PT-2024-20745 · Unknown · Tnc Pdf Viewer

Name of the Vulnerable Software and Affected Versions: TNC PDF viewer versions 2.8.0 and earlier Description: The issue is related to improper neutralization of input during web page generation, which leads to a Cross-site Scripting XSS vulnerability, specifically Stored XSS. This allows maliciou...

WordPress Plugin TNC PDF viewer Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports PHP and MySQL server set up a personal blog site. WordPress plugin is an application plug-in. A cross-site scripting vulnerability...

Foxit PDF Reader for Mac < 2024.1 Multiple Vulnerabilities

According to its version, the Foxit PDF Reader for Mac application previously named Foxit Reader for Mac installed on the remote macOS host is prior to 2024.1. It is, therefore affected by multiple vulnerabilities: Note that Nessus has not tested for this issue but has instead relied only on the...

Adobe Acrobat Reader Input Validation Error Vulnerability (CNVD-2024-12461)

Adobe Acrobat Reader is a PDF viewer from the American company Audobee Adobe. The software is used to print, sign and annotate PDF. An input validation error vulnerability exists in Adobe Acrobat Reader. An attacker could exploit this vulnerability to compromise an affected system...

Adobe Acrobat and Reader Out-of-Bounds Read Vulnerability (CNVD-2024-11665)

Adobe Acrobat Reader is the United States of America Audobee Adobe, a PDF viewer. Adobe Acrobat and Reader has an out-of-bounds read vulnerability that can be exploited by an attacker to obtain sensitive information caused by an out-of-bounds read...

Adobe Acrobat and Reader Out-of-Bounds Read Vulnerability (CNVD-2024-11664)

Adobe Acrobat Reader is the United States of America Audobee Adobe, a PDF viewer. Adobe Acrobat and Reader has an out-of-bounds read vulnerability that can be exploited by an attacker to obtain sensitive information caused by an out-of-bounds read...

The vulnerability of the XRef::fetch() function in PDF viewing software, Xpdf, allows a malicious actor to cause an unexpected termination of the application.

The vulnerability of the XRef::fetch function xpdf/XRef.cc in PDF viewing software like Xpdf is related to buffer overflow attacks. Exploiting this vulnerability could allow an attacker to cause the application to terminate abnormally...

WordPress TNC PDF viewer Plugin <= 2.8.0 is vulnerable to Cross Site Scripting (XSS)

Software TNC PDF viewer Type Plugin Vulnerable versions = 2.8.0 Fixed in 2.9.0 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-25097 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 29d45cd3f947 Credits Ngô Thiên An ancorn from VNPT-VCI...

CVE-2024-23505

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in DearHive PDF Viewer & 3D PDF Flipbook – DearPDF allows Stored XSS.This issue affects PDF Viewer & 3D PDF Flipbook – DearPDF: from n/a through 2.0.38...

CVE-2024-23505

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in DearHive PDF Viewer & 3D PDF Flipbook – DearPDF allows Stored XSS.This issue affects PDF Viewer & 3D PDF Flipbook – DearPDF: from n/a through 2.0.38...

Cross site scripting

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in DearHive PDF Viewer & 3D PDF Flipbook – DearPDF allows Stored XSS.This issue affects PDF Viewer & 3D PDF Flipbook – DearPDF: from n/a through 2.0.38...

CVE-2024-23505 WordPress PDF Viewer & 3D PDF Flipbook – DearPDF Plugin <= 2.0.38 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in DearHive PDF Viewer & 3D PDF Flipbook – DearPDF allows Stored XSS.This issue affects PDF Viewer & 3D PDF Flipbook – DearPDF: from n/a through 2.0.38...

CVE-2024-23505

CVE-2024-23505 affects WordPress plugin PDF Viewer & 3D PDF Flipbook – DearPDF (DearPDF Lite) up to version 2.0.38. The issue is a Stored XSS caused by Improper Neutralization of Input During Web Page Generation. Public exploit details are not provided in the documents; exploitation status is unk...

PT-2024-19907 · Unknown · Pdf Viewer & 3D Pdf Flipbook – Dearpdf

Name of the Vulnerable Software and Affected Versions: PDF Viewer & 3D PDF Flipbook – DearPDF versions n/a through 2.0.38 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS, which can be...

PDF Viewer & 3D PDF Flipbook – DearPDF <= 2.0.38 - Authenticated (Contributor+) Stored Cross-Site Scripting

Description The PDF Viewer & 3D PDF Flipbook – DearPDF plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.0.38 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level...

WordPress PDF Viewer & 3D PDF Flipbook – DearPDF Plugin <= 2.0.38 is vulnerable to Cross Site Scripting (XSS)

Software PDF Viewer & 3D PDF Flipbook – DearPDF Type Plugin Vulnerable versions = 2.0.38 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-23505 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID d503ba2d3347 Credits Ngô Thiên An...

WordPress TNC PDF viewer Plugin <= 2.8.0 is vulnerable to Cross Site Scripting (XSS)

Software TNC PDF viewer Type Plugin Vulnerable versions = 2.8.0 Fixed in 2.9.0 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE N/A Patch priority Low CVSS severity Low 6.4 Developer Claim ownership PSID c450f13b2e6b Credits WordFence Required privilege...

Code injection

Tyler Technologies Magistrate Court Case Management Plus allows an unauthenticated, remote attacker to upload, delete, and view files by manipulating the PDFViewer.aspx 'filename' parameter...

Tyler Technologies Magistrate Court Case Management Plus Authorization Issue Vulnerability

Tyler Technologies Magistrate Court Case Management Plus is a district court case management system from Tyler Technologies. A security vulnerability exists in Tyler Technologies Magistrate Court Case Management Plus. A remote attacker could use this vulnerability to upload, delete, and view file...

The vulnerability of the Font Parser component in PDF viewing and editing programs from Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 lies in its ability to read data beyond the buffer in memory. This allows attackers to execute arbitrary code.

The vulnerability of the Font Parser component in PDF viewing and editing programs from Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 relates to reading data beyond the buffer in memory. Exploiting this vulnerability could all...