CVE-2021-34837

CVE-2021-34837 affects Foxit PDF Reader 11.0.0.49893/Foxit PhantomPDF family. The issue is a use of unvalidated object handling in Annotation objects, where the absence of validating an object before operations can allow remote code execution in the current process after a user opens a malicious ...

CVE-2021-34837

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2021-34836

CVE-2021-34836 affects Foxit PDF Reader 11.0.0.49893. The flaw is in the handling of Annotation objects where the software fails to validate the existence of an object before performing operations, enabling remote code execution. Exploitation requires the user to visit a malicious page or open a ...

CVE-2021-34835

CVE-2021-34835 affects Foxit PDF Reader (11.0.0.49893). The flaw lies in handling of Annotation objects where the software does not validate the existence of an object before performing operations, enabling a remote attacker to execute code in the context of the current process. Exploitation requ...

CVE-2021-34834

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2021-34834

CVE-2021-34834 affects Foxit PDF Reader (11.0.0.49893) and related Foxit products. The root cause is lack of validation for the existence of an Annotation object before performing operations, enabling remote code execution when a user opens a malicious file/page and the attacker can execute code ...

CVE-2021-34833

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2021-34833

Foxit PDF Reader/PhantomPDF 11.0.0.49893 is affected by CVE-2021-34833 due to a use-after-validation flaw in handling Annotation objects. The vulnerability results from not validating the existence of an object before performing operations, enabling remote code execution in the current process. U...

CVE-2021-34832

Foxit PDF Reader (Windows/macOS) ≤11.0.0.49893 is affected by a remote code execution vulnerability in the handling of the delay property, caused by not validating the existence of an object before operating on it. This allowed remote attackers to run arbitrary code after convincing a user to ope...

CVE-2021-34831

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.4.37651. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2021-34831

CVE-2021-34831 affects Foxit Reader 10.1.4.37651 (and related Foxit PDF tooling) with remote code execution via improper handling of Document objects. The flaw arises from not validating the existence of an object before performing operations, allowing an attacker to execute code in the context o...

CVE-2021-31503

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop Build 16.6.3.84 package 16.6.3.134. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The...

CVE-2021-31504

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop Build 16.6.3.84 package 16.6.3.134. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The...

CVE-2021-31504

OpenText Brava! Desktop is affected by CVE-2021-31504 due to an unvalidated pointer dereference in PDF parsing, allowing a user-interaction-initiated remote code execution. Affected: OpenText Brava! Desktop Build 16.6.3.84 (package 16.6.3.134). Exploitation requires the user to visit a malicious ...

CVE-2021-31503

OpenText Brava! Desktop (version 16.6.3.84 / package 16.6.3.134) is affected by CVE-2021-31503 due to a parsing flaw in IGS files caused by an uninitialized pointer. This leads to arbitrary code execution with the current process context when a user visits a malicious page or opens a malicious fi...

CVE-2021-31503

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop Build 16.6.3.84 package 16.6.3.134. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The...

GHSA-9Q94-V7CH-MXQW Insufficient Session Expiration and TOCTOU Race Condition in OPC FOundation UA .Net Standard

This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of OPC Foundation UA .NET Standard 1.04.358.30. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of sessions. The issue results fr...

Insufficient Session Expiration and TOCTOU Race Condition in OPC FOundation UA .Net Standard

This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of OPC Foundation UA .NET Standard 1.04.358.30. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of sessions. The issue results fr...

SUSE SLES15: cluster-md-kmp-rt / dlm-kmp-rt / gfs2-kmp-rt / kernel-devel-rt / etc (SUSE-SU-2021:2426-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:2426-1 advisory. The SUSE Linux Enterprise 15 SP2 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: -...

Debian DLA-2713-1 : linux - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2713 advisory. - fs/seqfile.c in the Linux kernel 3.16 through 5.13.x before 5.13.4 does not properly restrict seq buffer allocations, leading to an integer overflow, an...