Lucene search
+L

3473 matches found

CNVD
CNVD
added 2023/11/30 12:0 a.m.73 views

Foxit Reader Arbitrary File Creation Vulnerability

Foxit Reader is a Chinese Foxit Foxit company's a PDF document reader. Foxit Reader suffers from an arbitrary file creation vulnerability, which can be exploited by an attacker to create a file in any location via a specially crafted malicious file, resulting in the execution of arbitrary code...

8.8CVSS6.9AI score0.02001EPSS
SaveExploits1References1
CNVD
CNVD
added 2023/11/30 12:0 a.m.64 views

Foxit Reader Arbitrary File Creation Vulnerability (CNVD-2023-96090)

Foxit Reader is a Chinese Foxit Foxit company's a PDF document reader. An arbitrary file creation vulnerability exists in Foxit Reader before version 12.1.3.15356, which can be exploited by an attacker to execute arbitrary code on the system...

8.8CVSS8.7AI score0.02673EPSS
SaveExploits1References1
CVE
CVE
added 2023/11/29 10:47 p.m.43 views

CVE-2023-49694

CVE-2023-49694 refers to a NETGEAR ProSAFE Network Management System privilege-escalation vulnerability on Windows hosts. An attacker with low OS privileges can create arbitrary JSP files in the Tomcat web-application directory and execute them under the SYSTEM security context, enabling full pri...

7.8CVSS7.7AI score0.00537EPSS
SaveExploits1References2Affected Software1
OSV
OSV
added 2023/11/27 4:15 p.m.9 views

CVE-2023-40194

An arbitrary file creation vulnerability exists in the Javascript exportDataObject API of Foxit Reader 12.1.3.15356 due to mistreatment of whitespace characters. A specially crafted malicious file can create files at arbitrary locations, which can lead to arbitrary code execution. An attacker nee...

8.8CVSS6AI score0.02001EPSS
SaveExploits1References2
NVD
NVD
added 2023/11/27 4:15 p.m.19 views

CVE-2023-40194

An arbitrary file creation vulnerability exists in the Javascript exportDataObject API of Foxit Reader 12.1.3.15356 due to mistreatment of whitespace characters. A specially crafted malicious file can create files at arbitrary locations, which can lead to arbitrary code execution. An attacker nee...

8.8CVSS0.02001EPSS
SaveExploits1References2
NVD
NVD
added 2023/11/27 4:15 p.m.25 views

CVE-2023-35985

An arbitrary file creation vulnerability exists in the Javascript exportDataObject API of Foxit Reader 12.1.3.15356 due to a failure to properly validate a dangerous extension. A specially crafted malicious file can create files at arbitrary locations, which can lead to arbitrary code execution. ...

8.8CVSS0.02673EPSS
SaveExploits1References2
OSV
OSV
added 2023/11/27 4:15 p.m.7 views

CVE-2023-35985

An arbitrary file creation vulnerability exists in the Javascript exportDataObject API of Foxit Reader 12.1.3.15356 due to a failure to properly validate a dangerous extension. A specially crafted malicious file can create files at arbitrary locations, which can lead to arbitrary code execution. ...

8.8CVSS6AI score0.02673EPSS
SaveExploits1References2
Prion
Prion
added 2023/11/27 4:15 p.m.35 views

Design/Logic Flaw

An arbitrary file creation vulnerability exists in the Javascript exportDataObject API of Foxit Reader 12.1.3.15356 due to mistreatment of whitespace characters. A specially crafted malicious file can create files at arbitrary locations, which can lead to arbitrary code execution. An attacker nee...

6.8CVSS7.4AI score0.02001EPSS
SaveExploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/11/27 3:25 p.m.14 views

CVE-2023-40194

An arbitrary file creation vulnerability exists in the Javascript exportDataObject API of Foxit Reader 12.1.3.15356 due to mistreatment of whitespace characters. A specially crafted malicious file can create files at arbitrary locations, which can lead to arbitrary code execution. An attacker nee...

8.8CVSS7.2AI score0.02001EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2023/11/27 3:25 p.m.57 views

CVE-2023-40194

An arbitrary file creation vulnerability exists in the Javascript exportDataObject API of Foxit Reader 12.1.3.15356 due to mistreatment of whitespace characters. A specially crafted malicious file can create files at arbitrary locations, which can lead to arbitrary code execution. An attacker nee...

8.8CVSS9AI score0.02001EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2023/11/27 3:25 p.m.47 views

CVE-2023-35985

An arbitrary file creation vulnerability exists in the Javascript exportDataObject API of Foxit Reader 12.1.3.15356 due to a failure to properly validate a dangerous extension. A specially crafted malicious file can create files at arbitrary locations, which can lead to arbitrary code execution. ...

8.8CVSS9AI score0.02673EPSS
SaveExploits1References1
CVE
CVE
added 2023/11/27 3:25 p.m.87 views

CVE-2023-40194

Foxit Reader 12.1.3.15356 contains an arbitrary file creation vulnerability in the Javascript exportDataObject API due to whitespace handling. A crafted malicious file can create files at arbitrary locations, potentially enabling arbitrary code execution. Exploitation requires user action (openin...

8.8CVSS8.6AI score0.02001EPSS
SaveExploits1References2Affected Software1
Vulnrichment
Vulnrichment
added 2023/11/27 3:25 p.m.12 views

CVE-2023-35985

An arbitrary file creation vulnerability exists in the Javascript exportDataObject API of Foxit Reader 12.1.3.15356 due to a failure to properly validate a dangerous extension. A specially crafted malicious file can create files at arbitrary locations, which can lead to arbitrary code execution. ...

8.8CVSS7.2AI score0.02673EPSS
SaveExploits1References1
CVE
CVE
added 2023/11/27 3:25 p.m.59 views

CVE-2023-35985

CVE-2023-35985 affects Foxit Reader 12.1.3.15356. The vulnerability is in the Javascript exportDataObject API, caused by a failure to properly validate a dangerous extension, enabling an attacker to create files at arbitrary locations. This can lead to arbitrary code execution. Exploitation requi...

8.8CVSS8.6AI score0.02673EPSS
SaveExploits1References2Affected Software1
Veracode
Veracode
added 2023/11/27 5:16 a.m.19 views

Information Disclosure

storm-core is vulnerable to Information Disclosure. The vulnerability exists because the createExtraPropertiesFile function in TopologySpoutLag.java creates a file with a predefined name easily identifiable and, by default, will create this file with insecure permissions -rw-r--r-- on Unix-like...

5.5CVSS6.7AI score0.00346EPSS
SaveExploits0References5Affected Software1
CNNVD
CNNVD
added 2023/11/27 12:0 a.m.10 views

Foxit Reader 安全漏洞

Foxit Reader is a Chinese Foxit Foxit company's a PDF document reader. Foxit Reader suffers from an arbitrary file creation vulnerability, which can be exploited by an attacker to create a file in any location via a specially crafted malicious file, resulting in the execution of arbitrary code...

8.8CVSS7AI score0.02001EPSS
SaveExploits1References1
Talos
Talos
added 2023/11/27 12:0 a.m.40 views

Foxit Reader Javascript exportDataObject HTA file creation vulnerability

Talos Vulnerability Report TALOS-2023-1834 Foxit Reader Javascript exportDataObject HTA file creation vulnerability November 27, 2023 CVE Number CVE-2023-35985 SUMMARY An arbitrary file creation vulnerability exists in the Javascript exportDataObject API of Foxit Reader 12.1.3.15356 due to a...

8.8CVSS8.8AI score0.02673EPSS
SaveExploits1
Talos
Talos
added 2023/11/27 12:0 a.m.28 views

Foxit Reader Javascript saveAs arbitrary file creation vulnerability

Talos Vulnerability Report TALOS-2023-1832 Foxit Reader Javascript saveAs arbitrary file creation vulnerability November 27, 2023 CVE Number CVE-2023-39542 SUMMARY A code execution vulnerability exists in the Javascript saveAs API of Foxit Reader 12.1.3.15356. A specially crafted malformed file c...

8.8CVSS9AI score0.03346EPSS
SaveExploits1
Talos
Talos
added 2023/11/27 12:0 a.m.45 views

Foxit Reader Javascript exportDataObject arbitrary file creation vulnerability

Talos Vulnerability Report TALOS-2023-1833 Foxit Reader Javascript exportDataObject arbitrary file creation vulnerability November 27, 2023 CVE Number CVE-2023-40194 SUMMARY An arbitrary file creation vulnerability exists in the Javascript exportDataObject API of Foxit Reader 12.1.3.15356 due to...

8.8CVSS8.8AI score0.02001EPSS
SaveExploits1
CNNVD
CNNVD
added 2023/11/27 12:0 a.m.9 views

Foxit Reader 安全漏洞

Foxit Reader is a Chinese Foxit Foxit company's a PDF document reader. An arbitrary file creation vulnerability exists in Foxit Reader before version 12.1.3.15356, which can be exploited by an attacker to execute arbitrary code on the system...

8.8CVSS7.7AI score0.02673EPSS
SaveExploits1References1
Rows per page
Query Builder