Lucene search
+L

581 matches found

BDU FSTEC
BDU FSTEC
added 2021/07/27 12:0 a.m.7 views

The vulnerability of the PDF file viewing and editing programs from Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, and Adobe Acrobat 2017/Adobe Acrobat Reader 2017 lies in the recording of data beyond the buffer in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the PDF viewing and editing programs Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, and Adobe Acrobat Reader 2017 is related to writing beyond the buffer limit in memory. Exploiting this vulnerability could allow a malicious actor to...

10CVSS8.1AI score0.09456EPSS
Exploits0References4
CNNVD
CNNVD
added 2021/07/20 12:0 a.m.5 views

QPDF 缓冲区错误漏洞

QPDF is a software application. A C++ library and a set of programs that examine and manipulate the structure of PDF files. A security vulnerability exists in QPDF that stems from the presence of a heap-based buffer overflow in QPDF when some downstream write operation fails...

5.5CVSS5.2AI score0.01272EPSS
Exploits0References14
CNVD
CNVD
added 2021/07/19 12:0 a.m.25 views

Autodesk Design Review Type Obfuscation Vulnerability

Autodesk Design Review ADR is a suite of AutoCAD drafting software support software from Autodesk, Inc. The software supports viewing, marking, measuring, printing, and tracking changes to 2D and 3D design files.Autodesk Design Review is vulnerable to a type obfuscation vulnerability that could b...

7.8CVSS3.3AI score0.01767EPSS
Exploits0References1
OSV
OSV
added 2021/06/12 10:15 a.m.7 views

CVE-2021-31812

In Apache PDFBox, a carefully crafted PDF file can trigger an infinite loop while loading the file. This issue affects Apache PDFBox version 2.0.23 and prior 2.0.x versions...

5.5CVSS5.3AI score
Exploits0References16
OSV
OSV
added 2021/06/12 10:15 a.m.5 views

UBUNTU-CVE-2021-31812

In Apache PDFBox, a carefully crafted PDF file can trigger an infinite loop while loading the file. This issue affects Apache PDFBox version 2.0.23 and prior 2.0.x versions...

5.5CVSS6.9AI score0.03054EPSS
Exploits0References14
Zero Day Initiative
Zero Day Initiative
added 2021/06/02 12:0 a.m.27 views

OpenText Brava! Desktop pdf2dl Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS5.9AI score0.01419EPSS
Exploits0
BDU FSTEC
BDU FSTEC
added 2021/06/02 12:0 a.m.6 views

The vulnerability of PDF viewing and editing programs like Adobe Acrobat Document Cloud and Acrobat Reader Document Cloud lies in the possibility of out-of-buffer operations, allowing attackers to gain unauthorized access to protected information.

The vulnerability of PDF viewing and editing programs like Adobe Acrobat Document Cloud and Acrobat Reader Document Cloud lies in the execution of operations beyond the buffer limits in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected informatio...

7.5CVSS7.8AI score0.33578EPSS
Exploits0References6
BDU FSTEC
BDU FSTEC
added 2021/05/19 12:0 a.m.10 views

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to memory usage after it is freed. This allows attackers to execute arbitrary code.

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to the use of memory after it is freed. Exploiting these vulnerabilities can allow a malicious actor to execute...

10CVSS8.3AI score0.04853EPSS
Exploits0References3
CNNVD
CNNVD
added 2021/05/11 12:0 a.m.9 views

Adobe Acrobat 安全漏洞

Adobe Acrobat is a PDF editing software developed by Adobe.Adobe Reader also known as Acrobat Reader is a PDF file reader developed by Adobe. Adobe Acrobat/Reader has a heap buffer overflow vulnerability. An attacker can exploit this vulnerability to execute arbitrary code...

8.8CVSS6.4AI score0.66918EPSS
Exploits0References4
OSV
OSV
added 2021/05/07 9:15 p.m.5 views

CVE-2021-31462

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Reader 10.1.3.37598. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

3.3CVSS4.9AI score0.02018EPSS
Exploits0References2
OSV
OSV
added 2021/05/07 9:15 p.m.3 views

CVE-2021-31472

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS7.5AI score0.02819EPSS
Exploits0References2
OSV
OSV
added 2021/05/07 9:15 p.m.4 views

CVE-2021-31448

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

3.3CVSS4.9AI score0.02023EPSS
Exploits0References2
CVE
CVE
added 2021/05/07 8:16 p.m.51 views

CVE-2021-31465

CVE-2021-31465 affects Foxit Reader 10.1.3.37598. The vulnerability is in the handling of U3D objects within PDF files and stems from insufficient validation of user-supplied data, leading to a write past the end of an allocated data structure. This can allow a remote attacker to execute code in ...

7.8CVSS7.8AI score0.02812EPSS
Exploits0References2Affected Software1
vulnersOsv
vulnersOsv
added 2021/04/13 3:25 p.m.4 views

jsreport (>=2.0.0 <=2.1.0), jsreport-keycloak-auth (>=0.0.1 <=0.0.2) potentially affected by CVE-2020-7762 via jsreport-chrome-pdf (>=1.0.0 <=1.0.2)

jsreport-chrome-pdf NPM version =1.0.0, =2.0.0, =0.0.1, =0.0.2 Source cves: CVE-2020-7762 Source advisory: OSV:GHSA-934W-HVJ4-7FR6...

6.5CVSS6.5AI score0.01601EPSS
Exploits1
OSV
OSV
added 2021/03/30 3:15 p.m.3 views

CVE-2021-27269

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.1.0.37527. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS7.5AI score0.02491EPSS
Exploits0References2
OSV
OSV
added 2021/03/30 3:15 p.m.5 views

CVE-2021-27266

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PhantomPDF 10.1.0.37527. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

3.3CVSS4.9AI score0.02187EPSS
Exploits0References2
OSV
OSV
added 2021/03/30 3:15 p.m.3 views

CVE-2021-27268

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.1.0.37527. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS7.5AI score0.02491EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2021/03/30 3:15 p.m.4 views

CVE-2021-27262

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PhantomPDF 10.1.0.37527. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

4.3CVSS3.6AI score0.02023EPSS
Exploits0References3Affected Software1
CVE
CVE
added 2021/03/30 2:35 p.m.58 views

CVE-2021-27267

CVE-2021-27267 — Foxit PhantomPDF 10.1.0.37527 is affected by a vulnerability in the handling of U3D objects in PDF files. The flaw arises from not validating the existence of a target object before performing operations on it, which can allow an attacker to execute arbitrary code in the context ...

7.8CVSS7.8AI score0.02491EPSS
Exploits0References2Affected Software2
CNNVD
CNNVD
added 2021/03/22 12:0 a.m.6 views

Foxit PhantomPDF 缓冲区错误漏洞

Foxit PhantomPDF is China's Foxit Foxit company a PDF document reader. Foxit PhantomPDF suffers from an out-of-bounds read vulnerability when processing U3D objects in PDF files. The vulnerability is caused due to a lack of proper validation of user-supplied data, which could result in reading...

4.3CVSS5.9AI score0.02023EPSS
Exploits0References4
Rows per page
Query Builder