Lucene search
+L

1222 matches found

Zero Day Initiative
Zero Day Initiative
added 2021/05/07 12:00 a.m.40 views

Foxit Reader U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling ...

3.3CVSS2AI score0.02018EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/05/07 12:00 a.m.38 views

Foxit Reader U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling ...

3.3CVSS2AI score0.02682EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/05/07 12:00 a.m.45 views

Foxit Reader U3D File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of U3D...

7.8CVSS3.9AI score0.02819EPSS
SaveExploits0References1
OSV
OSV
added 2021/04/26 5:15 p.m.5 views

UBUNTU-CVE-2021-21217

Uninitialized data in PDFium in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted PDF file...

5.5CVSS6.4AI score0.01637EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2021/04/19 12:00 a.m.22 views

SUSE: Security Advisory (SUSE-SU-2015:0188-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5CVSS6.5AI score0.04878EPSS
SaveExploits1References2
Zero Day Initiative
Zero Day Initiative
added 2021/04/15 12:00 a.m.22 views

Adobe Bridge PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Bridge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of PDF...

7.8CVSS4.4AI score0.03868EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2021/04/10 12:00 a.m.14 views

Fedora: Security Advisory for python-pikepdf (FEDORA-2021-d97bc581be)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS7.6AI score0.01713EPSS
SaveExploits0References2
Fedora
Fedora
added 2021/04/09 3:17 p.m.65 views

[SECURITY] Fedora 33 Update: python-pikepdf-1.19.4-2.fc33

pikepdf is a Python library for reading and writing PDF files. pikepdf is based on QPDF, a powerful PDF manipulation and repair library...

7.5CVSS2.2AI score0.01713EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2021/04/06 5:47 p.m.48 views

CVE-2021-29421

There's a flaw in the pikepdf Python library's XMP metadata parsing functionality. An attacker who is able to submit a crafted PDF file to be processed by pikepdf could trigger an XML External Entity XXE injection. The highest threat of this flaw is to confidentiality of data...

7.5CVSS3.9AI score0.01713EPSS
SaveExploits0References4
OpenVAS
OpenVAS
added 2021/04/05 12:00 a.m.8 views

Fedora: Security Advisory for python-pikepdf (FEDORA-2021-5e598049a1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
NVD
NVD
added 2021/03/30 3:15 p.m.31 views

CVE-2021-27269

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.1.0.37527. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS0.02491EPSS
SaveExploits0References2
NVD
NVD
added 2021/03/30 3:15 p.m.32 views

CVE-2021-27266

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PhantomPDF 10.1.0.37527. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

4.3CVSS0.02187EPSS
SaveExploits0References2
NVD
NVD
added 2021/03/30 3:15 p.m.33 views

CVE-2021-27267

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.1.0.37527. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS0.02491EPSS
SaveExploits0References2
NVD
NVD
added 2021/03/30 3:15 p.m.50 views

CVE-2021-27268

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.1.0.37527. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS0.02491EPSS
SaveExploits0References2
NVD
NVD
added 2021/03/30 3:15 p.m.39 views

CVE-2021-27261

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.1.0.37527. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS0.02691EPSS
SaveExploits0References2
NVD
NVD
added 2021/03/30 3:15 p.m.27 views

CVE-2021-27262

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PhantomPDF 10.1.0.37527. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

4.3CVSS0.02023EPSS
SaveExploits0References2
NVD
NVD
added 2021/03/30 3:15 p.m.27 views

CVE-2021-27264

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PhantomPDF 10.1.0.37527. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

4.3CVSS0.02187EPSS
SaveExploits0References2
NVD
NVD
added 2021/03/30 3:15 p.m.31 views

CVE-2021-27263

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PhantomPDF 10.1.0.37527. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

4.3CVSS0.02899EPSS
SaveExploits0References2
Prion
Prion
added 2021/03/30 3:15 p.m.22 views

Design/Logic Flaw

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.1.0.37527. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

6.8CVSS7.8AI score0.02691EPSS
SaveExploits0References2Affected Software2
Prion
Prion
added 2021/03/30 3:15 p.m.22 views

Design/Logic Flaw

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PhantomPDF 10.1.0.37527. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

4.3CVSS3.4AI score0.02899EPSS
SaveExploits0References2Affected Software2
Rows per page
Query Builder