Fast, deterministic intelligence across 396,747 official Common Vulnerabilities and Exposures (CVEs) with CVSS v3.1 vector breakdowns, threat severity scores, and verified remediation links.
When a Tauri application uses the dialog plugin's file or folder picker, an attacker with JavaScript execution (XSS) can force the scope expansion to be recursive, granting read/write access to an ent...
Tauri's Content Security Policy hardening, which injects a random nonce to restrict script execution, provides zero protection when an application includes data: or blob: in its script-src directive. ...
A vulnerability in Apache Sling Security Bundle: the ReferrerFilter accepts weaker-than-orgin evidence. This issue affects Apache Sling Security Bundle: before 1.3.2. Users are recommended to up...
The Rename wp-login.php to anything you want plugin for WordPress is vulnerable to time-based SQL Injection via 'log' (Username) Parameter in all versions up to, and including, 2.0.1 due to insufficie...
NULL pointer dereference vulnerability in ASR Crane๏ผFalcon on Linux (as_rrc module) allows Pointer Manipulation. This vulnerability is associated with program file 3g.mod/lib/src/urrsir.c....
An Improper Authentication vulnerability in the Apache Doris Frontend (FE) meta service allows an unauthenticated remote attacker to access internal metadata service endpoints. The affected endpoin...
CGServiSign developed by Changing has a OS Command Injection vulnerability. Unauthenticated remote attackers can induce victims to visit a malicious web page and inject arbitrary OS commands through t...
A use-after-free vulnerability exists in Foxit PDF Editor/Readerโs JavaScript handling of PDF annotations. Reentrant page-event processing during annotation enumeration may release the associated page...
A use-after-free vulnerability exists in Foxit PDF Editor/Readerโs handling of PDF annotations. Reentrant annotation deletion triggered by embedded JavaScript can cause the application to access an an...
Foxit PDF Editor/Reader does not perform sufficient verification of the JPEG2000 image metadata in the PDF file, which leads to out-of-bounds write in the heap buffer during decoding, potentially caus...
A vulnerability in Foxit PDF Editor/Readerโs update mechanism allows an update package to be replaced between download and high-privilege extraction due to insufficient file locking and integrity vali...
A vulnerability in Foxit PDF Editor/Readerโs update mechanism allows man-in-the-middle attackers to bypass certificate validation and package integrity checks, potentially enabling arbitrary code exec...
A heap-based out-of-bounds write vulnerability exists in Foxit PDF Editor/Readerโs PRC parser due to insufficient validation of vertex indices in triangular fan texture meshes. Successful exploitation...
A use-after-free vulnerability exists in Foxit PDF Editor/Readerโs handling of malformed PDF form fields. Improper validation during field-name traversal may cause the application to access a released...
A use-after-free vulnerability exists in Foxit PDF Editor/Readerโs handling of PDF form fields. Embedded JavaScript may access form-field references after the corresponding fields have been released, ...
A use-after-free vulnerability exists in Foxit PDF Editor/Readerโs PDF page-tree handling. A specially crafted PDF can trigger page-structure changes during rendering, causing the application to acces...
A heap-based out-of-bounds write vulnerability exists in Foxit PDF Editor/Readerโs rendering of Circle annotations with malformed Cloudy appearance streams in specially crafted PDF files. Insufficient...
A local privilege escalation vulnerability exists in the updater of Foxit PDF Editor/Reader due to unsafe loading of dynamic-link libraries from a user-writable directory during high-privilege operati...
A heap-based out-of-bounds write vulnerability exists in Foxit PDF Editor/Readerโs WebP image decoding due to improper handling of bitmap stride and target buffer formats. Successful exploitation coul...
A path traversal vulnerability exists in Foxit PDF Editor/Reader's handling of embedded PDF resources. Insufficient validation of resource file paths may allow files to be written outside their intend...
A local privilege escalation vulnerability exists in the installer of Foxit PDF Editor for macOS due to insufficient validation of a user-modifiable configuration value during high-privilege upgrades....
A use-after-free vulnerability exists in Foxit PDF Editor/Readerโs handling of JavaScript array objects. A specially crafted PDF may cause the application to access a released object during array proc...
A local privilege escalation vulnerability exists in the update daemon of Foxit PDF Editor/Reader due to an insecure permission configuration that allows the configuration file to be modified by regul...
Foxit PDF Editor/Reader failed to validate the directory traversal path in the attachment file name, resulting in malicious attachments being able to be written to directories outside the expected sec...