CVE-2022-23850

xhtmltranslateentity in xhtml.c in epub2txt aka epub2txt2 through 2.02 allows a stack-based buffer overflow via a crafted EPUB document...

CVE-2022-20698

A vulnerability in the OOXML parsing module in Clam AntiVirus ClamAV Software version 0.104.1 and LTS version 0.103.4 and prior versions could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to improper checks that m...

Adobe Acrobat and Reader 资源管理错误漏洞

Adobe Acrobat, a PDF file editing and conversion tool from Adobe, is vulnerable to a resource management error in Adobe Acrobat and Reader, which results from a post-release usage error when processing PDF files. A remote attacker could exploit the vulnerability to create a specially crafted PDF...

Adobe Acrobat and Reader 资源管理错误漏洞

Adobe Acrobat is the United States of America Odo than Adobe company's set of PDF file editing and conversion tools. A resource management error vulnerability exists in Adobe Acrobat and Reader, which stems from a post-release usage error when processing PDF files. An attacker could exploit this...

Adobe Acrobat Reader Dc 代码问题漏洞

Adobe Acrobat Reader Dc is a Pdf reading tool from Adobe USA. Used to reliably view, print and annotate Pdf documents. Adobe Acrobat Reader Dc has a code issue vulnerability that stems from a NULL pointer dereference error. A remote attacker could use the vulnerability to trick victims into openi...

Adobe Acrobat Reader Dc缓冲区错误漏洞

Adobe Acrobat Reader Dc is a Pdf reading tool from Adobe. Adobe Acrobat Reader Dc suffers from a buffer overflow vulnerability that originates from a boundary error when handling untrusted input. A remote attacker could exploit the vulnerability by creating a specially crafted PDF file, tricking...

Adobe Acrobat Reader Dc 缓冲区错误漏洞

Adobe Acrobat Reader Dc is a Pdf reading tool from Adobe. Adobe Acrobat Reader Dc has a buffer overflow vulnerability that can be exploited by an attacker to trick a victim into opening a carefully constructed PDF file, triggering an out-of-bounds read error and reading the contents of system...

The vulnerability of the Foxit PDF Reader and Foxit PDF Editor programs arises from a buffer out-of-bounds exception, allowing an attacker to execute arbitrary code.

The vulnerability of Foxit PDF Reader and Foxit PDF Editor lies in the execution of an operation outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code on the target system by having the user open a specially crafted PDF file...

The vulnerability of the PDF editing software Foxit PhantomPDF and the text viewing software Foxit Reader for Windows operating systems arises from allowing operations beyond the buffer boundaries in memory, enabling attackers to execute arbitrary code.

The vulnerability of the Foxit PhantomPDF PDF editing program and the Foxit Reader text viewing program for Windows operating systems relates to the execution of operations beyond the buffer in memory when processing annotation objects. Exploiting this vulnerability allows a malicious actor to...

The vulnerability relates to the implementation of the transitionToState method in the Foxit PhantomPDF PDF editing software and the Foxit Reader text viewing software for Windows operating systems. This vulnerability allows an attacker to execute arbitrary code.

The vulnerability of the transitionToState method implemented in Foxit PhantomPDF, a PDF editing software, and Foxit Reader, a text viewing software for Windows operating systems, is related to the escape of operations beyond the buffer in memory. Exploiting this vulnerability allows an attacker ...

Jenkins Report Info XML External Entity Processing Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Jenkins Report Info. Authentication is required to exploit this vulnerability. The specific flaw exists within the PMD class. Due to the improper restriction of XML External Entity XXE...

The vulnerability of Adobe After Effects’ video and dynamic image editing software lies in buffer overflow attacks, allowing attackers to execute arbitrary code.

The vulnerability of Adobe After Effects video and dynamic image editing software is related to buffer overflow attacks. Exploiting this vulnerability allows an attacker to execute arbitrary code in the context of the current user, using a specially crafted PDF file...

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to buffer overflow attacks in the stack. These vulnerabilities allow attackers to execute arbitrary code.

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to buffer overflow in the stack. Exploiting these vulnerabilities can allow an attacker to execute arbitrary code in...

CVE-2021-44147

An XML External Entity issue in Claris FileMaker Pro and Server including WebDirect before 19.4.1 allows a remote attacker to disclose local files via a crafted XML/Excel document and perform server-side request forgery attacks...

USN-5153-1 libreoffice vulnerabilities

It was discovered that LibreOffice incorrectly handled digital signatures. An attacker could possibly use this issue to create a specially crafted document that would display a validly signed indicator, contrary to expectations...

The vulnerability of the Microsoft Office software relates to the execution of operations beyond the buffer in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Microsoft Office suite is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially created document...

Jenkins Performance XML External Entity Processing Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Jenkins Performance. Authentication is required to exploit this vulnerability. The specific flaw exists within the TaurusParser class. Due to the improper restriction of XML External Entity X...

Jenkins pom2config XML External Entity Processing Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Jenkins pom2config. Authentication is required to exploit this vulnerability. The specific flaw exists within the Pom2Config class. Due to the improper restriction of XML External Entity XXE...

CVE-2021-21797

An exploitable double-free vulnerability exists in the JavaScript implementation of Nitro Pro PDF. A specially crafted document can cause a reference to a timeout object to be stored in two different places. When closed, the document will result in the reference being released twice. This can lea...

CVE-2021-21796

An exploitable use-after-free vulnerability exists in the JavaScript implementation of Nitro Pro PDF. A specially crafted document can cause an object containing the path to a document to be destroyed and then later reused, resulting in a use-after-free vulnerability, which can lead to code...