Lucene search
+L

54 matches found

BDU FSTEC
BDU FSTEC
added 2019/12/03 12:0 a.m.9 views

The vulnerability of the PDFium PDF-content processor in Google Chrome browser allows a hacker to execute arbitrary code.

The vulnerability of the PDFium PDF-content processor in Google Chrome browsers arises from reading beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created PDF file...

10CVSS8.4AI score0.01517EPSS
SaveExploits0References8Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/08/13 12:0 a.m.16 views

The vulnerability of the PDFium browser’s PDF-content processor in Google Chrome, which allows a hacker to trigger a service failure.

The vulnerability of the PDFium browser’s PDF-content processing component in Google Chrome browser is caused by a numerical overflow condition. Exploiting this vulnerability could allow an attacker to cause a service failure through a specially crafted web page...

6.8CVSS7.8AI score0.00909EPSS
SaveExploits0References7Affected Software4
BDU FSTEC
BDU FSTEC
added 2019/03/06 12:0 a.m.10 views

The vulnerability of the PDFium browser’s PDF-content processor in Google Chrome allows a hacker to execute arbitrary code.

The vulnerability of the PDFium PDF-content processor in the Google Chrome browser involves an operation that goes beyond the buffer memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created PDF file...

8.8CVSS8.4AI score0.02697EPSS
SaveExploits0References5Affected Software2
CNVD
CNVD
added 2018/07/24 12:0 a.m.8 views

Foxit Reader Type Obfuscation Vulnerability

Foxit Reader is China's Foxit Foxit Software Corporation, a PDF document reader. A type confusion vulnerability exists in the handling of PDF files in Foxit Reader, which stems from the program failing to properly validate user-submitted data. This vulnerability can be exploited by a remote...

8.8CVSS8.8AI score0.02773EPSS
SaveExploits0References1
OSV
OSV
added 2018/07/01 6:29 p.m.25 views

CVE-2018-13038

OpenSID 18.06-pasca has an Unrestricted File Upload vulnerability via an Attachment Document in the article feature. This vulnerability leads to uploading arbitrary PHP code via a .php filename with the application/pdf Content-Type...

9.8CVSS7.4AI score
SaveExploits0References1
Cvelist
Cvelist
added 2018/07/01 6:0 p.m.26 views

CVE-2018-13038

OpenSID 18.06-pasca has an Unrestricted File Upload vulnerability via an Attachment Document in the article feature. This vulnerability leads to uploading arbitrary PHP code via a .php filename with the application/pdf Content-Type...

9.5AI score0.0177EPSS
SaveExploits1References1
CNVD
CNVD
added 2018/05/18 12:0 a.m.7 views

Foxit Reader Arbitrary Code Execution Vulnerability

Foxit Reader is China's Foxit Foxit Software Corporation, a PDF document reader. A type confusion vulnerability exists in the parsing of PDF documents in Foxit Reader version 9.0.0.29935, which occurs when the program fails to properly validate user-submitted data. The vulnerability can be...

8.8CVSS7.7AI score0.02737EPSS
SaveExploits0References1
Microsoft KB
Microsoft KB
added 2016/09/13 7:0 a.m.58 views

MS16-115: Description of the security update for Microsoft Windows PDF Library: September 13, 2016

None None...

6.5CVSS6.7AI score0.25847EPSS
SaveExploits1
OSV
OSV
added 2015/07/03 1:59 a.m.6 views

UBUNTU-CVE-2015-3660

Cross-site scripting XSS vulnerability in the PDF functionality in WebKit in Apple Safari before 6.2.7, 7.x before 7.1.7, and 8.x before 8.0.7 allows remote attackers to inject arbitrary web script or HTML via a crafted URL in embedded PDF content...

4.3CVSS7.4AI score0.01752EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2015/07/03 1:59 a.m.25 views

CVE-2015-3660

Cross-site scripting XSS vulnerability in the PDF functionality in WebKit in Apple Safari before 6.2.7, 7.x before 7.1.7, and 8.x before 8.0.7 allows remote attackers to inject arbitrary web script or HTML via a crafted URL in embedded PDF content...

4.3CVSS7.3AI score0.01752EPSS
SaveExploits0References3
Binamuse
Binamuse
added 2014/09/18 6:31 p.m.688 views

CoreGraphics Information Disclosure - CVE-2014-4378

This article explores the exploitability of MobileSafari on IOS 7.1.x. Using a crafted PDF file as an HTML image makes it possible to leak information about the memory layout to the browser Javascript interpreter. Apple CoreGraphics library fails to validate input when parsing the colorspace...

5.8CVSS7.9AI score0.04983EPSS
SaveExploits0
NVD
NVD
added 2008/01/04 11:46 a.m.19 views

CVE-2007-6650

Unrestricted file upload vulnerability in fisheye/upload.php in Bitweaver R2 CMS allows remote attackers to upload arbitrary files by using the image/gif content type, and possibly other image and PDF content types, as demonstrated by uploading a .htaccess file...

7.5CVSS6.9AI score0.02887EPSS
SaveExploits2References6
Cvelist
Cvelist
added 2008/01/04 11:0 a.m.29 views

CVE-2007-6650

Unrestricted file upload vulnerability in fisheye/upload.php in Bitweaver R2 CMS allows remote attackers to upload arbitrary files by using the image/gif content type, and possibly other image and PDF content types, as demonstrated by uploading a .htaccess file...

6.9AI score0.02887EPSS
SaveExploits2References6
OSV
OSV
added 2006/02/01 12:0 a.m.30 views

DSA-961-1 pdfkit.framework - buffer overflows

Bulletin has no description...

10CVSS6.3AI score0.0614EPSS
SaveExploits5
Rows per page
Query Builder