Lucene search
+L

67 matches found

EUVD
EUVD
•added 2025/10/07 12:30 a.m.•11 views

EUVD-2020-3296

Malware in sbrugna...

8.8CVSS7.9AI score0.02224EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•14 views

EUVD-2018-21564

Malware in sbrugna...

6.5CVSS7.1AI score0.02755EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•21 views

EUVD-2016-9700

Malware in sbrugna...

5.3CVSS7AI score0.01093EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•13 views

EUVD-2025-27772

Malicious code in bioql PyPI...

9.4CVSS6.2AI score0.00718EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/08/29 12:00 a.m.•13 views

CGM CLININET Code Injection Vulnerability

CGM CLININET is a hospital information management system from CGM Germany. CGM CLININET suffers from a code injection vulnerability that stems from the ConvertToPDF function's filename parameter failing to properly filter special elements of the constructed code segment. An attacker can exploit...

9.4CVSS8AI score0.00718EPSS
SaveExploits0References1
NVD
NVD
•added 2025/08/27 11:15 a.m.•10 views

CVE-2025-30057

In UHCRTFDoc, the filename parameter can be exploited to execute arbitrary code via command injection into the system call in the ConvertToPDF function...

9.4CVSS0.00718EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/08/27 10:23 a.m.•15 views

CVE-2025-30057 Authenticated RCE with uhcapache privileges in ConvertToPDF

In UHCRTFDoc, the filename parameter can be exploited to execute arbitrary code via command injection into the system call in the ConvertToPDF function...

9.4CVSS0.00718EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/08/27 12:00 a.m.•13 views

CGM CLININET 代码注入漏洞

CGM CLININET is a hospital information management system from CGM Germany. CGM CLININET suffers from a code injection vulnerability that stems from the ConvertToPDF function's filename parameter failing to properly filter special elements of the constructed code segment. An attacker can exploit...

9.4CVSS7.9AI score0.00718EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/27 12:00 a.m.•0 views

CVE-2025-30057: Improper Control of Generation of Code

In UHCRTFDoc, the filename parameter can be exploited to execute arbitrary code via command injection into the system call in the ConvertToPDF function...

9.4CVSS6.5AI score0.00718EPSS
SaveExploits0References1
Check Point Advisories
Check Point Advisories
•added 2020/10/19 12:00 a.m.•75 views

Foxit Reader and PhantomPDF Integer Overflow (CVE-2020-8844)

An integer overflow vulnerability exists in Foxit Reader and PhantomPDF. This vulnerability is due to improper parsing of image files within ConvertToPDF. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

6.8CVSS6.8AI score0.23664EPSS
SaveExploits0
NVD
NVD
•added 2020/04/22 9:15 p.m.•31 views

CVE-2020-10890

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.0.29478. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

8.8CVSS8.1AI score0.02224EPSS
SaveExploits0References2
OSV
OSV
•added 2020/04/22 9:15 p.m.•12 views

CVE-2020-10890

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.0.29478. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

8.8CVSS7.5AI score0.02224EPSS
SaveExploits0References2
Prion
Prion
•added 2020/04/22 9:15 p.m.•33 views

Design/Logic Flaw

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.0.29478. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

6.8CVSS8.8AI score0.02224EPSS
SaveExploits0References2Affected Software2
Cvelist
Cvelist
•added 2020/04/22 8:50 p.m.•46 views

CVE-2020-10890

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.0.29478. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS8.8AI score0.02224EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/04/22 12:00 a.m.•3 views

CVE-2020-10890: Cross-Site Request Forgery (CSRF)

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.0.29478. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

8.8CVSS7.9AI score0.02224EPSS
SaveExploits0References3
ThreatPost
ThreatPost
•added 2020/04/20 6:18 p.m.•216773 views

Foxit PDF Reader, PhantomPDF Open to Remote Code Execution

Foxit Software has released patches for dozens of high-severity flaws impacting its PDF reader and editor platforms. The most severe of the bugs, which exist on Windows versions of the software, enable a remote attacker to execute arbitrary code on vulnerable systems. Overall, Foxit Software...

6.8CVSS8.8AI score0.26869EPSS
SaveExploits1References22
Zero Day Initiative
Zero Day Initiative
•added 2020/04/16 12:00 a.m.•40 views

Foxit PhantomPDF ConvertToPDF Arbitrary File Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the communication...

7.8CVSS3.8AI score0.02224EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2019/10/01 12:00 a.m.•37 views

Foxit Reader JPG File ConvertToPDF Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JPG...

7.8CVSS4.7AI score0.0496EPSS
SaveExploits0References1
Kaspersky
Kaspersky
•added 2019/09/29 12:00 a.m.•45 views

KLA11566 RCE vulnerability in Foxit Reader

Out-of-bounds reading vulnerabilities was found in Foxit Reader. Malicious users can exploit this vulnerability via specially designed document to execute arbitrary code or cause denial of service. Technical details Potentially vulnerable components are AcroForm, TIF File ConvertToPDF, JPG File...

8.8CVSS8.5AI score0.06013EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2019/04/29 12:00 a.m.•11 views

PT-2019-18320 · Foxit · Foxit Reader

Name of the Vulnerable Software and Affected Versions: Foxit Reader version 9.4.16811 Description: This issue allows remote attackers to execute arbitrary code on vulnerable installations. User interaction is required, where the target must visit a malicious page or open a malicious file. The fla...

7.8CVSS7.8AI score0.03484EPSS
SaveExploits0References3
Rows per page
Query Builder