Lucene search
+L

1812 matches found

NVD
NVD
added 2021/07/19 2:15 p.m.27 views

CVE-2021-32013

SheetJS and SheetJS Pro through 0.16.9 allows attackers to cause a denial of service memory consumption via a crafted .xlsx document that is mishandled when read by xlsx.js issue 2 of 2...

5.5CVSS0.0088EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2021/07/19 1:20 p.m.41 views

CVE-2021-32014

SheetJS and SheetJS Pro through 0.16.9 allows attackers to cause a denial of service CPU consumption via a crafted .xlsx document that is mishandled when read by xlsx.js...

5.8AI score0.0088EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2021/07/07 12:0 a.m.12 views

The vulnerability of the PDFDoc::setup function in the PDFDoc.cc component of the Poppler PDF rendering library, related to a lack of input validation mechanism, allows attackers to cause service failures.

The vulnerability of the PDFDoc::setup function in the PDFDoc.cc component of the Poppler PDF rendering library leads to the return of an incorrect value. Exploiting this vulnerability allows a malicious actor to trigger a service failure using a specially created PDF file...

6.5CVSS6.6AI score0.02243EPSS
SaveExploits0References10Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/07/06 12:0 a.m.17 views

The vulnerability of the RestoreMSCWarning() function in the ImageMagick console graphics editor’s /coders/pdf.c component allows a malicious actor to cause a service failure due to a numerical overflow condition.

The vulnerability of the RestoreMSCWarning function in the ImageMagick console-based graphics editor’s /coders/pdf.c component is related to a numerical overflow condition. Exploiting this vulnerability allows an attacker to cause a service failure by using a specially created PDF file...

5.3CVSS6.6AI score0.01161EPSS
SaveExploits1References15Affected Software4
BDU FSTEC
BDU FSTEC
added 2021/06/29 12:0 a.m.11 views

The vulnerability of Adobe Illustrator 2021, related to writing beyond the buffer in memory, allows a hacker to execute arbitrary code.

The vulnerability of Adobe Illustrator 2021 is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code on the target system using a specially crafted PDF file...

10CVSS8.3AI score0.03467EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/06/29 12:0 a.m.8 views

The vulnerability of the Adobe Animate software for creating multimedia and computer animations lies in its ability to read data beyond the boundaries of the memory buffer. This allows attackers to gain unauthorized access to protected information.

The vulnerability of the Adobe Animate program for creating multimedia and computer animations is related to reading beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information through a specially crafted PDF file...

6.4CVSS6.9AI score0.04052EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/06/29 12:0 a.m.9 views

Vulnerability of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, lies in their ability to read data beyond the buffer in memory, allowing attackers to execute arbitrary code.

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat and Document Cloud, are related to reading data beyond the buffer in memory. Exploiting these vulnerabilities can allow a malicious actor to execute arbitrary cod...

10CVSS7.6AI score0.01801EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2021/06/29 12:0 a.m.6 views

The vulnerability of the Adobe Animate software for creating multimedia and computer animations lies in its ability to read data beyond the boundaries of the memory buffer. This allows attackers to gain unauthorized access to protected information.

The vulnerability of the Adobe Animate program for creating multimedia and computer animations is related to reading beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information through a specially crafted PDF file...

6.4CVSS5.7AI score
SaveExploits0References3Affected Software1
OSV
OSV
added 2021/06/12 10:15 a.m.1 views

DEBIAN-CVE-2021-31812

In Apache PDFBox, a carefully crafted PDF file can trigger an infinite loop while loading the file. This issue affects Apache PDFBox version 2.0.23 and prior 2.0.x versions...

5.5CVSS7.1AI score0.03054EPSS
SaveExploits0References1
Snyk
Snyk
added 2021/05/26 10:15 p.m.1 views

Use After Free

Overview Affected versions of this package are vulnerable to Use After Free. A flaw was found in PoDoFo 0.9.7. An use-after-free in PoDoFo::PdfVecObjects::Clear function can cause a denial of service via a crafted PDF file. Remediation There is no fixed version for podofo. References - RedHat...

5.5CVSS6.5AI score0.00704EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
added 2021/05/20 12:0 a.m.10 views

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to reading data beyond the buffer in memory. This allows attackers to execute arbitrary code.

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to reading data beyond the buffer in memory. Exploiting these vulnerabilities can allow a malicious actor to execute...

10CVSS8.5AI score0.05798EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2021/05/19 12:0 a.m.9 views

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to memory usage after it is freed. This allows attackers to execute arbitrary code.

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to the use of memory after it is freed. Exploiting these vulnerabilities can allow a malicious actor to execute...

10CVSS8.3AI score0.04853EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2021/05/19 12:0 a.m.6 views

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to reading beyond the buffer in memory. This allows attackers to gain unauthorized access to protected information.

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to reading data beyond the buffer limit in memory. Exploiting these vulnerabilities can allow an attacker to gain...

7.5CVSS7.4AI score0.08906EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2021/05/19 12:0 a.m.8 views

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to memory usage after it is freed. This allows attackers to execute arbitrary code.

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to the use of memory after it is freed. Exploiting these vulnerabilities can allow a malicious actor to execute...

10CVSS8.3AI score0.52005EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2021/05/18 2:44 p.m.2 views

ghostscript: use-after-free in xps_finish_image_path() in devices/vector/gdevxps.c could result in a privilege escalation

A use-after-free vulnerability in xpsfinishimagepath in devices/vector/gdevxps.c of Artifex Software GhostScript v9.50 allows a remote attacker to escalate privileges via a crafted PDF file. This is fixed in v9.51...

7.8CVSS5.9AI score0.01793EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
added 2021/05/18 2:44 p.m.3 views

ghostscript: buffer overflow in lprn_is_black() in contrib/lips4/gdevlprn.c could result in a DoS

A buffer overflow vulnerability in lprnisblack in contrib/lips4/gdevlprn.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is fixed in v9.51...

5.5CVSS6.1AI score0.0187EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
added 2021/05/18 2:44 p.m.9 views

ghostscript: use-after-free vulnerability in igc_reloc_struct_ptr() could result in DoS

A use-after-free flaw was found in igcrelocstructptr of psi/igc.c of Ghostscript-9.25. This flaw allows a local attacker to supply a specially crafted PDF file, causing a denial of service. The highest threat from this vulnerability is to system availability...

5.5CVSS5.7AI score0.00453EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2021/05/01 12:0 a.m.3 views

libxml2 代码问题漏洞

libxml2 is a software library for parsing XML documents. A null pointer dereference vulnerability exists in libxml2 versions prior to 2.9.11. An attacker can exploit this vulnerability to crash a program via a specially crafted XML document...

5.9CVSS8.4AI score0.03503EPSS
SaveExploits0References44
ATTACKERKB
ATTACKERKB
added 2021/04/28 2:15 p.m.5 views

CVE-2021-3508

A flaw was found in PDFResurrect in version 0.22b. There is an infinite loop in getxreflinearskipped in pdf.c via a crafted PDF file...

5.5CVSS6AI score0.00762EPSS
SaveExploits1References3
OSV
OSV
added 2021/04/26 5:15 p.m.1 views

DEBIAN-CVE-2021-21217

Uninitialized data in PDFium in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted PDF file...

5.5CVSS6.7AI score0.01637EPSS
SaveExploits0References1
Rows per page
Query Builder