Lucene search
+L

2816 matches found

Positive Technologies
Positive Technologies
added 2022/08/15 12:0 a.m.5 views

PT-2022-4467 · Unknown · Pdf-Xchange Editor

Name of the Vulnerable Software and Affected Versions: PDF-XChange Editor affected versions not specified Description: The issue is related to a use-after-free error when parsing PNG files, which can be exploited by remote attackers to execute arbitrary code. This requires user interaction, such ...

10CVSS7.5AI score0.0077EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2022/08/15 12:0 a.m.11 views

PT-2022-4469 · Pdf Xchange · Pdf-Xchange Editor

Name of the Vulnerable Software and Affected Versions: PDF-XChange Editor affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a...

10CVSS7.8AI score0.0077EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2022/08/15 12:0 a.m.5 views

PT-2022-4471 · Pdf Xchange · Pdf-Xchange Editor

Name of the Vulnerable Software and Affected Versions: PDF-XChange Editor affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a...

10CVSS7.4AI score0.0077EPSS
Exploits0References7
Positive Technologies
Positive Technologies
added 2022/08/15 12:0 a.m.6 views

PT-2022-4475 · Unknown · Pdf-Xchange Editor

Name of the Vulnerable Software and Affected Versions: PDF-XChange Editor affected versions not specified Description: The issue is related to a buffer overflow in memory when parsing JPG files, allowing a remote attacker to execute arbitrary code by using a specially crafted malicious JPG file...

10CVSS8AI score0.0077EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2022/07/13 12:0 a.m.6 views

PT-2022-6624 · Pdf Xchange · Pdf-Xchange Editor

Name of the Vulnerable Software and Affected Versions: PDF-XChange Editor affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a...

7.8CVSS7.4AI score0.00571EPSS
Exploits0References7
Positive Technologies
Positive Technologies
added 2022/07/13 12:0 a.m.5 views

PT-2022-6625 · Pdf Xchange · Pdf-Xchange Editor

Name of the Vulnerable Software and Affected Versions: PDF-XChange Editor affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a...

7.8CVSS7.4AI score0.00579EPSS
Exploits0References7
Positive Technologies
Positive Technologies
added 2022/07/13 12:0 a.m.7 views

PT-2022-6615 · Pdf Xchange · Pdf-Xchange Editor

Name of the Vulnerable Software and Affected Versions: PDF-XChange Editor affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a...

7.8CVSS7.4AI score0.00571EPSS
Exploits0References8
NVD
NVD
added 2021/01/07 6:15 p.m.31 views

CVE-2018-18689

The Portable Document Format PDF specification does not provide any information regarding the concrete procedure of how to validate signatures. Consequently, a Signature Wrapping vulnerability exists in multiple products. An attacker can use /ByteRange and xref manipulations that are not detected...

5.3CVSS6.6AI score0.03688EPSS
Exploits0References4
Prion
Prion
added 2021/01/07 6:15 p.m.20 views

Design/Logic Flaw

The Portable Document Format PDF specification does not provide any information regarding the concrete procedure of how to validate signatures. Consequently, a Signature Wrapping vulnerability exists in multiple products. An attacker can use /ByteRange and xref manipulations that are not detected...

5CVSS5.7AI score0.03688EPSS
Exploits0References4Affected Software17
CVE
CVE
added 2021/01/07 5:59 p.m.75 views

CVE-2018-18689

CVE-2018-18689 describes a Signature Wrapping issue in PDF signature validation caused by missing guidance in the PDF spec, allowing attackers to manipulate /ByteRange and xref without detection. The vulnerability affects Foxit Reader before 9.4 and PhantomPDF before 8.3.9 and 9.x before 9.4, as ...

5.3CVSS5.7AI score0.03688EPSS
Exploits0References4Affected Software17
Cvelist
Cvelist
added 2021/01/07 5:59 p.m.32 views

CVE-2018-18689

The Portable Document Format PDF specification does not provide any information regarding the concrete procedure of how to validate signatures. Consequently, a Signature Wrapping vulnerability exists in multiple products. An attacker can use /ByteRange and xref manipulations that are not detected...

5.9AI score0.03688EPSS
Exploits0References4
NVD
NVD
added 2019/10/11 12:15 a.m.22 views

CVE-2019-17497

Tracker PDF-XChange Editor before 8.0.330.0 has an NTLM SSO hash theft vulnerability using crafted FDF or XFDF files a related issue to CVE-2018-4993. For example, an NTLM hash is sent for a link to \192.168.0.2\C$\file.pdf without user interaction...

6.5CVSS7AI score0.06474EPSS
Exploits0References1
Prion
Prion
added 2019/10/11 12:15 a.m.28 views

Design/Logic Flaw

Tracker PDF-XChange Editor before 8.0.330.0 has an NTLM SSO hash theft vulnerability using crafted FDF or XFDF files a related issue to CVE-2018-4993. For example, an NTLM hash is sent for a link to \192.168.0.2\C$\file.pdf without user interaction...

4.3CVSS6.9AI score0.86898EPSS
Exploits2References1Affected Software1
CVE
CVE
added 2019/10/10 11:52 p.m.168 views

CVE-2019-17497

Technical details about CVE-2019-17497 are not present in the provided connected documents; public information about affected product/version/impact is not available here. Monitor for updates.

6.5CVSS7.7AI score0.06474EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2019/10/10 11:52 p.m.30 views

CVE-2019-17497

Tracker PDF-XChange Editor before 8.0.330.0 has an NTLM SSO hash theft vulnerability using crafted FDF or XFDF files a related issue to CVE-2018-4993. For example, an NTLM hash is sent for a link to \192.168.0.2\C$\file.pdf without user interaction...

7.9AI score0.06474EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2019/10/10 12:0 a.m.7 views

PT-2019-15171 · Pdf Xchange · Pdf-Xchange Editor

Name of the Vulnerable Software and Affected Versions: PDF-XChange Editor versions prior to 8.0.330.0 Description: The issue allows for NTLM SSO hash theft using crafted FDF or XFDF files. This can occur when a link to a file, such as '192.168.0.2C$file.pdf', is accessed without user interaction,...

6.5CVSS7.2AI score0.06474EPSS
Exploits0References2
Prion
Prion
added 2018/09/01 2:29 p.m.26 views

Sql injection

PDF-XChange Editor through 7.0.326.1 allows remote attackers to cause a denial of service resource consumption via a crafted x:xmpmeta structure, a related issue to CVE-2003-1564...

5CVSS6.6AI score0.01619EPSS
Exploits1References1Affected Software1
OSV
OSV
added 2018/09/01 2:29 p.m.5 views

CVE-2018-16303

PDF-XChange Editor through 7.0.326.1 allows remote attackers to cause a denial of service resource consumption via a crafted x:xmpmeta structure, a related issue to CVE-2003-1564...

7.5CVSS7.3AI score
Exploits0References1
NVD
NVD
added 2018/09/01 2:29 p.m.21 views

CVE-2018-16303

PDF-XChange Editor through 7.0.326.1 allows remote attackers to cause a denial of service resource consumption via a crafted x:xmpmeta structure, a related issue to CVE-2003-1564...

7.5CVSS7AI score0.01616EPSS
Exploits1References1
Cvelist
Cvelist
added 2018/09/01 2:0 p.m.30 views

CVE-2018-16303

PDF-XChange Editor through 7.0.326.1 allows remote attackers to cause a denial of service resource consumption via a crafted x:xmpmeta structure, a related issue to CVE-2003-1564...

7AI score0.01616EPSS
Exploits1References1
Rows per page
Query Builder