Skip to content
OpenAdvisories

Archive

21 August 2024

Vulnerabilities first published on this day (UTC), newest first.

4 results · Clear filters · Feed

  • Low 3.3

    Foxit PDF Reader Doc Object Use-After-Free Information Disclosure Vulnerability

    Foxit PDF Reader Doc Object Use-After-Free Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerabi…

  • Low 2.0

    User enumeration vulnerability has been discovered in OpenText™ Performance Center

    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in OpenText Performance Center on Windows allows Cross-Site Scripting (XSS).This issue affects Performance Center: 12.63.

  • Low 3.1

    CKEditor4 has a low risk cross-site scripting (XSS) vulnerability from domain takeover

    CKEditor4 is an open source what-you-see-is-what-you-get HTML editor. A theoretical vulnerability has been identified in CKEditor 4.22 (and above). In a highly unlikely scenario where an attacker gains control over the https://cke4.ckeditor.com domain, they c…

  • Low 2.6

    In affected versions of Octopus Server OIDC cookies were using the wrong expiration time which could result in them usi…