8 matches found
CVE-2022-37381
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
CVE-2024-37381
creationtimestamp| type| source ---|---|--- 2024-07-18 10:13:10+00:00| seen| https://t.me/HackingInsights/6482 2024-07-19 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1339 2024-07-29 08:46:01+00:00| seen| https://t.me/cvedetector/1814...
CVE-2022-37381
CVE-2022-37381 affects Foxit PDF Reader. The flaw is in the AFSpecial_KeystrokeEx method, arising from not validating the existence of an object before performing operations, which allows an attacker to execute code in the context of the current process. Exploitation requires user interaction (th...
CVE-2022-37381
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
KLA12598 Multiple vulnerabilities in Foxit Reader
Multiple vulnerabilities were found in Foxit Reader. Malicious users can exploit these vulnerabilities to cause denial of service, obtain sensitive information, execute arbitrary code. Below is a complete list of vulnerabilities: 1. Null Pointer Dereference vulnerability can be exploited to cause...
CVE-2021-37381
creationtimestamp| type| source ---|---|--- 2021-08-06 16:32:42+00:00| seen| https://t.me/cibsecurity/26927...
CVE-2021-37381
The CVE-2021-37381 entry concerns Southsoft GMIS 5.0, which is vulnerable to Cross-Site Request Forgery (CSRF). The exposed issue enables access to private user information (e.g., student photos) by CSRF via a crafted request to endpoints such as /gmis/(S([1]))/student/grgl/PotoImageShow/?bh=[2]....
WordPress Information Disclosure Vulnerability (CNVD-2019-37381)
WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress suffers from an information disclosure vulnerability. An attacker can exploit the vulnerability to...