Lucene search
+L

1751 matches found

Positive Technologies
Positive Technologies
added 2024/07/23 12:00 a.m.22 views

PT-2024-7808 · Jt2Go · Jt2Go

Name of the Vulnerable Software and Affected Versions: JT2Go versions prior to V2406.0003 Description: A stack-based buffer overflow issue has been identified in the affected application. This issue could be triggered while parsing specially crafted PDF files, potentially allowing an attacker to...

7.8CVSS8.3AI score0.00191EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2024/07/22 12:00 a.m.11 views

PT-2024-28174 · Unknown · Seraphinite Post .Docx Source

Name of the Vulnerable Software and Affected Versions: Seraphinite Post .DOCX Source versions n/a through 2.16.9 Description: The issue is a Server-Side Request Forgery SSRF vulnerability. This means that an attacker could potentially force the server to make requests to arbitrary domains, which...

7.2CVSS6.6AI score0.00271EPSS
SaveExploits0References5
Fedora
Fedora
added 2024/07/09 1:42 a.m.23 views

[SECURITY] Fedora 39 Update: ghostscript-10.02.1-5.fc39

This package provides useful conversion utilities based on Ghostscript softwa re, for converting PS, PDF and other document formats between each other. Ghostscript is a suite of software providing an interpreter for Adobe Systems' PostScript PS and Portable Document Format PDF page description...

8.8CVSS6.9AI score0.27992EPSS
SaveExploits6
Positive Technologies
Positive Technologies
added 2024/06/24 12:00 a.m.10 views

PT-2024-27725 · Unknown · Anchor Cms

Name of the Vulnerable Software and Affected Versions: Anchor CMS version 0.12.7 Description: A Cross Site Scripting issue allows a remote attacker to execute arbitrary code via a crafted .pdf file. Recommendations: For Anchor CMS version 0.12.7, update to a version that fixes this issue, as usin...

8.8CVSS7.6AI score0.16612EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2024/06/21 12:00 a.m.4 views

Freedesktop Poppler Security Vulnerability

Freedesktop Poppler is a C++ class library from the Freedesktop community for generating PDFs, which is inherited from Xpdf PDF reader. A security vulnerability exists in Freedesktop Poppler. An attacker exploiting this vulnerability could cause the utility to crash, resulting in a denial of...

7.5CVSS6.7AI score0.00785EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2024/06/13 5:50 a.m.5 views

SUSE CVE-2016-4434

Apache Tika before 1.13 does not properly initialize the XML parser or choose handlers, which might allow remote attackers to conduct XML External Entity XXE attacks via vectors involving 1 spreadsheets in OOXML files and 2 XMP metadata in PDF and other file formats, a related issue to...

7.8CVSS8.5AI score0.0359EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/06/13 12:00 a.m.11 views

PT-2024-10182 · Tungsten Automation · Tungsten Automation Power Pdf

Name of the Vulnerable Software and Affected Versions: Tungsten Automation Power PDF affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations. User interaction is required to exploit this, where the target must vis...

3.3CVSS6.9AI score0.00252EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
added 2024/06/10 7:47 p.m.13 views

Mozilla: Use-after-free could occur when printing to PDF

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes this flaw as follows: When saving a page to PDF, certain font styles could have led to a potential use-after-free crash...

8.8CVSS7.3AI score0.00592EPSS
SaveExploits1References6
RedHat Linux
RedHat Linux
added 2024/06/10 7:39 p.m.13 views

Mozilla: Use-after-free could occur when printing to PDF

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes this flaw as follows: When saving a page to PDF, certain font styles could have led to a potential use-after-free crash...

8.8CVSS7.3AI score0.00592EPSS
SaveExploits1References6
OSV
OSV
added 2024/06/06 7:16 p.m.19 views

CVE-2024-5306

Kofax Power PDF PDF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kofax Power PDF. User interaction is required to exploit this vulnerability in that the target must visit a...

7.8CVSS6.2AI score0.0041EPSS
SaveExploits0References1
OSV
OSV
added 2024/05/24 2:15 p.m.10 views

CVE-2024-35591

An arbitrary file upload vulnerability in O2OA v8.3.8 allows attackers to execute arbitrary code via uploading a crafted PDF file...

5.4CVSS6.1AI score0.00435EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2024/05/24 12:00 a.m.11 views

PT-2024-26564 · Box-Im · Box-Im

Name of the Vulnerable Software and Affected Versions: Box-IM version 2.0 Description: The issue allows attackers to execute arbitrary code via uploading a crafted PDF file, exploiting an arbitrary file upload vulnerability in the Upload function. Recommendations: For Box-IM version 2.0, consider...

9.6CVSS8.2AI score0.00563EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2024/05/23 12:00 a.m.11 views

Adobe Acrobat Reader 缓冲区错误漏洞

Adobe Acrobat Reader is a PDF viewer from the American company Audobee Adobe. The software is used to print, sign and annotate PDF. Adobe Acrobat Reader suffers from a buffer overflow vulnerability that stems from the presence of an out-of-bounds read vulnerability that could lead to the executio...

7.8CVSS7.5AI score0.06645EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2024/05/20 7:56 a.m.11 views

Mozilla: Arbitrary JavaScript execution in PDF.js

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes this flaw as follows: A type check was missing when handling fonts in PDF.js, which would allow arbitrary JavaScript execution in the PDF.js context...

8.8CVSS7.5AI score0.7066EPSS
SaveExploits16References7
RedHat Linux
RedHat Linux
added 2024/05/20 6:01 a.m.13 views

Mozilla: Use-after-free could occur when printing to PDF

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes this flaw as follows: When saving a page to PDF, certain font styles could have led to a potential use-after-free crash...

8.8CVSS7.3AI score0.00592EPSS
SaveExploits1References6
RedHat Linux
RedHat Linux
added 2024/05/20 1:41 a.m.7 views

Mozilla: Use-after-free could occur when printing to PDF

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes this flaw as follows: When saving a page to PDF, certain font styles could have led to a potential use-after-free crash...

8.8CVSS7.3AI score0.00592EPSS
SaveExploits1References6
BDU FSTEC
BDU FSTEC
added 2024/05/17 12:00 a.m.10 views

The vulnerability of Adobe Acrobat and Acrobat Reader PDF viewer/editor programs, related to the use of memory after it is freed, allows a hacker to execute arbitrary code.

The vulnerability of PDF viewing and editing programs like Adobe Acrobat and Acrobat Reader lies in the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.5AI score0.00562EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2024/05/17 12:00 a.m.10 views

The vulnerability of Adobe Acrobat and Acrobat Reader PDF viewer/editor programs relates to the use of memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of PDF viewing and editing programs like Adobe Acrobat and Acrobat Reader lies in the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.5AI score0.00562EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2024/05/17 12:00 a.m.11 views

The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, and Adobe Acrobat 2020/Adobe Acrobat Reader 2020 involve memory management issues after memory is freed, allowing attackers to execute arbitrary code.

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2020, and Acrobat Reader 2020 is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary...

7.8CVSS7.6AI score0.00603EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2024/05/17 12:00 a.m.9 views

The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, and Adobe Acrobat 2020/Adobe Acrobat Reader 2020 involve memory management issues after memory is freed, allowing attackers to execute arbitrary code.

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2020, and Acrobat Reader 2020 is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary...

7.8CVSS7.6AI score0.00603EPSS
SaveExploits0References2
Rows per page
Query Builder