Lucene search
+L

822 matches found

Vulnrichment
Vulnrichment
added 2025/02/11 7:24 p.m.12 views

CVE-2024-12551 Tungsten Automation Power PDF JP2 File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

Tungsten Automation Power PDF JP2 File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tungsten Automation Power PDF. User interaction is required to exploit this vulnerability in tha...

7.8CVSS8AI score0.0041EPSS
SaveExploits0References1
CVE
CVE
added 2025/02/11 7:24 p.m.57 views

CVE-2024-12551

Tungsten Automation Power PDF is affected by a JP2 file parsing flaw that can trigger an out-of-bounds read, allowing remote code execution. The issue arises from insufficient validation of JP2 file data in Power PDF, enabling an attacker to read past an allocated object and execute code in the p...

7.8CVSS8AI score0.0041EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2025/02/11 7:24 p.m.28 views

CVE-2024-12551 Tungsten Automation Power PDF JP2 File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

Tungsten Automation Power PDF JP2 File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tungsten Automation Power PDF. User interaction is required to exploit this vulnerability in tha...

7.8CVSS0.0041EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/06 4:42 a.m.21 views

CVE-2021-31437

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.931. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.8AI score0.02761EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/05 9:55 p.m.11 views

CVE-2022-24908

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.7AI score0.01019EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/05 9:52 p.m.8 views

CVE-2022-24063

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sante DICOM Viewer Pro 13.2.0.21165. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists withi...

7.8CVSS6.9AI score0.0181EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/05 9:47 p.m.7 views

CVE-2022-24369

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

8.8CVSS6.7AI score0.02543EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/05 9:40 p.m.10 views

CVE-2022-24907

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.7AI score0.01019EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/05 9:38 p.m.11 views

CVE-2022-24062

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sante DICOM Viewer Pro 13.2.0.21165. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists withi...

7.8CVSS6.8AI score0.01848EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/05 8:55 p.m.10 views

CVE-2022-28300

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation 10.16.02.034 CONNECT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

7.8CVSS6.8AI score0.00959EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/05 5:54 p.m.17 views

CVE-2019-5144

An exploitable heap underflow vulnerability exists in the derivetapsandgains function in kduv7ar.dll of Kakadu Software SDK 7.10.2. A specially crafted jp2 file can cause a heap overflow, which can result in remote code execution. An attacker could provide a malformed file to the victim to trigge...

8.8CVSS7.5AI score0.02435EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/12/11 12:0 a.m.5 views

PT-2024-17646 · Tungsten Automation · Tungsten Automation Power Pdf

Name of the Vulnerable Software and Affected Versions: Tungsten Automation Power PDF affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of Tungsten Automation Power PDF. User interaction is required to exploit this...

7.8CVSS7.1AI score0.00355EPSS
SaveExploits0References4
Zero Day Initiative
Zero Day Initiative
added 2024/12/11 12:0 a.m.13 views

Tungsten Automation Power PDF JP2 File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tungsten Automation Power PDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.9AI score0.0041EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/12/11 12:0 a.m.4 views

PT-2024-17648 · Tungsten Automation · Tungsten Automation Power Pdf

Name of the Vulnerable Software and Affected Versions: Tungsten Automation Power PDF affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations of Tungsten Automation Power PDF. User interaction is required to exploi...

7.8CVSS6.6AI score0.00348EPSS
SaveExploits0References5
Zero Day Initiative
Zero Day Initiative
added 2024/12/11 12:0 a.m.14 views

Tungsten Automation Power PDF JP2 File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tungsten Automation Power PDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.9AI score0.00355EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/12/11 12:0 a.m.19 views

Tungsten Automation Power PDF JP2 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Tungsten Automation Power PDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

3.3CVSS6AI score0.00348EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/12/11 12:0 a.m.4 views

PT-2024-17645 · Tungsten Automation · Tungsten Automation Power Pdf

Name of the Vulnerable Software and Affected Versions: Tungsten Automation Power PDF affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations of Tungsten Automation Power PDF. User interaction is required to exploi...

3.3CVSS6.7AI score0.00349EPSS
SaveExploits0References4
Zero Day Initiative
Zero Day Initiative
added 2024/12/11 12:0 a.m.10 views

Tungsten Automation Power PDF JP2 File Parsing Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Tungsten Automation Power PDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

3.3CVSS6.1AI score0.00349EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2024/11/29 12:0 a.m.8 views

The vulnerability of Adobe InDesign’s computer layout automation tool, related to the execution of operations beyond buffer boundaries in memory, allows attackers to bypass the ASLR protection mechanism and gain unauthorized access to protected information.

The vulnerability of Adobe InDesign’s computer layout automation tool is related to the issue where operations go beyond the buffer in memory when processing JP2 files. Exploiting this vulnerability can allow an attacker to bypass the ASLR protection and gain unauthorized access to protected...

5.5CVSS5.6AI score0.00277EPSS
SaveExploits0References3Affected Software1
NVD
NVD
added 2024/11/22 9:15 p.m.11 views

CVE-2024-9757

Tungsten Automation Power PDF JP2 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Tungsten Automation Power PDF. User interaction is required to exploit this vulnerabili...

3.3CVSS0.0025EPSS
SaveExploits0References1
Rows per page
Query Builder