CVE-2024-52269 AI Assistant PDF Document Spoofing in DocuSign

User Interface UI Misrepresentation of Critical Information vulnerability in DocuSign allows Content Spoofing. The SaaS AI assistant ignores hidden content that is rendered after signing, misleading the user. For reference see: CVE-2024-52276 This issue affects DocuSign: through 2024-12-04...

CVE-2024-52277 PDF Document Spoofing in DocuSeal

User Interface UI Misrepresentation of Critical Information vulnerability in DocuSeal allows Content Spoofing.Displayed version does not show the layer flattened version, once download, If printed e.g. via Google Chrome - Examine the print preview: Will render the vulnerability only, not all laye...

CVE-2024-52277

CVE-2024-52277 affects DocuSeal up to version 1.8.1. The issue is a UI misrepresentation that allows content spoofing: the displayed document layers are not flattened; when downloaded and printed (e.g., via Google Chrome print preview), the vulnerability rendering may occur while not all layers a...

CVE-2024-52277 PDF Document Spoofing in DocuSeal

User Interface UI Misrepresentation of Critical Information vulnerability in DocuSeal allows Content Spoofing.Displayed version does not show the layer flattened version, once download, If printed e.g. via Google Chrome - Examine the print preview: Will render the vulnerability only, not all laye...

CVE-2024-52276 PDF Document Spoofing in DocuSign

User Interface UI Misrepresentation of Critical Information vulnerability in DocuSign allows Content Spoofing. 1. Displayed version does not show the layer flattened version, which is provided when the "Print" option is used. 2. Displayed version does not show the layer flattened version, which i...

CVE-2024-52276

CVE-2024-52276 is a DocuSign UI-focused vulnerability described as a misrepresentation of critical information that enables content spoofing. The affected behavior is that the layer-flattened version of the document is not shown in various UI paths (Print, combined download, uncombined download),...

PT-2025-4098 · Pdf Xchange · Pdf-Xchange Editor

Name of the Vulnerable Software and Affected Versions: PDF-XChange Editor affected versions not specified Description: The issue is a remote code execution vulnerability that exists in the parsing of U3D files within the PDF-XChange Editor. This vulnerability allows remote attackers to execute...

CVE-2024-52800

veraPDF is an open source PDF/A validation library. Executing policy checks using custom schematron files via the CLI invokes an XSL transformation that may theoretically lead to a remote code execution RCE vulnerability. This doesn't affect the standard validation and policy checks functionality...

CVE-2024-52800 Potential XXE (XML External Entity Injection) vulnerability in veraPDF CLI

veraPDF is an open source PDF/A validation library. Executing policy checks using custom schematron files via the CLI invokes an XSL transformation that may theoretically lead to a remote code execution RCE vulnerability. This doesn't affect the standard validation and policy checks functionality...

Foxit PDF Reader Resource Management Error Vulnerability

Foxit PDF Reader is a Chinese Foxit Foxit company's a PDF reader. A resource management error vulnerability exists in Foxit PDF Reader, which stems from the AcroForm feature that contains a reuse-after-release, leading to information disclosure vulnerability. No details of the vulnerability are...

Foxit PDF Reader Buffer Overflow Vulnerability (CNVD-2025-16218)

Foxit PDF Reader is China Foxit Foxit company a PDF reader. A buffer error vulnerability exists in Foxit PDF Reader, which stems from the AcroForm feature that contains an out-of-bounds read, resulting in an information disclosure vulnerability. No details of the vulnerability are provided at thi...

Foxit PDF Editor Elevation of Privilege Vulnerability

Foxit PDF Editor is China Foxit Foxit company a PDF editor. A security vulnerability exists in Foxit PDF Editor, which can be exploited by attackers to cause a local elevation of privilege...

DAAS. PDF Printer generates image files are not editable selectable letters in PDFs with HTML5

Citrix PDF Printer generates image files are not editable / selectable letters in PDFs with 2402 With HTML5 Receiver v22.9.0.26 in DAAS. Users can't copy and paste any character...

CVE-2024-53619

An authenticated arbitrary file upload vulnerability in the Documents module of SPIP v4.3.3 allows attackers to execute arbitrary code via uploading a crafted PDF file...

UBUNTU-CVE-2024-53619

An authenticated arbitrary file upload vulnerability in the Documents module of SPIP v4.3.3 allows attackers to execute arbitrary code via uploading a crafted PDF file...

SUSE-SU-2024:4054-1 Security update for javapackages-tools, xmlgraphics-batik, xmlgraphics-commons, xmlgraphics-fop

This update for javapackages-tools, xmlgraphics-batik, xmlgraphics-commons, xmlgraphics-fop fixes the following issues: xmlgraphics-fop was updated from version 2.8 to 2.10: - Security issues fixed: CVE-2024-28168: Fixed improper restriction of XML External Entity XXE reference bsc1231428 -...

CVE-2024-53619

CVE-2024-53619 concerns an authenticated arbitrary file upload in the Documents module of SPIP v4.3.3 that can lead to arbitrary code execution via a crafted PDF upload. The incident is consistently described across multiple sources as affecting SPIP 4.3.3 with an authenticated file upload path, ...

CVE-2024-53619

An authenticated arbitrary file upload vulnerability in the Documents module of SPIP v4.3.3 allows attackers to execute arbitrary code via uploading a crafted PDF file...

TCPDF 安全漏洞

TCPDF is an open source library from Tecnick. It is used to generate PDF documents and barcodes. A security vulnerability exists in TCPDF version 6.7.5, which stems from the inclusion of a local file inclusion vulnerability...

The vulnerability affects the AcroForm component of the PDF viewer software from Foxit PDF Reader (previously Foxit Reader) and the PDF editor software from Foxit PDF Editor (previously Foxit PhantomPDF). This vulnerability allows a malicious individual to execute arbitrary code.

The vulnerability of the AcroForm component in the PDF viewer application, Foxit PDF Reader formerly Foxit Reader, and the PDF editing application, Foxit PDF Editor formerly Foxit PhantomPDF, is related to the use of memory after it is released. Exploiting this vulnerability can allow an attacker...