Lucene search
+L

188 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/03/19 12:00 a.m.•7 views

CVE-2019-6729: Out-of-bounds Read

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of P...

8.8CVSS6.6AI score0.03719EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/03/19 12:00 a.m.•8 views

CVE-2019-6735: Out-of-bounds Read

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

6.5CVSS5.8AI score0.0429EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/03/19 12:00 a.m.•6 views

CVE-2019-6728: Out-of-bounds Read

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

6.5CVSS5.8AI score0.04647EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2019/03/13 12:00 a.m.•14 views

PT-2019-18183 · F5 · Big-Ip

Name of the Vulnerable Software and Affected Versions: BIG-IP versions 11.5.1 through 11.5.8 BIG-IP versions 11.6.1 through 11.6.3.2 BIG-IP versions 12.1.0 through 12.1.3.7 BIG-IP version 13.0.0 Description: The Application Acceleration Manager AAM wamd process in BIG-IP fails to drop group...

5.5CVSS5.4AI score0.00322EPSS
SaveExploits0References4
Zero Day Initiative
Zero Day Initiative
•added 2019/01/25 12:00 a.m.•32 views

Foxit Reader PDF Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS1.9AI score0.0429EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2019/01/25 12:00 a.m.•16 views

PT-2019-18288 · Foxit · Foxit Reader

Name of the Vulnerable Software and Affected Versions: Foxit Reader affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on vulnerable installations. User interaction is required, where the target must visit a malicious page or open a...

6.5CVSS6.2AI score0.04647EPSS
SaveExploits0References3
OSV
OSV
•added 2019/01/24 4:29 a.m.•11 views

CVE-2018-17699

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.2.0.9297. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

6.5CVSS5AI score0.04088EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/01/24 12:00 a.m.•4 views

CVE-2018-17699: Out-of-bounds Read

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.2.0.9297. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

6.5CVSS5.8AI score0.04088EPSS
SaveExploits0References3
NVD
NVD
•added 2018/08/30 12:29 p.m.•39 views

CVE-2018-14317

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.1.0.5096. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

8.8CVSS8.8AI score0.02773EPSS
SaveExploits0References2
OSV
OSV
•added 2018/08/30 12:29 p.m.•14 views

CVE-2018-14317

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.1.0.5096. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

8.8CVSS6.2AI score0.02773EPSS
SaveExploits0References2
Prion
Prion
•added 2018/08/30 12:29 p.m.•26 views

Type confusion

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.1.0.5096. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

6.8CVSS8.8AI score0.02773EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/08/30 12:00 a.m.•3 views

CVE-2018-14317: Access of Resource Using Incompatible Type

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.1.0.5096. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

8.8CVSS8.3AI score0.02773EPSS
SaveExploits0References3
Veracode
Veracode
•added 2018/07/27 7:38 a.m.•20 views

Integer Overflow

libpoppler.so is vulnerable to integer overflows. A malicious user can pass a PDF file with an embedded JPEG 2000 encoded image in it to cause an integer overflow that can crash the application or cause arbitrary code to be executed...

8.8CVSS8.8AI score0.04415EPSS
SaveExploits2References4Affected Software1
OSV
OSV
•added 2018/02/13 7:29 p.m.•65 views

DEBIAN-CVE-2017-18185

An issue was discovered in QPDF before 7.0.0. There is a large heap-based out-of-bounds read in the PlBuffer::write function in PlBuffer.cc. It is caused by an integer overflow in the PNG filter...

5.5CVSS5.8AI score0.0106EPSS
SaveExploits0References1
CNVD
CNVD
•added 2017/11/15 12:00 a.m.•14 views

Adobe Acrobat/Reader Out-of-Bounds Read Vulnerability (CNVD-2017-36601)

Adobe Acrobat and Reader is the United States of America Odooby publicly issued PDF file processing program. Adobe Acrobat and Reader processing PDF files exist out-of-bounds read vulnerability, allowing remote attackers can exploit the vulnerability to submit a special file, inducing the user to...

9.3CVSS7.3AI score0.0672EPSS
SaveExploits0References1
Debian CVE
Debian CVE
•added 2017/10/17 10:00 p.m.•53 views

CVE-2017-15565

In Poppler 0.59.0, a NULL Pointer Dereference exists in the GfxImageColorMap::getGrayLine function in GfxState.cc via a crafted PDF document...

8.8CVSS8AI score0.02059EPSS
SaveExploits1
Prion
Prion
•added 2017/10/16 1:29 a.m.•25 views

Design/Logic Flaw

The buildfilterchain function in pdf/pdf-stream.c in Artifex MuPDF before 2017-09-25 mishandles a certain case where a variable may reside in a register, which allows remote attackers to cause a denial of service Fitz fzdropimp use-after-free and application crash or possibly have unspecified oth...

6.8CVSS8AI score0.01284EPSS
SaveExploits0References2Affected Software1
CNVD
CNVD
•added 2017/10/11 12:00 a.m.•9 views

Memory Corruption Vulnerability in Pleasant Book PDF Reader

Yue Book PDF Reader is an e-book reader developed by Shenzhen Ivy Software Technology Co. YueShu PDF Reader suffers from a memory corruption vulnerability when processing PDF files. An attacker can cause the program to crash by constructing some malformed PDF files...

7AI score
SaveExploits0
OSV
OSV
•added 2017/10/05 1:29 a.m.•7 views

DEBIAN-CVE-2017-15015

ImageMagick 7.0.7-0 Q16 has a NULL pointer dereference vulnerability in PDFDelegateMessage in coders/pdf.c...

8.8CVSS8.8AI score0.01368EPSS
SaveExploits0References1
OSV
OSV
•added 2017/07/25 11:29 p.m.•10 views

ALPINE-CVE-2017-11625

A stack-consumption vulnerability was found in libqpdf in QPDF 6.0.0, which allows attackers to cause a denial of service via a crafted file, related to the QPDF::resolveObjectsInStream function in QPDF.cc, aka an "infinite loop."...

5.5CVSS6.5AI score0.01214EPSS
SaveExploits1References1
Rows per page
Query Builder