Lucene search
K

7646 matches found

CNVD
CNVD
added 2021/10/19 12:0 a.m.22 views

Foxit PDF Reader Information Disclosure Vulnerability (CNVD-2021-100580)

Foxit PDF Reader, a PDF reader from Foxit China, is vulnerable because the product does not verify the existence of an AcroForms object before operating on it. An attacker could use this and other vulnerabilities to execute arbitrary code in the context of the current process...

5.5CVSS3.2AI score0.0034EPSS
Exploits0References1
CNVD
CNVD
added 2021/10/19 12:0 a.m.18 views

Foxit PDF Reader Information Disclosure Vulnerability (CNVD-2021-100578)

Foxit PDF Reader is a PDF reader from Foxit China. Foxit PDF Reader is vulnerable to an information disclosure vulnerability that originates when the product does not verify the existence of an Annotation object before operating on it. An attacker could use this and other vulnerabilities to execu...

5.5CVSS3.1AI score0.0034EPSS
Exploits0References1
CNVD
CNVD
added 2021/10/19 12:0 a.m.25 views

Foxit PDF Reader Information Disclosure Vulnerability (CNVD-2021-100579)

Foxit PDF Reader is a PDF reader from Foxit China. Foxit PDF Reader is vulnerable to an information disclosure vulnerability that originates when the product does not verify the existence of an object when parsing PDF files. An attacker can exploit this and other vulnerabilities to execute...

5.5CVSS3.9AI score0.0034EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/10/15 12:0 a.m.40 views

Foxit PDF Reader Annotation Use of Uninitialized Variable Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS1.6AI score0.0032EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/10/15 12:0 a.m.31 views

Foxit PDF Reader Square Annotation Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

7.8CVSS2.3AI score0.00349EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/10/15 12:0 a.m.31 views

Foxit PDF Editor Caret Annotation Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

7.8CVSS2.2AI score0.00349EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/10/15 12:0 a.m.29 views

Foxit PDF Editor Circle Annotation Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

7.8CVSS2.3AI score0.00349EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/10/15 12:0 a.m.28 views

Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

7.8CVSS2.3AI score0.00349EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/10/15 12:0 a.m.33 views

(0Day) Fuji Electric Alpha5 Servo Operator C5P File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Alpha5. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...

7.8CVSS4.7AI score0.00832EPSS
Exploits0
Zero Day Initiative
Zero Day Initiative
added 2021/10/15 12:0 a.m.26 views

Foxit PDF Editor Ink Annotation Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

7.8CVSS1.9AI score0.00349EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/10/15 12:0 a.m.28 views

Foxit PDF Reader transitionToState Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the implementatio...

7.8CVSS2.5AI score0.00349EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/10/14 12:0 a.m.48 views

Microsoft Office Word Converter Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Office. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DO...

7.8CVSS4.7AI score0.05692EPSS
Exploits0References1
CNNVD
CNNVD
added 2021/10/14 12:0 a.m.2 views

Trend Micro Apex One 代码问题漏洞

Trend Micro Apex One is a suite of endpoint security protection software from Trend Micro that provides automated threat detection and response capabilities. Trend Micro Apex One suffers from a code issue vulnerability that stems from the application allowing the inclusion of libraries from the...

7.8CVSS6.1AI score0.00442EPSS
Exploits0References5
Zero Day Initiative
Zero Day Initiative
added 2021/10/14 12:0 a.m.23 views

Schneider Electric IGSS Missing Authentication Arbitrary File Deletion Vulnerability

This vulnerability allows remote attackers to delete arbitrary files on affected installations of Schneider Electric IGSS. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of commands sent to the server. The issue results from the lack o...

5.3CVSS2.6AI score0.00836EPSS
Exploits0References1
CNNVD
CNNVD
added 2021/10/14 12:0 a.m.2 views

Trend Micro Apex One 代码问题漏洞

Trend Micro Apex One is a suite of endpoint security protection software from Trend Micro that provides automated threat detection and response capabilities. Trend Micro Apex One suffers from a code issue vulnerability that stems from the application allowing the inclusion of libraries from the...

7.8CVSS7.8AI score0.00442EPSS
Exploits0References5
Zero Day Initiative
Zero Day Initiative
added 2021/10/14 12:0 a.m.22 views

Fatek Automation WinProladder PDW File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fatek Automation WinProladder. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS4.2AI score0.00912EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/10/14 12:0 a.m.28 views

Fatek Automation WinProladder PDW File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fatek Automation WinProladder. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS4.2AI score0.00912EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/10/14 12:0 a.m.18 views

Fatek Automation WinProladder PDW File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fatek Automation WinProladder. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS5.4AI score0.00912EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/10/14 12:0 a.m.23 views

Adobe Acrobat Reader DC JPEG2000 Parsing Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

3.3CVSS3.2AI score0.03774EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/10/13 12:0 a.m.28 views

Adobe Illustrator PDF File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Illustrator. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing o...

7.8CVSS5.2AI score0.02976EPSS
Exploits0References1
Rows per page
Query Builder