28987 matches found
Adobe Acrobat Reader 缓冲区错误漏洞
Adobe Acrobat Reader is a PDF viewer from the American company Audobee Adobe. The software is used to print, sign and annotate PDFs. Adobe Acrobat Reader suffers from a buffer error vulnerability that stems from the inclusion of an out-of-bounds read vulnerability. An attacker exploiting this...
Adobe PDFL SDK 缓冲区错误漏洞
The Adobe PDFL SDK is a software development kit for OEMs, ISVs, system integrators, and enterprise IT developers from Adobe, Inc. that contains a powerful set of functions for developing third-party solutions and workflows based on the Adobe PDF standard. A buffer error vulnerability exists in...
PT-2024-9407 · Sap · Sap Netweaver As Java
Name of the Vulnerable Software and Affected Versions: SAP NetWeaver AS for Java affected versions not specified Description: The issue allows an attacker authenticated as an administrator to use an exposed webservice to create a PDF with an embedded attachment. By specifying the file to be an...
Artifex Software MuPDF 安全漏洞
Artifex Software MuPDF is a free, lightweight PDF reader from Artifex Software, USA. A security vulnerability exists in Artifex Software MuPDF v1.24.9, which originates from the discovery of the inclusion of a segmentation error via the component /tools/pdfextract.c. The vulnerability can be...
Adobe Acrobat Reader 缓冲区错误漏洞
Adobe Acrobat Reader is a PDF viewer from the American company Audobee Adobe. The software is used to print, sign and annotate PDF. Adobe Acrobat Reader has a security vulnerability that can be exploited by attackers to cause a sensitive memory leak...
APSB24-98 : Security update available for Adobe PDFL SDK
Adobe has released an update for the Adobe PDF Library Software Development Kit SDK for Windows, Linux and macOS. Adobe PDFL SDK contains a set of functions for developing third-party solutions and workflows built upon the Adobe PDF standard. This update resolves a critical vulnerability that cou...
CVE-2024-46657
Artifex Software mupdf v1.24.9 was discovered to contain a segmentation fault via the component /tools/pdfextract.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted PDF file...
CVE-2024-46657
Artifex Software mupdf v1.24.9 was discovered to contain a segmentation fault via the component /tools/pdfextract.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted PDF file...
CVE-2024-11268
A maliciously crafted PDF file, when parsed through Autodesk Revit, can force an Out-of-Bounds Read. A malicious actor can leverage this vulnerability to cause a crash or could lead to an arbitrary memory leak...
CVE-2024-11268
A maliciously crafted PDF file, when parsed through Autodesk Revit, can force an Out-of-Bounds Read. A malicious actor can leverage this vulnerability to cause a crash or could lead to an arbitrary memory leak...
CVE-2024-11268 PDF File Parsing Vulnerability in Autodesk Revit
A maliciously crafted PDF file, when parsed through Autodesk Revit, can force an Out-of-Bounds Read. A malicious actor can leverage this vulnerability to cause a crash or could lead to an arbitrary memory leak...
CVE-2024-11268
CVE-2024-11268 concerns Autodesk Revit. A maliciously crafted PDF parsed by Revit can trigger an Out-of-Bounds Read, with the impact described as a crash or arbitrary memory leak. Documented measurements assign a Medium base score (CVSS 3.1) with local attack vector and user interaction required....
CVE-2024-11268 PDF File Parsing Vulnerability in Autodesk Revit
A maliciously crafted PDF file, when parsed through Autodesk Revit, can force an Out-of-Bounds Read. A malicious actor can leverage this vulnerability to cause a crash or could lead to an arbitrary memory leak...
Autodesk Revit 缓冲区错误漏洞
Autodesk Revit is a suite of building information modeling software from the US company Autodesk. A security vulnerability exists in Autodesk Revit that originates when Autodesk Revit parses a maliciously crafted PDF file, potentially forcing an out-of-bounds read. An attacker can exploit this...
CVE-2024-11276
The PDF Builder for WooCommerce. Create invoices,packing slips and more plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'page' parameter in all versions up to, and including, 1.2.136 due to insufficient input sanitization and output escaping. This makes it possible fo...
CVE-2024-11276 PDF Builder for WooCommerce. Create invoices,packing slips and more <= 1.2.136 - Reflected Cross-Site Scripting
The PDF Builder for WooCommerce. Create invoices,packing slips and more plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'page' parameter in all versions up to, and including, 1.2.136 due to insufficient input sanitization and output escaping. This makes it possible fo...
CVE-2024-11276
CVE-2024-11276: Reflected Cross‑Site Scripting in PDF Builder for WooCommerce (WordPress) up to version 1.2.136 via the page parameter. Affected: PDF Builder for WooCommerce plugin. Auth: unauthenticated. Impact: injection of web scripts in pages executed after user actions. Public details exist ...
WordPress plugin PDF Builder for WooCommerce 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site...
CVE-2024-52271 PDF Document Spoofing in Documenso
User Interface UI Misrepresentation of Critical Information vulnerability in Documenso allows Content Spoofing.Displayed version does not show the layer flattened version, once download, If printed e.g. via Google Chrome - Examine the print preview: Will render the vulnerability only, not all...
CVE-2024-52270 PDF Document Spoofing in DropBox Sign(HelloSign)
User Interface UI Misrepresentation of Critical Information vulnerability in DropBox SignHelloSign allows Content Spoofing. Displayed version does not show the layer flattened version, once download, If printed e.g. via Google Chrome - Examine the print preview: Will render the vulnerability only...