Lucene search
+L

35297 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/12 12:00 a.m.•8 views

CVE-2025-25683: Improper Access Control

AlekSIS-Core is vulnerable to Incorrect Access Control. Unauthenticated users can access all PDF files. This affects AlekSIS-Core 3.0, 3.1, 3.1.1, 3.1.2, 3.1.3, 3.1.4, 3.1.5, 3.1.6, 3.2.0 and 3.2.1...

5.6CVSS5.8AI score0.0025EPSS
SaveExploits0References1
Mend
Mend
•added 2025/03/12 12:00 a.m.•26 views

CVE-2025-25683

AlekSIS-Core is vulnerable to Incorrect Access Control. Unauthenticated users can access all PDF files. This affects AlekSIS-Core 3.0, 3.1, 3.1.1, 3.1.2, 3.1.3, 3.1.4, 3.1.5, 3.1.6, 3.2.0 and 3.2.1...

6.3CVSS5.8AI score0.0025EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/03/12 12:00 a.m.•29 views

CVE-2025-25683

AlekSIS-Core is vulnerable to Incorrect Access Control. Unauthenticated users can access all PDF files. This affects AlekSIS-Core 3.0, 3.1, 3.1.1, 3.1.2, 3.1.3, 3.1.4, 3.1.5, 3.1.6, 3.2.0 and 3.2.1...

0.0025EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/03/12 12:00 a.m.•13 views

CVE-2025-25683

AlekSIS-Core is vulnerable to Incorrect Access Control. Unauthenticated users can access all PDF files. This affects AlekSIS-Core 3.0, 3.1, 3.1.1, 3.1.2, 3.1.3, 3.1.4, 3.1.5, 3.1.6, 3.2.0 and 3.2.1...

5.8AI score0.0025EPSS
SaveExploits0References2
CVE
CVE
•added 2025/03/12 12:00 a.m.•77 views

CVE-2025-25683

The aleksis-core package (the core of the AlekSIS framework) is vulnerable to Incorrect Access Control , allowing unauthenticated users to access sensitive PDF files. An attacker can trigger the generation of a PDF file, identify its ID via a GraphQL request , and then iterate through IDs to acce...

5.6CVSS5.8AI score0.0025EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
•added 2025/03/12 12:00 a.m.•21 views

PDF-XChange Editor RTF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS7.8AI score0.00278EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/03/12 12:00 a.m.•27 views

PT-2025-11130 · Pdf Xchange · Pdf-Xchange Editor +1

Name of the Vulnerable Software and Affected Versions: PDF-XChange Editor affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations. It requires user interaction, such as visiting a malicious page or opening a malicious fil...

7.8CVSS7.7AI score0.00278EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2025/03/12 12:00 a.m.•33 views

PT-2025-26889 · Unknown · Pdf-Xchange Editor

Name of the Vulnerable Software and Affected Versions: PDF-XChange Editor affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a...

7.8CVSS7.8AI score0.00286EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2025/03/12 12:00 a.m.•22 views

PT-2025-26890 · Unknown · Pdf-Xchange Editor

Name of the Vulnerable Software and Affected Versions: PDF-XChange Editor affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations. It requires user interaction, such as visiting a malicious page or opening a...

3.3CVSS6.3AI score0.00259EPSS
SaveExploits0References6
NVD
NVD
•added 2025/03/11 9:15 p.m.•37 views

CVE-2025-0900

PDF-XChange Editor PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target...

3.3CVSS0.00243EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2025/03/11 9:15 p.m.•22 views

CVE-2025-0900

PDF-XChange Editor PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target...

3.3CVSS5.2AI score0.00243EPSS
SaveExploits0References1
CVE
CVE
•added 2025/03/11 8:45 p.m.•75 views

CVE-2025-0900

PDF-XChange Editor is affected by CVE-2025-0900, a PDF file parsing out-of-bounds read information disclosure vulnerability. The flaw stems from inadequate validation of user-supplied data during PDF parsing, which can cause a read past the end of an allocated object. Exploitation requires user i...

3.3CVSS5.2AI score0.00243EPSS
SaveExploits0References1Affected Software3
Vulnrichment
Vulnrichment
•added 2025/03/11 8:45 p.m.•13 views

CVE-2025-0900 PDF-XChange Editor PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

PDF-XChange Editor PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target...

3.3CVSS5.2AI score0.00243EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/03/11 8:45 p.m.•60 views

CVE-2025-0900 PDF-XChange Editor PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

PDF-XChange Editor PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target...

3.3CVSS0.00243EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/11 12:00 a.m.•6 views

CVE-2025-0900: Out-of-bounds Read

PDF-XChange Editor PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target...

3.3CVSS5.2AI score0.00243EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/03/11 12:00 a.m.•30 views

PT-2025-26894 · Unknown · Pdf-Xchange Editor

Name of the Vulnerable Software and Affected Versions: PDF-XChange Editor affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations. It requires user interaction, such as visiting a malicious page or opening a...

3.3CVSS6.2AI score0.00244EPSS
SaveExploits0References7
CNNVD
CNNVD
•added 2025/03/11 12:00 a.m.•21 views

Adobe Acrobat Reader buffer error vulnerability

Adobe Acrobat Reader is a PDF viewer from the American company Audobee Adobe. The software is used to print, sign and annotate PDF. A buffer overflow vulnerability exists in Adobe Acrobat Reader 24.001.30225, 20.005.30748, 25.001.20428 and earlier versions, which originates from an out-of-bounds...

5.5CVSS6.7AI score0.00421EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/03/11 12:00 a.m.•20 views

PDF-XChange Editor buffer error vulnerability

PDF-XChange Editor is a PDF file viewing software from PDF-XChange that runs on Microsoft Windows systems. PDF-XChange Editor suffers from a buffer error vulnerability that originates from an out-of-bounds read in the parsing of PDF files, which could lead to the disclosure of sensitive informati...

3.3CVSS5.5AI score0.00243EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/03/11 12:00 a.m.•34 views

PT-2025-26893 · Unknown · Pdf-Xchange Editor

Name of the Vulnerable Software and Affected Versions: PDF-XChange Editor affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations. It requires user interaction, such as visiting a malicious page or opening a...

3.3CVSS6.2AI score0.00244EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2025/03/11 12:00 a.m.•28 views

PT-2025-26891 · Unknown · Pdf-Xchange Editor

Name of the Vulnerable Software and Affected Versions: PDF-XChange Editor affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a...

7.8CVSS7.8AI score0.0027EPSS
SaveExploits0References7
Rows per page
Query Builder