Lucene search
+L

389 matches found

OSV
OSV
added 2020/08/25 9:15 p.m.20 views

CVE-2020-17403

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.922. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS7.5AI score0.05277EPSS
SaveExploits0References2
OSV
OSV
added 2020/08/25 9:15 p.m.7 views

CVE-2020-17404

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.922. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS7.5AI score0.05277EPSS
SaveExploits0References2
CVE
CVE
added 2020/08/25 8:25 p.m.81 views

CVE-2020-17404

Foxit Studio Photo 3.6.6.922 is affected by a PSD-file handling flaw that enables an out-of-bounds write, leading to remote code execution in the context of the process. Root cause: insufficient validation of data during PSD processing, which can write past the end of an allocated structure. Expl...

7.8CVSS7.8AI score0.05277EPSS
SaveExploits0References2Affected Software1
Zero Day Initiative
Zero Day Initiative
added 2020/04/02 12:0 a.m.14 views

(0Day) Corel PaintShop Pro PSD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Corel PaintShop Pro. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing...

7.8CVSS4.3AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2020/04/02 12:0 a.m.18 views

(0Day) Corel PaintShop Pro PSD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Corel PaintShop Pro. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing...

7.8CVSS4.3AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2020/04/02 12:0 a.m.32 views

(0Day) Corel PaintShop Pro PSD File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Corel PaintShop Pro. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS1.6AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2020/04/02 12:0 a.m.16 views

(0Day) Corel PaintShop Pro PSD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Corel PaintShop Pro. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing...

7.8CVSS4.3AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2020/04/02 12:0 a.m.17 views

(0Day) Corel PaintShop Pro PSD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Corel PaintShop Pro. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing...

7.8CVSS4.3AI score
SaveExploits0
OpenVAS
OpenVAS
added 2020/03/29 12:0 a.m.45 views

Debian: Security Advisory (DLA-2161-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS5.9AI score0.03EPSS
SaveExploits0References3
Debian
Debian
added 2020/03/28 9:12 p.m.171 views

[SECURITY] [DLA 2161-1] tika security update

Package : tika Version : 1.5-1+deb8u1 CVE ID : CVE-2020-1950 CVE-2020-1951 Debian Bug : 954302 954303 Two security issues have been detected in tika and fixed. CVE-2020-1950: carefully crafted or corrupt PSD file can cause excessive memory usage in Apache. CVE-2020-1951: Infinite Loop DoS...

5.5CVSS6.2AI score0.03EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2020/03/25 12:0 a.m.9 views

The vulnerability of the Foxit Studio Photo graphic editor lies in the ability to write beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Foxit Studio Photo graphic editor is related to writing code beyond the buffer boundaries in memory. Exploiting this vulnerability allows a perpetrator to execute arbitrary code on the target system by having the user open a specially crafted malicious page or PSD file...

7.8CVSS7.9AI score0.11057EPSS
SaveExploits0References3Affected Software1
OpenVAS
OpenVAS
added 2020/03/24 12:0 a.m.34 views

Apache Tika 1.x <= 1.23 Multiple Vulnerabilities

Apache Tika is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apache:tika"; ifdescription...

5.5CVSS6.7AI score0.03EPSS
SaveExploits0References2
OSV
OSV
added 2020/03/23 2:15 p.m.27 views

CVE-2020-1950

A carefully crafted or corrupt PSD file can cause excessive memory usage in Apache Tika's PSDParser in versions 1.0-1.23...

5.5CVSS6.6AI score
SaveExploits0References5
NVD
NVD
added 2020/03/23 2:15 p.m.23 views

CVE-2020-1951

A carefully crafted or corrupt PSD file can cause an infinite loop in Apache Tika's PSDParser in versions 1.0-1.23...

5.5CVSS5.4AI score0.02905EPSS
SaveExploits0References5
OSV
OSV
added 2020/03/23 2:15 p.m.1 views

DEBIAN-CVE-2020-1951

A carefully crafted or corrupt PSD file can cause an infinite loop in Apache Tika's PSDParser in versions 1.0-1.23...

5.5CVSS6.7AI score0.02905EPSS
SaveExploits0References1
Prion
Prion
added 2020/03/23 2:15 p.m.23 views

Code injection

A carefully crafted or corrupt PSD file can cause an infinite loop in Apache Tika's PSDParser in versions 1.0-1.23...

4.3CVSS5.6AI score0.02905EPSS
SaveExploits0References5Affected Software6
OSV
OSV
added 2020/03/23 2:15 p.m.3 views

UBUNTU-CVE-2020-1951

A carefully crafted or corrupt PSD file can cause an infinite loop in Apache Tika's PSDParser in versions 1.0-1.23...

5.5CVSS6.8AI score0.02905EPSS
SaveExploits0References7
Prion
Prion
added 2020/03/23 2:15 p.m.20 views

Code injection

A carefully crafted or corrupt PSD file can cause excessive memory usage in Apache Tika's PSDParser in versions 1.0-1.23...

4.3CVSS5.5AI score0.03EPSS
SaveExploits0References5Affected Software6
Cvelist
Cvelist
added 2020/03/23 1:26 p.m.34 views

CVE-2020-1951

A carefully crafted or corrupt PSD file can cause an infinite loop in Apache Tika's PSDParser in versions 1.0-1.23...

5.6AI score0.02905EPSS
SaveExploits0References5
Debian CVE
Debian CVE
added 2020/03/23 1:26 p.m.53 views

CVE-2020-1951

A carefully crafted or corrupt PSD file can cause an infinite loop in Apache Tika's PSDParser in versions 1.0-1.23...

5.5CVSS6.9AI score0.02905EPSS
SaveExploits0
Rows per page
Query Builder