Lucene search
+L

91 matches found

CNNVD
CNNVD
•added 2022/01/18 12:00 a.m.•21 views

Spipu Html2Pdf 代码问题漏洞

Spipu Html2Pdf is a French Laurent Minguet personal developer of a Php written in Html to Pdf open source converter. Spipu HTML2PDF has a code issue vulnerability in versions prior to 5.2.4, where an attacker can trigger deserialization of arbitrary data by injecting malicious link tags into...

8.8CVSS8.3AI score0.01581EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/01/18 12:00 a.m.•5 views

CVE-2021-45394: Deserialization of Untrusted Data

An issue was discovered in Spipu HTML2PDF before 5.2.4. Attackers can trigger deserialization of arbitrary data via the injection of a malicious tag in the converted HTML document...

8.8CVSS5.9AI score0.01581EPSS
SaveExploits1References3
Zero Day Initiative
Zero Day Initiative
•added 2020/02/11 12:00 a.m.•44 views

Foxit PhantomPDF HTML2PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the conversion of...

7.8CVSS3.2AI score0.08243EPSS
SaveExploits0References1
NVD
NVD
•added 2019/10/25 7:15 p.m.•56 views

CVE-2019-17139

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.5.0.20723. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

8.8CVSS8.1AI score0.05783EPSS
SaveExploits0References2
OSV
OSV
•added 2019/10/25 7:15 p.m.•18 views

CVE-2019-17139

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.5.0.20723. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

8.8CVSS6.1AI score0.05783EPSS
SaveExploits0References2
Prion
Prion
•added 2019/10/25 7:15 p.m.•31 views

Design/Logic Flaw

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.5.0.20723. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

6.8CVSS8.8AI score0.05783EPSS
SaveExploits0References2Affected Software2
Cvelist
Cvelist
•added 2019/10/25 6:14 p.m.•65 views

CVE-2019-17139

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.5.0.20723. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS8.8AI score0.05783EPSS
SaveExploits0References2
CVE
CVE
•added 2019/10/25 6:14 p.m.•213 views

CVE-2019-17139

Foxit PhantomPDF 9.5.0.20723 is affected by CVE-2019-17139 due to an out-of-bounds write in the HTML2PDF plugin while processing JavaScript. The flaw arises from insufficient validation of user-supplied data, enabling remote code execution in the context of the current process. Exploitation requi...

8.8CVSS8.8AI score0.05783EPSS
SaveExploits0References2Affected Software2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/10/25 12:00 a.m.•2 views

CVE-2019-17139: Out-of-bounds Write

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.5.0.20723. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

8.8CVSS7.9AI score0.05783EPSS
SaveExploits0References3
CNVD
CNVD
•added 2019/10/23 12:00 a.m.•13 views

Foxit PhantomPDF Out-of-Bounds Write Remote Code Execution Vulnerability

PhantomPDF is a Chinese Foxit Foxit company for enterprise-level users of PDF document processing software. An out-of-bounds write remote code execution vulnerability exists in the handling of Javascript in the HTML2PDF plug-in in Foxit PhantomPDF 9.6.0.25114 and earlier versions. The vulnerabili...

8.8CVSS8.6AI score0.05783EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2019/10/22 12:00 a.m.•77 views

Foxit PhantomPDF HTML2PDF HTML Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of...

7.8CVSS1.9AI score0.05783EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2019/05/15 12:00 a.m.•40 views

Adobe Acrobat Pro DC HTML2PDF HTML Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

7.8CVSS3AI score0.09767EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2019/05/15 12:00 a.m.•31 views

Adobe Acrobat Pro DC HTML2PDF HTML Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

5.5CVSS0.9AI score0.08724EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2019/04/29 12:00 a.m.•30 views

Foxit PhantomPDF HTML2PDF HTML Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the conversion ...

7.8CVSS1.9AI score0.03484EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2019/04/29 12:00 a.m.•52 views

Foxit PhantomPDF HTML2PDF HTML Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit PhantomPDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS1AI score0.02551EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2019/02/12 12:00 a.m.•30 views

Adobe Acrobat Pro DC HTML2PDF HTML Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

7.8CVSS3.2AI score0.03915EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2019/02/12 12:00 a.m.•33 views

Adobe Acrobat Pro DC HTML2PDF HTML Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

7.8CVSS3AI score0.03915EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2019/02/12 12:00 a.m.•28 views

Adobe Acrobat Pro DC HTML2PDF HTML Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

7.8CVSS3.3AI score0.03915EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2019/01/25 12:00 a.m.•33 views

Foxit PhantomPDF HTML2PDF HTML Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the conversion ...

7.8CVSS3.3AI score0.03719EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2018/12/17 12:00 a.m.•27 views

Adobe Acrobat Pro DC HTML2PDF HTML Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

7.8CVSS3.2AI score0.05388EPSS
SaveExploits0References1
Rows per page
Query Builder