CVE-2023-36769

This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will b ...

Continue Reading
(Pwn2Own) Adobe Acrobat Reader DC AnnotsString Prototype Pollution API Restrictions Bypass Vulnerability

This vulnerability allows remote attackers to bypass API restrictions on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the targe ...

Continue Reading

CVSS3 - HIGH

CVSS2 - MEDIUM

(Pwn2Own) Adobe Acrobat Reader DC Object Prototype Pollution API Restrictions Bypass

This vulnerability allows remote attackers to bypass API restrictions on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the targe ...

Continue Reading

CVSS3 - HIGH

CVSS2 - MEDIUM

(Pwn2Own) Adobe Acrobat Reader DC Protected API Restrictions Bypass Vulnerability

This vulnerability allows remote attackers to bypass JavaScript API restrictions on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in tha ...

Continue Reading

CVSS3 - HIGH

CVSS2 - MEDIUM

musei.re.it Cross Site Scripting vulnerability OBB-3586223

Following the coordinated and responsible vulnerability disclosure guidelines of the **[ISO 29147]()** standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. not ...

Continue Reading
myglamorista.com Cross Site Scripting vulnerability OBB-3586247

Following the coordinated and responsible vulnerability disclosure guidelines of the **[ISO 29147]()** standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. not ...

Continue Reading
CVE-2021-22008

The vCenter Server contains an information disclosure vulnerability in VAPI (vCenter API) service. A malicious actor with network access to port 443 on vCenter Server may exploit this issue by sending ...

Continue Reading

CVSS3 - HIGH

CVSS2 - MEDIUM

CVE-2023-39849

Pikachu v1.0 was discovered to contain a SQL injection vulnerability via the $username parameter at incfunction.php.Read More ...

Continue Reading

Back to Main

Subscribe for the latest news: