Lucene search
+L

2604 matches found

Vulnrichment
Vulnrichment
added 2024/04/03 4:19 p.m.19 views

CVE-2024-27343 Kofax Power PDF PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

Kofax Power PDF PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Kofax Power PDF. User interaction is required to exploit this vulnerability in that the target must...

3.3CVSS6.1AI score0.00406EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/04/03 4:19 p.m.28 views

CVE-2024-27343 Kofax Power PDF PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

Kofax Power PDF PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Kofax Power PDF. User interaction is required to exploit this vulnerability in that the target must...

3.3CVSS3.8AI score0.00406EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/04/03 4:18 p.m.32 views

CVE-2024-27341 Kofax Power PDF PDF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

Kofax Power PDF PDF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kofax Power PDF. User interaction is required to exploit this vulnerability in that the target must...

7.8CVSS8.3AI score0.00415EPSS
SaveExploits0References1
CVE
CVE
added 2024/04/03 4:18 p.m.74 views

CVE-2024-27341

Kofax Power PDF is affected by a heap-based buffer overflow in PDF file parsing that can lead to remote code execution. The flaw arises from improper validation of the length of user-supplied data before copying into a fixed-length heap buffer. Exploitation requires user interaction (visiting a m...

7.8CVSS8AI score0.00415EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/04/03 4:18 p.m.21 views

CVE-2024-27340 Kofax Power PDF PDF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

Kofax Power PDF PDF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kofax Power PDF. User interaction is required to exploit this vulnerability in that the target must...

7.8CVSS7.5AI score0.00415EPSS
SaveExploits0References1
CVE
CVE
added 2024/04/03 4:18 p.m.79 views

CVE-2024-27339

Kofax Power PDF is affected by CVE-2024-27339 due to an out-of-bounds write in PDF file parsing that can allow arbitrary code execution. The flaw stems from insufficient validation of user-supplied data, leading to a write past the end of an allocated buffer. Exploitation requires user interactio...

7.8CVSS8AI score0.00421EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2024/04/03 4:18 p.m.28 views

CVE-2024-27339 Kofax Power PDF PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Kofax Power PDF PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kofax Power PDF. User interaction is required to exploit this vulnerability in that the target must visit a...

7.8CVSS8.2AI score0.00421EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/04/03 4:18 p.m.12 views

CVE-2024-27339 Kofax Power PDF PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Kofax Power PDF PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kofax Power PDF. User interaction is required to exploit this vulnerability in that the target must visit a...

7.8CVSS8.1AI score0.00421EPSS
SaveExploits0References1
OSV
OSV
added 2024/04/03 12:00 a.m.14 views

CVE-2024-27705

Cross Site Scripting vulnerability in Leantime v3.0.6 allows attackers to execute arbitrary code via upload of crafted PDF file to the files/browse endpoint...

7.6CVSS7.3AI score
SaveExploits0References3
CVE
CVE
added 2024/04/03 12:00 a.m.72 views

CVE-2024-27705

CVE-2024-27705 describes a Cross Site Scripting vulnerability in Leantime v3.0.6. The issue arises when uploading a crafted PDF to the files/browse endpoint, allowing an attacker to execute arbitrary code. Public references in connected docs consistently cite Leantime v3.0.6 and the upload vector...

7.6CVSS7.3AI score0.00556EPSS
SaveExploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/04/03 12:00 a.m.15 views

CVE-2024-27705

Cross Site Scripting vulnerability in Leantime v3.0.6 allows attackers to execute arbitrary code via upload of crafted PDF file to the files/browse endpoint...

7.3AI score0.00556EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2024/04/03 12:00 a.m.27 views

CVE-2024-27705

Cross Site Scripting vulnerability in Leantime v3.0.6 allows attackers to execute arbitrary code via upload of crafted PDF file to the files/browse endpoint...

7.2AI score0.00556EPSS
SaveExploits1References1
NVD
NVD
added 2024/04/02 9:15 p.m.26 views

CVE-2024-30362

Foxit PDF Reader PDF File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a...

7.8CVSS8.1AI score0.008EPSS
SaveExploits0References2
CVE
CVE
added 2024/04/02 8:18 p.m.115 views

CVE-2024-30362

Foxit PDF Editor/Reader (Windows; Mac notes appear in related Nessus/OpenVAS listings) is affected by a Use-After-Free vulnerability in object handling within PDF processing (AcroForm, Doc objects). The flaw stems from not validating the existence of an object before performing operations on it, ...

7.8CVSS8.2AI score0.008EPSS
SaveExploits0References2Affected Software2
Cvelist
Cvelist
added 2024/04/02 8:18 p.m.40 views

CVE-2024-30362 Foxit PDF Reader PDF File Parsing Use-After-Free Remote Code Execution Vulnerability

Foxit PDF Reader PDF File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a...

7.8CVSS8.2AI score0.008EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/04/01 9:50 p.m.31 views

CVE-2024-27327 PDF-XChange Editor PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

PDF-XChange Editor PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must vis...

7.8CVSS8.2AI score0.00418EPSS
SaveExploits0References1
OSV
OSV
added 2024/03/26 10:15 p.m.8 views

CVE-2024-2971

Out-of-bounds array write in Xpdf 4.05 and earlier, triggered by negative object number in indirect reference in the input PDF file...

5.5CVSS5.8AI score0.00178EPSS
SaveExploits0References1
NVD
NVD
added 2024/03/26 10:15 p.m.11 views

CVE-2024-2971

Out-of-bounds array write in Xpdf 4.05 and earlier, triggered by negative object number in indirect reference in the input PDF file...

5.5CVSS3.9AI score0.00178EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2024/03/26 10:15 p.m.28 views

CVE-2024-2971

Out-of-bounds array write in Xpdf 4.05 and earlier, triggered by negative object number in indirect reference in the input PDF file...

5.5CVSS5.8AI score0.00178EPSS
SaveExploits0References2
CVE
CVE
added 2024/03/26 9:31 p.m.67 views

CVE-2024-2971

Xpdf vulnerability CVE-2024-2971 affects Xpdf 4.05 and earlier, caused by an out-of-bounds write in an array triggered by a negative object number in an indirect reference in the input PDF. Fedora advisories and security notes indicate update to 4.06 as the fix. If exploiting, the issue could imp...

5.5CVSS3.7AI score0.00178EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder