Lucene search
+L

12611 matches found

CNNVD
CNNVD
•added 2021/07/09 12:00 a.m.•19 views

Foxit Reader和Foxit PhantomPDF 安全漏洞

Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. A security vulnerability exists in Foxit Reader and Foxit PhantomPDF, and no details of the vulnerability are available at this time...

5.5CVSS5.5AI score0.00771EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/07/09 12:00 a.m.•2 views

PT-2021-20324

Name of the Vulnerable Software and Affected Versions: Foxit Reader versions prior to 10.1.4 PhantomPDF versions prior to 10.1.4 Description: The issue arises from the mishandling of the certificate name, document owner, and signature author, resulting in incorrect PDF document signatures...

5.5CVSS0.00771EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/07/09 12:00 a.m.•6 views

CVE-2021-33795: Improper Handling of Exceptional Conditions

Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 produce incorrect PDF document signatures because the certificate name, document owner, and signature author are mishandled...

5.5CVSS5.8AI score0.00771EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2021/07/09 12:00 a.m.•3 views

PT-2021-20321

Name of the Vulnerable Software and Affected Versions: Foxit Reader versions prior to 10.1.4 PhantomPDF versions prior to 10.1.4 Description: The issue is related to an out-of-bounds write that can occur via a crafted /Size key in the Trailer dictionary. Recommendations: For Foxit Reader versions...

7.8CVSS0.02107EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/07/09 12:00 a.m.•7 views

CVE-2021-33792: Out-of-bounds Write

Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 have an out-of-bounds write via a crafted /Size key in the Trailer dictionary...

7.8CVSS5.8AI score0.02107EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2021/07/09 12:00 a.m.•14 views

Foxit Reader 和 Foxit PhantomPDF 缓冲区错误漏洞

Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. A buffer overflow vulnerability exists in Foxit Reader and Foxit PhantomPDF, no details of the vulnerability are available at this time...

7.8CVSS5.8AI score0.02107EPSS
SaveExploits0References1
OSV
OSV
•added 2021/06/16 11:15 p.m.•12 views

CVE-2021-31476

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.1.3.37598. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS7.5AI score0.08754EPSS
SaveExploits0References2
NVD
NVD
•added 2021/06/16 11:15 p.m.•39 views

CVE-2021-31476

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.1.3.37598. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS0.08754EPSS
SaveExploits0References2
Prion
Prion
•added 2021/06/16 11:15 p.m.•28 views

Type confusion

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.1.3.37598. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

6.8CVSS7.8AI score0.08754EPSS
SaveExploits0References2Affected Software2
attackerkb
attackerkb
•added 2021/06/16 11:15 p.m.•12 views

CVE-2021-31476

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.1.3.37598. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS7.3AI score0.08754EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2021/06/16 10:15 p.m.•50 views

CVE-2021-31476

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.1.3.37598. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS8.3AI score0.08754EPSS
SaveExploits0References2
CVE
CVE
•added 2021/06/16 10:15 p.m.•275 views

CVE-2021-31476

CVE-2021-31476 affects Foxit PhantomPDF 10.1.3.37598. The flaw is in the handling of XFA templates and stems from a lack of input validation, leading to a type confusion condition. This can allow remote attackers to execute arbitrary code in the context of the target process, with user interactio...

7.8CVSS8AI score0.08754EPSS
SaveExploits0References2Affected Software2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/06/16 12:00 a.m.•5 views

CVE-2021-31476: Access of Resource Using Incompatible Type

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.1.3.37598. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.6AI score0.08754EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2021/06/05 12:00 a.m.•3 views

PT-2021-14801

Name of the Vulnerable Software and Affected Versions Foxit Software’s PDF Reader version 10.1.3.37598 Description A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader. A specially crafted PDF document can trigger the reuse of previously freed memory, whic...

8.8CVSS0.06133EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2021/05/26 12:00 a.m.•2 views

PT-2021-19357

Name of the Vulnerable Software and Affected Versions Foxit PhantomPDF version 10.1.3.37598 Description This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a malicious file. The...

7.8CVSS0.08754EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2021/05/26 12:00 a.m.•41 views

Foxit PhantomPDF 安全漏洞

Foxit PhantomPDF is a PDF document reader from the Chinese company Foxit. A security vulnerability exists in Foxit PhantomPDF that stems from a lack of proper validation of user-supplied data, which could allow a remote attacker to execute arbitrary code...

7.8CVSS7.8AI score0.08754EPSS
SaveExploits0References3
Zero Day Initiative
Zero Day Initiative
•added 2021/05/26 12:00 a.m.•227 views

Foxit PhantomPDF XFA Template Type Confusion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of X...

7.8CVSS2.4AI score0.08754EPSS
SaveExploits0References1
NVD
NVD
•added 2021/05/21 3:15 p.m.•48 views

CVE-2021-31473

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.3.37598. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS0.07678EPSS
SaveExploits1References2
OSV
OSV
•added 2021/05/21 3:15 p.m.•13 views

CVE-2021-31473

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.3.37598. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.2AI score0.07678EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2021/05/21 3:15 p.m.•10 views

CVE-2021-31473

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.3.37598. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS7.3AI score0.07678EPSS
SaveExploits1References3Affected Software1
Rows per page
Query Builder