CVE-2024-27336

CVE-2024-27336 affects Kofax Power PDF, with the flaw located in PNG file parsing. The vulnerability arises from insufficient validation of user-supplied data, causing a read past the end of an allocated object (out-of-bounds read) and enabling information disclosure on affected installations. Th...

CVE-2024-27335 Kofax Power PDF PNG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

Kofax Power PDF PNG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kofax Power PDF. User interaction is required to exploit this vulnerability in that the target must visit a...

Foxit PDF Reader 安全漏洞

Foxit PDF Reader is a PDF reader from China Foxit Foxit.Foxit PDF Editor is a PDF editor from China Foxit Foxit. A code execution vulnerability exists in Foxit PDF Reader and Editor, which can be exploited by an attacker to execute arbitrary code in the context of the current process...

Foxit PDF Reader 安全漏洞

Foxit PDF Reader is a PDF reader from China Foxit Foxit.Foxit PDF Editor is a PDF editor from China Foxit Foxit. A code execution vulnerability exists in Foxit PDF Reader and Editor, which can be exploited by an attacker to execute arbitrary code in the context of the current process...

Foxit PDF Reader 安全漏洞

Foxit PDF Reader is a PDF reader from China Foxit Foxit.Foxit PDF Editor is a PDF editor from China Foxit Foxit. A code execution vulnerability exists in Foxit PDF Reader and Editor, which can be exploited by an attacker to execute arbitrary code in the context of the current process...

CVE-2024-30357

Foxit PDF Reader AcroForm Annotation Type Confusion Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a...

CVE-2024-30365

CVE-2024-30365 affects Foxit PDF Reader/Editor (AcroForm Use-After-Free) with the flaw in AcroForms object handling: it does not validate object existence before operations, enabling arbitrary code execution in the current process after user opens a malicious file/page. The entry references ZDI-C...

CVE-2024-30361

CVE-2024-30361 is a Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution vulnerability. Root cause: object existence is not validated before operations on AcroForm objects, allowing code execution in the app process. Exploitation requires user interaction (visiting malicious page or ope...

CVE-2024-30359

CVE-2024-30359 describes a remote code execution vulnerability in Foxit PDF Reader related to AcroForm 3D objects. The flaw arises from insufficient validation of user-supplied data when handling 3D AcroForm objects, allowing an out-of-bounds read that can lead to code execution in the context of...

CVE-2024-30341

Foxit PDF Reader Doc Object Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a...

CVE-2024-30352

Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution (CVE-2024-30352) is described as a vulnerability in Foxit PDF Reader where the AcroForm handling can perform operations on objects without validating their existence, enabling code execution via a malicious page or file after user int...

CVE-2024-30342

CVE-2024-30342 affects Foxit PDF Reader/Editor. The vulnerability is a Use-After-Free in handling of Annotation objects, caused by not validating the existence of an object before operations, enabling code execution in the process context when a user opens a malicious file or visits a crafted pag...

CVE-2024-30339

CVE-2024-30339 describes a remote code execution in Foxit PDF Reader caused by an AcroForm Use-After-Free flaw. The vulnerability stems from not validating the existence of an object before performing operations on AcroForm-related objects, enabling an attacker to execute code in the target proce...

SUSE-SU-2024:1086-1 Security update for perl-DBD-SQLite

This update for perl-DBD-SQLite fixes the following issues: - rebuild against current system sqlite. bsc1218946...

RARLAB WinRAR 安全漏洞

WinRAR is a file compressor. The product supports compression and decompression of files in RAR, ZIP, and other formats, among others. A security vulnerability exists in RARLAB WinRAR that stems from the fact that WinRAR's Mark-Of-The-Web protection mechanism can be bypassed. An attacker can...

CVE-2024-27333

Kofax Power PDF GIF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Kofax Power PDF. User interaction is required to exploit this vulnerability in that the target must...

JetBrains TeamCity AgentDistributionSettingsController Cross-Site Scripting Vulnerability

This vulnerability allows remote attackers to execute arbitrary script on affected installations of JetBrains TeamCity. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling ...

How to back up your Windows 10/11 PC to OneDrive

They say the only backup you ever regret is the one you didnt make. Starting in Windows 10, the operating system OS now comes with a built-in tool to back up your files, themes, some settings, many of your installed apps, and your Wi-Fi information. First, you’ll need to sign in with your Microso...

Slackware: Security Advisory (SSA:2024-088-02)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Slackware: Security Advisory (SSA:2024-088-03)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...