Lucene search
+L

1810 matches found

BDU FSTEC
BDU FSTEC
added 2019/04/19 12:0 a.m.5 views

The vulnerability of the Microsoft Office package, related to data processing errors, allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft Office package is related to data processing errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted document...

7.8CVSS6.9AI score0.18515EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2019/04/17 12:0 a.m.6 views

The vulnerability of the XRef::getEntry function in the Poppler PDF rendering library, related to reading beyond the allowed buffer data limits, allows an attacker to access confidential information or cause service failures.

The vulnerability of the XRef::getEntry function in the Poppler PDF viewer library relates to reading data beyond the allowed buffer size. Exploiting this vulnerability allows an attacker to gain access to confidential information or cause service failures by using a specially crafted PDF documen...

6.8CVSS6.7AI score0.02196EPSS
SaveExploits1References16Affected Software5
Microsoft CVE
Microsoft CVE
added 2019/04/09 7:0 a.m.25 views

Windows GDI Information Disclosure Vulnerability

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. There are multiple ways an attacker could explo...

6.5CVSS1.8AI score0.09527EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2019/03/29 12:0 a.m.6 views

The vulnerability of the Apache OpenOffice office software, related to arithmetic overflow, allows a hacker to trigger a service failure.

The vulnerability of the Apache OpenOffice office software package is related to arithmetic overflow. Exploiting this vulnerability can allow an attacker to trigger a service failure using a specially created document...

7.8CVSS7.3AI score0.01025EPSS
SaveExploits0References5Affected Software1
CNVD
CNVD
added 2019/03/23 12:0 a.m.3 views

Denial of Service Vulnerability in Kingsoft PDF Reader (CNVD-2019-10299)

Kingsoft PDF Reader is a PDF reading tool. Kingsoft PDF Reader has a denial of service vulnerability that can be exploited by an attacker to cause a denial of service by constructing a specific pdf file...

6.8AI score
SaveExploits0
CNVD
CNVD
added 2019/03/23 12:0 a.m.2 views

Denial of Service Vulnerability in Kingsoft PDF Reader (CNVD-2019-10295)

Kingsoft PDF Reader is a PDF reading tool. Kingsoft PDF Reader has a denial of service vulnerability that can be exploited by an attacker to cause a denial of service by constructing a specific pdf file...

6.8AI score
SaveExploits0
CNVD
CNVD
added 2019/03/23 12:0 a.m.3 views

Denial of Service Vulnerability in Kingsoft PDF Reader (CNVD-2019-10300)

Kingsoft PDF Reader is a PDF reading tool. Kingsoft PDF Reader has a denial of service vulnerability that can be exploited by an attacker to cause a denial of service by constructing a specific pdf file...

6.8AI score
SaveExploits0
CNVD
CNVD
added 2019/03/23 12:0 a.m.2 views

Denial of Service Vulnerability in Kingsoft PDF Reader (CNVD-2019-10301)

Kingsoft PDF Reader is a PDF reading tool. Kingsoft PDF Reader has a denial of service vulnerability that can be exploited by an attacker to cause a denial of service by constructing a specific pdf file...

6.8AI score
SaveExploits0
OSV
OSV
added 2019/03/21 4:1 p.m.6 views

CVE-2019-9877

There is an invalid memory access vulnerability in the function TextPage::findGaps located at TextOutputDev.c in Xpdf 4.01, which can for example be triggered by sending a crafted pdf file to the pdftops binary. It allows an attacker to cause Denial of Service Segmentation fault or possibly have...

7.8CVSS6.7AI score0.01141EPSS
SaveExploits1References2
OSV
OSV
added 2019/03/21 12:0 a.m.4 views

UBUNTU-CVE-2019-9903

PDFDoc::markObject in PDFDoc.cc in Poppler 0.74.0 mishandles dict marking, leading to stack consumption in the function Dict::find located at Dict.cc, which can for example be triggered by passing a crafted pdf file to the pdfunite binary...

6.5CVSS6.7AI score0.02251EPSS
SaveExploits1References4
CNVD
CNVD
added 2019/03/12 12:0 a.m.2 views

Denial of Service Vulnerability in Kingsoft PDF Reader (CNVD-2019-09091)

Kingsoft PDF Reader is a PDF reading tool. Kingsoft PDF Reader has a denial-of-service vulnerability, which can be exploited by an attacker to cause a denial-of-service vulnerability by constructing a specific pdf file...

6.9AI score
SaveExploits0
CNVD
CNVD
added 2019/03/12 12:0 a.m.2 views

Denial of Service Vulnerability in Kingsoft PDF Reader (CNVD-2019-09094)

Kingsoft PDF Reader is a PDF reading tool. Kingsoft PDF Reader has a denial-of-service vulnerability, which can be exploited by an attacker to cause a denial-of-service vulnerability by constructing a specific pdf file...

6.9AI score
SaveExploits0
CNVD
CNVD
added 2019/03/12 12:0 a.m.2 views

Denial of Service Vulnerability in Kingsoft PDF Reader (CNVD-2019-09107)

Kingsoft PDF Reader is a PDF reading tool. Kingsoft PDF Reader has a denial-of-service vulnerability, which can be exploited by an attacker to cause a denial-of-service vulnerability by constructing a specific pdf file...

6.9AI score
SaveExploits0
CNVD
CNVD
added 2019/03/12 12:0 a.m.3 views

Denial of Service Vulnerability in Kingsoft PDF Reader (CNVD-2019-09093)

Kingsoft PDF Reader is a PDF reading tool. Kingsoft PDF Reader has a denial-of-service vulnerability, which can be exploited by an attacker to cause a denial-of-service vulnerability by constructing a specific pdf file...

6.9AI score
SaveExploits0
CNVD
CNVD
added 2019/03/07 12:0 a.m.3 views

Denial of service vulnerability in Viscom Softwares pdf viewer activex control

Viscom Softwares pdf viewer activex control is a popular PDF viewing and printing control. A denial of service vulnerability exists in the Viscom Softwares pdf viewer activex control. An attacker can exploit this vulnerability to cause a denial of service by constructing a specific pdf file...

6.7AI score
SaveExploits0
Snyk
Snyk
added 2019/03/01 7:29 p.m.8 views

Improper Input Validation

Overview Affected versions of this package are vulnerable to Improper Input Validation. An issue was discovered in Poppler 0.74.0. A recursive function call, in JBIG2Stream::readTextRegion located in JBIG2Stream.cc, can be triggered by sending a crafted pdf file to for example the pdfimages binar...

8.8CVSS7.4AI score0.01824EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
added 2019/03/01 12:0 a.m.7 views

The vulnerability of the Windows GDI component of the Windows operating system, which allows a hacker to compromise sensitive information

The vulnerability of the Windows GDI component of the Windows operating system is related to errors in the memory object handling mechanisms. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially crafted document file...

4.7CVSS6.6AI score0.07708EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2019/03/01 12:0 a.m.6 views

The vulnerability of the Windows GDI component of the Windows operating system, which allows a hacker to compromise sensitive information

The vulnerability of the Windows GDI component of the Windows operating system is related to errors in the memory object handling mechanisms. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially crafted document file...

4.7CVSS6.6AI score0.07708EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2019/03/01 12:0 a.m.11 views

The vulnerability of the Windows GDI component of the Windows operating system, which allows a hacker to compromise sensitive information

The vulnerability of the Windows GDI component of the Windows operating system is related to errors in the memory object handling mechanisms. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially crafted document file...

4.7CVSS6.6AI score0.07708EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2019/02/26 12:0 a.m.15 views

PT-2019-19432 · Podofo +2 · Podofo +2

Name of the Vulnerable Software and Affected Versions: PoDoFo version 0.9.6 Description: The issue is related to a NULL pointer dereference in the setSource function, which can be triggered by sending a crafted PDF file. This can cause a Denial of Service Segmentation fault or possibly have other...

9.8CVSS7.2AI score0.02618EPSS
SaveExploits9References82
Rows per page
Query Builder