Lucene search
+L

28999 matches found

Positive Technologies
Positive Technologies
added 2024/10/11 12:00 a.m.14 views

PT-2024-39826 · Tungsten Automation · Tungsten Automation Power Pdf

Name of the Vulnerable Software and Affected Versions: Tungsten Automation Power PDF affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations of Tungsten Automation Power PDF. User interaction is required to exploi...

3.3CVSS6.6AI score0.00252EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2024/10/11 12:00 a.m.10 views

PT-2024-39824 · Tungsten Automation · Tungsten Automation Power Pdf

Name of the Vulnerable Software and Affected Versions: Tungsten Automation Power PDF affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations. User interaction is required, where the target must visit a malicious...

3.3CVSS6.9AI score0.00252EPSS
SaveExploits0References4
Zero Day Initiative
Zero Day Initiative
added 2024/10/11 12:00 a.m.13 views

Tungsten Automation Power PDF PDF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tungsten Automation Power PDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.9AI score0.00274EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/10/11 12:00 a.m.13 views

Tungsten Automation Power PDF PNG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tungsten Automation Power PDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.9AI score0.00282EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/10/11 12:00 a.m.19 views

Tungsten Automation Power PDF PDF File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tungsten Automation Power PDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS7AI score0.00269EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/10/11 12:00 a.m.15 views

Tungsten Automation Power PDF JP2 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tungsten Automation Power PDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.9AI score0.0027EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/10/11 12:00 a.m.9 views

Tungsten Automation Power PDF AcroForm Annotation Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Tungsten Automation Power PDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

3.3CVSS6AI score0.00537EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/10/11 12:00 a.m.11 views

Tungsten Automation Power PDF PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Tungsten Automation Power PDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

3.3CVSS6.1AI score0.00252EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/10/11 12:00 a.m.10 views

Tungsten Automation Power PDF OXPS File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Tungsten Automation Power PDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

3.3CVSS6AI score0.00252EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/10/11 12:00 a.m.22 views

Tungsten Automation Power PDF PNG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Tungsten Automation Power PDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

3.3CVSS6AI score0.00252EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/10/11 12:00 a.m.14 views

PT-2024-39804 · Tungsten Automation · Tungsten Automation Power Pdf

Name of the Vulnerable Software and Affected Versions: Tungsten Automation Power PDF affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or...

7.8CVSS7.4AI score0.00269EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2024/10/11 12:00 a.m.7 views

PT-2024-39799 · Tungsten Automation · Tungsten Automation Power Pdf

Name of the Vulnerable Software and Affected Versions: Tungsten Automation Power PDF affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations. It requires user interaction, such as visiting a malicious page or opening a...

7.8CVSS7.6AI score0.00311EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2024/10/11 12:00 a.m.53 views

PT-2024-39805 · Tungsten Automation · Tungsten Automation Power Pdf

Name of the Vulnerable Software and Affected Versions: Tungsten Automation Power PDF affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or...

7.8CVSS7.3AI score0.00274EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2024/10/10 12:00 a.m.16 views

The vulnerability of the annotation processor for viewing electronic documents in PDF format, provided by Foxit PDF Reader (formerly Foxit Reader), allows a perpetrator to disclose protected information.

The vulnerability of the annotation processor for viewing electronic documents in PDF format, provided by Foxit PDF Reader formerly Foxit Reader, is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose protected...

3.3CVSS6.8AI score0.00486EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2024/10/10 12:00 a.m.12 views

The vulnerability of the AcroForms processor in the PDF viewer software from Foxit Reader (formerly Foxit Reader) allows a perpetrator to disclose protected information.

The vulnerability of the AcroForms processor in the PDF electronic document viewing software Foxit PDF Reader formerly Foxit Reader is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose protected information using a...

3.3CVSS6.8AI score0.00421EPSS
SaveExploits0References4Affected Software2
Talos Blog
Talos Blog
added 2024/10/09 4:00 p.m.34 views

Vulnerability in popular PDF reader could lead to arbitrary code execution; Multiple issues in GNOME project

Cisco Talos' Vulnerability Research team recently disclosed six new security vulnerabilities across a range of software, including one in a popular PDF reader that could lead to arbitrary code execution. Foxit PDF Reader, one of the most popular alternatives to Adobe Acrobat, contains a memory...

8.8CVSS8.5AI score0.52476EPSS
SaveExploits4
NVD
NVD
added 2024/10/09 3:15 p.m.26 views

CVE-2024-9671

A vulnerability was found in 3Scale. There is no auth mechanism to see a PDF invoice of a Developer user if the URL is known. Anyone can see the invoice if the URL is known or guessed...

5.3CVSS0.00283EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/10/09 2:32 p.m.13 views

CVE-2024-9671 System: pdf invoices of the developer users can be seen if the url is known

A vulnerability was found in 3Scale. There is no auth mechanism to see a PDF invoice of a Developer user if the URL is known. Anyone can see the invoice if the URL is known or guessed...

5.3CVSS6.8AI score0.00283EPSS
SaveExploits0References2
CVE
CVE
added 2024/10/09 2:32 p.m.66 views

CVE-2024-9671

The CVE-2024-9671 issue affects Red Hat 3scale and is due to an absence of authentication for PDF invoices: if the URL is known or guessable, any Developer’s invoice can be accessed without auth. Documents consistently describe the vulnerability as an information exposure via predictable URLs, wi...

5.3CVSS5.3AI score0.00283EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2024/10/09 2:32 p.m.28 views

CVE-2024-9671 System: pdf invoices of the developer users can be seen if the url is known

A vulnerability was found in 3Scale. There is no auth mechanism to see a PDF invoice of a Developer user if the URL is known. Anyone can see the invoice if the URL is known or guessed...

5.3CVSS0.00283EPSS
SaveExploits0References2
Rows per page
Query Builder