| CVE |
Vendors |
Products |
Updated |
CVSS v3.1 |
| An XXE issue in SAXBuilder in JDOM through 2.0.6 allows attackers to cause a denial of service via a crafted HTTP request. |
| Cartadis Gespage through 8.2.1 allows Directory Traversal in gespage/doDownloadData and gespage/webapp/doDownloadData. |
| The BDew BdLib library before 1.16.1.7 for Minecraft allows remote code execution because it deserializes untrusted data in ObjectInputStream.readObject as part of its use of Java serialization. |
| In Druid 1.2.3, visiting the path with parameter in a certain function can lead to directory traversal. |
| A null pointer dereference was found in libpano13, version libpano13-2.9.20. The flow allows attackers to cause a denial of service and potential code execute via a crafted file.
|
| In MuJS before version 1.1.2, a use-after-free flaw in the regexp source property access may cause denial of service.
|
| Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 produce incorrect PDF document signatures because the certificate name, document owner, and signature author are mishandled. |
| Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 allow information disclosure or an application crash after mishandling the Tab key during XFA form interaction. |
| Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 have an out-of-bounds write because the Cross-Reference table is mishandled during Office document conversion. |
| Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 have an out-of-bounds write via a crafted /Size key in the Trailer dictionary. |
| The RebornCore library before 4.7.3 allows remote code execution because it deserializes untrusted data in ObjectInputStream.readObject as part of reborncore.common.network.ExtendedPacketBuffer. An attacker can instantiate any class on the classpath with any data. A class usable for exploitation might or might not be present, depending on what Minecraft modifications are installed. |
| Windows LSA Denial of Service Vulnerability |
| Windows LSA Security Feature Bypass Vulnerability |
| Windows AF_UNIX Socket Provider Denial of Service Vulnerability |
| Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability |
| Windows SMB Information Disclosure Vulnerability |
| Windows Authenticode Spoofing Vulnerability |
| Azure AD Security Feature Bypass Vulnerability |
| Windows DNS Server Remote Code Execution Vulnerability |
| Windows AD FS Security Feature Bypass Vulnerability |
