opening malicious files...
CVE-2026-50231
Lyrion Music Server 9.2.0 contains an unauthenticated stored cross-site scripting vulnerability in the log viewer that allows attackers to inject malicious scripts by exploiting unescaped template variables. Attackers can inject XSS payloads through search, lines, and path query parameters or by...
Lyrion Music Server 跨站脚本漏洞
Lyrion Music Server is an audio server software developed by the Lyrion organization. Version 9.2.0 of Lyrion Music Server contains a cross-site scripting vulnerability. This vulnerability stems from an unvalidated storage-based cross-site scripting flaw present in the log viewer, which may allow...
Security Bulletin: IBM InfoSphere Optim Archive Viewer is affected by a vulnerability in uuid (CVE-2026-41907)
Summary A vulnerability in the uuid generation utility library CVE-2026-41907 used by IBM InfoSphere Optim Archive Viewer has been addressed by upgrading the component to version 9.0.1. Vulnerability Details CVEID:CVE-2026-41907 DESCRIPTION: uuid is for the creation of RFC9562 formerly RFC4122...
EUVD-2026-31480
TypeBot is a chatbot builder tool. In versions prior to 3.16.0, the Typebot viewer packages/embeds/js renders anchor tags from rich text bubble content without filtering the javascript: URI scheme. A bot author can set a link URL to javascript:PAYLOAD, which executes in the visitor's browser...
CVE-2025-54273 Substance3D - Viewer | Out-of-bounds Write (CWE-787)
Substance3D - Viewer versions 0.25.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
EUVD-2017-6077
Malware in sbrugna...
EUVD-2017-6060
Malware in sbrugna...
EUVD-2017-6058
Malware in sbrugna...
EUVD-2017-6043
Malware in sbrugna...
EUVD-2017-6049
Malware in sbrugna...
EUVD-2009-0939
Malware in sbrugna...
EUVD-2018-16961
Malware in sbrugna...
EUVD-2017-5806
Malware in sbrugna...
EUVD-2017-6068
Malware in sbrugna...