Lucene search
K

21 matches found

RedhatCVE
RedhatCVE
added 2025/02/05 4:57 p.m.4 views

CVE-2019-17142

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.6.0.25114. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

8.8CVSS6.8AI score0.01469EPSS
Exploits0References1
Circl
Circl
added 2024/01/29 7:6 a.m.0 views

CVE-2019-17142

creationtimestamp| type| source ---|---|--- 2024-01-29 07:06:40+00:00| seen| https://t.me/ctinow/175083...

8.8CVSS7.8AI score0.01469EPSS
Exploits0References1
NVD
NVD
added 2023/03/29 7:15 p.m.15 views

CVE-2022-37349

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the submitForm...

7.8CVSS7.7AI score0.00621EPSS
Exploits0References2
Cvelist
Cvelist
added 2023/03/29 12:0 a.m.14 views

CVE-2022-37349

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the submitForm...

7.8CVSS7.9AI score0.00621EPSS
Exploits0References2
CVE
CVE
added 2023/03/29 12:0 a.m.49 views

CVE-2022-37349

CVE-2022-37349 concerns PDF-XChange Editor. The issue is a buffer over-read in the submitForm method that can be triggered via JavaScript when a user visits a malicious page or opens a malicious file, allowing remote code execution in the context of the current process. Details come from ZDI-22-1...

7.8CVSS7.7AI score0.00621EPSS
Exploits0References2Affected Software1
Circl
Circl
added 2021/11/08 8:58 a.m.3 views

CVE-2020-17142

creationtimestamp| type| source ---|---|--- 2021-11-08 08:58:18+00:00| seen| MISP/f5030aca-7d5a-43a4-ae03-8f4ac8e85422...

9.1CVSS6.8AI score0.0089EPSS
Exploits0
NVD
NVD
added 2020/12/10 12:15 a.m.15 views

CVE-2020-17142

Microsoft Exchange Remote Code Execution Vulnerability...

9.1CVSS9.4AI score0.0089EPSS
Exploits0References2
CVE
CVE
added 2020/12/09 11:36 p.m.154 views

CVE-2020-17142

CVE-2020-17142 is described in the provided materials as a Microsoft Exchange Server remote code execution vulnerability. The connected documents do not specify affected versions, exact root cause, in-the-wild exploit details, or remediation steps within the supplied content. Exploitation status ...

9.1CVSS9AI score0.0089EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2020/12/09 11:36 p.m.15 views

CVE-2020-17142 Microsoft Exchange Remote Code Execution Vulnerability

...

9.1CVSS9.4AI score0.0089EPSS
Exploits0References1
Kaspersky
Kaspersky
added 2020/12/08 12:0 a.m.77 views

KLA12022 Multiple vulnerabilities in Microsoft Server Software

Multiple vulnerabilities were found in Microsoft Server Software. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Microsoft Exchange can be exploited...

9.1CVSS9.2AI score0.92003EPSS
Exploits9References12
Tenable Nessus
Tenable Nessus
added 2020/12/08 12:0 a.m.64 views

Security Updates for Microsoft Exchange Server (December 2020)

The Microsoft Exchange Server installed on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker could exploit this to execute unauthorized arbitrary code. CVE-2020-17117, CVE-2020-17132,...

9.1CVSS8.9AI score0.79821EPSS
Exploits5References7
CVE
CVE
added 2019/10/25 6:14 p.m.160 views

CVE-2019-17142

Foxit PhantomPDF 9.6.0.25114 is affected by CVE-2019-17142. The vulnerability is a remote code execution flaw caused by processing of a script within a Keystroke action of a listbox field, arising from not validating the existence of an object before operating on it. Exploitation requires user in...

8.8CVSS8.8AI score0.01469EPSS
Exploits0References2Affected Software1
RedhatCVE
RedhatCVE
added 2019/10/13 1:41 a.m.22 views

CVE-2018-17142

The html package aka x/net/html through 2018-09-17 in Go mishandles , leading to a "panic: runtime error" in parseCurrentToken in parse.go during an html.Parse call...

7.5CVSS1.9AI score0.00652EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2019/03/25 12:0 a.m.32 views

Fedora 28 : golang-googlecode-net (2019-07d447a1d3)

Bump to commit 16b79f2e4e95ea23b2bf9903c9809ff7b013ce85 Security fixes for CVE-2018-17143, CVE-2018-17142, CVE-2018-17075, CVE-2018-17846, CVE-2018-17847, CVE-2018-17848 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website...

7.5CVSS6.6AI score0.0075EPSS
Exploits5References7
UbuntuCve
UbuntuCve
added 2018/09/17 2:29 p.m.27 views

CVE-2018-17142

The html package aka x/net/html through 2018-09-17 in Go mishandles , leading to a "panic: runtime error" in parseCurrentToken in parse.go during an html.Parse call...

7.5CVSS6.8AI score0.00652EPSS
Exploits1References1
OSV
OSV
added 2018/09/17 2:29 p.m.1 views

BELL-CVE-2018-17142 CVE-2018-17142 does not affect BellSoft software

Bulletin has no description...

7.5CVSS5.8AI score0.00652EPSS
Exploits1References1
Cvelist
Cvelist
added 2018/09/17 2:0 p.m.22 views

CVE-2018-17142

The html package aka x/net/html through 2018-09-17 in Go mishandles , leading to a "panic: runtime error" in parseCurrentToken in parse.go during an html.Parse call...

7.4AI score0.00652EPSS
Exploits1References3
Debian CVE
Debian CVE
added 2018/09/17 2:0 p.m.30 views

CVE-2018-17142

Removed by vendor...

7.5CVSS6.6AI score0.00652EPSS
Exploits1
CVE
CVE
added 2018/09/17 2:0 p.m.79 views

CVE-2018-17142

CVE-2018-17142: Golang Go html package vulnerability (html.Parse) causing a runtime panic due to invalid memory address. Public records show IBM bulletins listing this CVE within IBM Storage Defender – Data Protect and related IBM products, with remediation involving upgrading to a newer fixed re...

7.5CVSS7.2AI score0.00652EPSS
Exploits1References3Affected Software1
NVD
NVD
added 2018/03/05 7:29 p.m.14 views

CVE-2017-17142

SIP module in Huawei DP300 V500R002C00; V500R002C00SPC100; V500R002C00SPC200; V500R002C00SPC300; V500R002C00SPC400; V500R002C00SPC500; V500R002C00SPC600; V500R002C00SPC800; V500R002C00SPC900; V500R002C00SPCa00; RP200 V500R002C00SPC200; V600R006C00; V600R006C00SPC200; RSE6500 V500R002C00SPC100;...

5.3CVSS5.3AI score0.00176EPSS
Exploits0References1
Rows per page
Query Builder