GHSA-9WF6-88X4-6XVJ BuddyPress Docs plugin Improper Privilege Management

An issue was discovered in includes/component.php in the BuddyPress Docs plugin before 1.9.3 for WordPress. It is possible for authenticated users to edit documents of other users without proper permissions...

PDF Viewing Null Pointer DoS

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 are related to the use of a null pointer. Exploiting these...

Foxit Reader PhantomPDF Buffer Overflow RCE

The vulnerability of the Foxit Reader text viewer program and the Foxit PhantomPDF PDF editing program lies in the fact that the operation is executed outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

PDF viewer Heap Buffer Overflow Code Execution

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat and Document Cloud, are related to reading data beyond the buffer in memory. Exploiting these vulnerabilities can allow a malicious actor to execute arbitrary cod...

PDF viewing and editing out-of-buffer DoS

The vulnerability of PDF viewing and editing programs like Adobe Acrobat Document Cloud and Acrobat Reader Document Cloud lies in the execution of operations beyond the buffer limits in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected informatio...

PDF viewer Privilege Escalation file write

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are due to privilege management errors. Exploiting these vulnerabilities can allow an attacker to remotely write arbitrary files...

PDF Viewer Heap Buffer Overflow

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat and Document Cloud, are related to the execution of operations beyond the buffer boundaries in memory. Exploiting these vulnerabilities can allow unauthorized...

CVE-2019-15539

The projdoceditpage.php Project Documentation feature in MantisBT before 2.21.3 has a stored cross-site scripting XSS vulnerability, allowing execution of arbitrary code if CSP settings permit it after uploading an attachment with a crafted filename. The code is executed when editing the document...

PDF viewing and editing Security Bypass

The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat Reader Document Cloud are related to insufficient data encryption. Exploiting these vulnerabilities can allow attackers to bypass existing security measures when acting remotely...

WordPress BuddyPress Docs Unauthorized Operation Vulnerability

WordPress is a suite of blogging platforms developed in the PHP language by the WordPress Software Foundation, which supports the hosting of personal blog sites on servers running PHP and MySQL.BuddyPress Docs is one of the plugins for adding collaborative workspaces. A security vulnerability...

CVE-2017-6954

Vulnerability in BuddyPress Docs WordPress plugin (pre-1.9.3) in includes/component.php allows authenticated users to edit other users’ documents due to improper authorization. Impact is unauthorized edits of documents; CVSS base scores (4.0–4.3) indicate MEDIUM severity. Remediation: upgrade to ...

CVE-2017-6954: Improper Privilege Management

An issue was discovered in includes/component.php in the BuddyPress Docs plugin before 1.9.3 for WordPress. It is possible for authenticated users to edit documents of other users without proper permissions...

Informatica: [marketplace.informatica.com]- Stored XSS on Image title and Edit Property

By uploading and image with the title of ".jpg and allowing anyone to edit the Document under collaboration settings, XSS can be triggered by any user attempting to edit the document. POC ==== 1. Log into marketplace and go to profile page. Select New Document 2. Choose to upload document and...

Adobe Reader Code Execution

The vulnerabilities of PDF viewer programs such as Adobe Reader and Adobe Reader Document Cloud, as well as PDF editing programs like Adobe Acrobat and Adobe Acrobat Document Cloud, are due to an operation that goes beyond the buffer boundaries in memory. Exploiting these vulnerabilities can allo...

PDF Editing JavaScript Bypass

The vulnerability of the ANSendApprovalToAuthorEnabled method in PDF editing programs from Adobe Acrobat and Adobe Acrobat Document Cloud, as well as in PDF viewing programs from Adobe Reader and Adobe Reader Document Cloud, is related to deficiencies in access control for certain functions...

Adobe Acrobat PDF Editing Access Bypass

The vulnerability of the Adobe Acrobat PDF editing program is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to bypass restrictions on access to the JavaScript API...

Adobe Acrobat DC Code Execution

The vulnerability of the Adobe Acrobat DC PDF editing program arises due to an overflow in the buffer in the dynamic memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure...

Adobe Acrobat DC Code Execution

The vulnerability of the Adobe Acrobat DC PDF editing program arises due to an overflow in the buffer in the dynamic memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure...

Black Watch Labs Vulnerability Alert

Dear Security Professional, The following vulnerability: "Lotus Domino Server Misconfiguration – Documents Can Be Modified over the Web" is in the text of the message below and has just been posted to the Black Watch Labs Web site at http://www.perfectotech.com/blackwatchlabs/ Thank you, Black...