Lucene search
+L

2052 matches found

CNVD
CNVD
•added 2019/03/07 12:00 a.m.•16 views

Denial of service vulnerability in Viscom Softwares pdf viewer activex control

Viscom Softwares pdf viewer activex control is a popular PDF viewing and printing control. A denial of service vulnerability exists in the Viscom Softwares pdf viewer activex control. An attacker can exploit this vulnerability to cause a denial of service by constructing a specific pdf file...

6.7AI score
SaveExploits0
Snyk
Snyk
•added 2019/03/01 7:29 p.m.•13 views

Improper Input Validation

Overview Affected versions of this package are vulnerable to Improper Input Validation. An issue was discovered in Poppler 0.74.0. A recursive function call, in JBIG2Stream::readTextRegion located in JBIG2Stream.cc, can be triggered by sending a crafted pdf file to for example the pdfimages binar...

8.8CVSS7.4AI score0.01824EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
•added 2019/03/01 12:00 a.m.•15 views

The vulnerability of the Windows GDI component of the Windows operating system, which allows a hacker to compromise sensitive information

The vulnerability of the Windows GDI component of the Windows operating system is related to errors in the memory object handling mechanisms. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially crafted document file...

4.7CVSS6.6AI score0.07708EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2019/03/01 12:00 a.m.•11 views

The vulnerability of the Windows GDI component of the Windows operating system, which allows a hacker to compromise sensitive information

The vulnerability of the Windows GDI component of the Windows operating system is related to errors in the memory object handling mechanisms. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially crafted document file...

4.7CVSS6.6AI score0.07708EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2019/03/01 12:00 a.m.•17 views

The vulnerability of the Windows GDI component of the Windows operating system, which allows a hacker to compromise sensitive information

The vulnerability of the Windows GDI component of the Windows operating system is related to errors in the memory object handling mechanisms. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially crafted document file...

4.7CVSS6.6AI score0.07708EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2019/02/26 12:00 a.m.•24 views

PT-2019-19432 · Podofo +2 · Podofo +2

Name of the Vulnerable Software and Affected Versions: PoDoFo version 0.9.6 Description: The issue is related to a NULL pointer dereference in the setSource function, which can be triggered by sending a crafted PDF file. This can cause a Denial of Service Segmentation fault or possibly have other...

9.8CVSS7.2AI score0.02618EPSS
SaveExploits9References82
BDU FSTEC
BDU FSTEC
•added 2019/02/26 12:00 a.m.•14 views

The vulnerability of the LibreOffice office software package arises from an operation that occurs outside the buffer in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the LibreOffice office software package arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created document...

8.8CVSS8.5AI score0.67321EPSS
SaveExploits9References5Affected Software1
BDU FSTEC
BDU FSTEC
•added 2019/02/26 12:00 a.m.•18 views

The vulnerability of the Windows operating system arises from an operation that goes beyond the buffer boundaries in memory, allowing a hacker to execute arbitrary code.

The vulnerability of the Windows operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted web page or document...

9.3CVSS8.4AI score0.15355EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2019/02/21 12:00 a.m.•12 views

The vulnerability of the xz_decomp function in the libxml2 library, which allows a hacker to trigger a service failure.

The vulnerability of the xzdecomp function in the libxml2 library is related to an uncontrolled resource consumption. Exploiting this vulnerability may allow a malicious actor, operating remotely, to cause service failures using a specially crafted XML file...

5.4CVSS6.4AI score0.02357EPSS
SaveExploits1References7Affected Software4
Check Point Advisories
Check Point Advisories
•added 2019/02/21 12:00 a.m.•11 views

LibreOffice WEBSERVICE Information Disclosure (CVE-2018-6871)

An information disclosure vulnerability exists in LibreOffice. The vulnerability is due to improper validation of the WEBSERVICE function argument. A remote, unauthenticated attacker can exploit this vulnerability by enticing a user to open a specially crafted office document...

5CVSS3.5AI score0.22803EPSS
SaveExploits5
CNVD
CNVD
•added 2019/02/08 12:00 a.m.•6 views

Denial of Service Vulnerability in Kingsoft PDF Reader (CNVD-2019-06247)

Kingsoft PDF Reader is a compact and stable PDF reading tool. Kingsoft PDF Reader has a denial of service vulnerability that can be exploited by attackers to cause a denial of service by constructing a specific pdf file...

6.7AI score
SaveExploits0
OSV
OSV
•added 2019/02/04 12:00 a.m.•11 views

UBUNTU-CVE-2018-16858

It was found that libreoffice before versions 6.0.7 and 6.1.3 was vulnerable to a directory traversal attack which could be used to execute arbitrary macros bundled with a document. An attacker could craft a document, which when opened by LibreOffice, would execute a Python method from a script i...

9.8CVSS7.5AI score0.67321EPSS
SaveExploits9References5
BDU FSTEC
BDU FSTEC
•added 2019/01/15 12:00 a.m.•20 views

The vulnerability of the Windows GDI component of the Windows operating system, which allows a hacker to gain access to confidential information

The vulnerability of the Windows GDI component of the Microsoft Windows operating system is related to errors in the memory object handling mechanisms. Exploiting this vulnerability can allow an attacker to access confidential information through a specially crafted document...

5.2CVSS6.7AI score0.06923EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2019/01/15 12:00 a.m.•21 views

The vulnerability of the Windows GDI component of the Windows operating system, which allows a hacker to gain access to confidential information

The vulnerability of the Windows GDI component of the Microsoft Windows operating system is related to errors in the memory object handling mechanisms. Exploiting this vulnerability can allow an attacker to access confidential information through a specially crafted document...

5.2CVSS6.7AI score0.07073EPSS
SaveExploits0References3
OSV
OSV
•added 2019/01/09 7:29 p.m.•6 views

CVE-2018-6120

An integer overflow that could lead to an attacker-controlled heap out-of-bounds write in PDFium in Google Chrome prior to 66.0.3359.170 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted PDF file...

8.8CVSS6.1AI score0.02422EPSS
SaveExploits0References6
OSV
OSV
•added 2019/01/09 7:29 p.m.•9 views

CVE-2018-17461

An out of bounds read in PDFium in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to perform an out of bounds memory read via a crafted PDF file...

8.8CVSS5.8AI score0.00619EPSS
SaveExploits0References2
OSV
OSV
•added 2019/01/09 7:29 p.m.•11 views

UBUNTU-CVE-2018-20065

Handling of URI action in PDFium in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to initiate potentially unsafe navigations without a user gesture via a crafted PDF file...

8.8CVSS7.3AI score0.00566EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2018/12/27 12:00 a.m.•15 views

The vulnerability of the PDFium component in the Google Chrome browser allows a hacker to execute arbitrary code.

The vulnerability of the PDFium component in the Google Chrome browser relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code using a specially crafted PDF file...

8.8CVSS8.1AI score0.01534EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
•added 2018/12/27 12:00 a.m.•16 views

The vulnerability of the PDFium component in the Google Chrome browser allows a hacker to execute arbitrary code.

The vulnerability of the PDFium component in the Google Chrome browser relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code using a specially crafted PDF file...

8.8CVSS8.1AI score0.01606EPSS
SaveExploits0References4Affected Software2
OSV
OSV
•added 2018/12/26 12:00 a.m.•12 views

UBUNTU-CVE-2018-15518

QXmlStream in Qt 5.x before 5.11.3 has a double-free or corruption during parsing of a specially crafted illegal XML document...

8.8CVSS6.9AI score0.02502EPSS
SaveExploits0References5
Rows per page
Query Builder