796 matches found
CVE-2020-7763
This affects the package phantom-html-to-pdf before 0.6.1...
CVE-2020-7763
CVE-2020-7763 affects the npm package phantom-html-to-pdf and is an arbitrary file read vulnerability present in versions before 0.6.1. The weakness is demonstrated by a PoC (in the GitHub advisory and Snyk reference) that bypasses file access restrictions to read local host files (e.g., using wi...
@dfeidao/server (>=4.5.201902251312, <=4.6.201910181238), @fabrix/spool-pdf (>=1.5.0-alpha.1, <=1.5.0) +27 more potentially affected by CVE-2020-7763 via phantom-html-to-pdf (>=0.1.2, <=0.6.1)
phantom-html-to-pdf NPM version =0.1.2, =4.5.201902251312, =1.5.0-alpha.1, =5.0.201901071713, =5.0.201812141540, =1.0.1-server20190117165116, =1.0.201901260938, =1.0.0, =1.0.0, =3.0.0-beta.1, =3.0.0-beta.1, =2.0.0, =1.0.202005312012, =1.0.3, =1.0.7, =1.6.8 and more Source cves: CVE-2020-7763 Sour...
CVE-2020-7763
This affects the package phantom-html-to-pdf before 0.6.1...
CVE-2020-7763: Improper Limitation of a Pathname to a Restricted Directory
This affects the package phantom-html-to-pdf before 0.6.1...
PT-2020-19775
Name of the Vulnerable Software and Affected Versions phantom-html-to-pdf versions prior to 0.6.1 Description The issue affects the phantom-html-to-pdf package, allowing for potential exploitation. Technical details about exploitation include the use of the conversion function from the...
Arbitrary File Read
Overview phantom-html-to-pdf is a Convert html to pdf using phantomjs Affected versions of this package are vulnerable to Arbitrary File Read. PoC var fs = require'fs' var conversion = require"phantom-html-to-pdf"; conversion.allowLocalFilesAccess = false conversion html:...
@dfeidao/server (>=4.5.201902251314, <=4.6.201910181238), @fabrix/spool-pdf (>=1.5.0-alpha.1, <=1.5.0) +23 more potentially affected by CVE-2020-7763 via phantom-html-to-pdf (>=0.1.2, <=0.6.0)
phantom-html-to-pdf NPM version =0.1.2, =4.5.201902251314, =1.5.0-alpha.1, =5.0.201901071713, =5.0.201812141540, =1.0.1-server20190117165116, =1.0.201901260938, =2.0.0, =1.0.202005312012, =1.0.3, =0.1.0, =0.4.0, =1.0.1, =1.0.3 - jsreport-fop-xsl-pdf 1.0.4 and more Source cves: CVE-2020-7763 Sourc...
Split-Second Phantom Images Fool Autopilots
Researchers are tricking autopilots by inserting split-second images into roadside billboards. Researchers at Israels Ben Gurion University of the Negev … previously revealed that they could use split-second light projections on roads to successfully trick Teslas driver-assistance systems into...
Foxit Reader and PhantomPDF Buffer Overflow Vulnerability (CNVD-2020-57568)
Reader is a set of PDF document reader software . Foxit Reader is a PDF document reader . V8 is one of the open source JavaScript engine . mPDF is a use of PHP to write for the conversion of HTML into PDF files library . A buffer overflow vulnerability exists in Foxit Reader and PhantomPDF versio...
Foxit Reader and PhantomPDF Code Injection Vulnerability
Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. A code injection vulnerability exists in Foxit Reader and PhantomPDF versions prior to 4.1 on macOS. The vulnerability stems from external input data to construct code segments in the process, the networ...
CVE-2020-26539
An issue was discovered in Foxit Reader and PhantomPDF before 10.1. When there is a multiple interpretation error for /V in the Additional Action and Field dictionaries, a use-after-free can occur with resultant remote code execution or an information leak...
Foxit Reader and PhantomPDF Resource Management Error Vulnerability (CNVD-2020-65177)
Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. A resource management error vulnerability exists in the NodeProperties::InferReceiverMapsUnsafe method in Foxit Reader 10.0.0.35798 and earlier versions and Foxit PhantomPDF 10.0.0.35798 and earlier...
Foxit PhantomPDF Code Issue Vulnerability (CNVD-2020-32086)
Foxit PhantomPDF is China's Foxit Foxit company a PDF document reader. A code issue vulnerability exists in Foxit PhantomPDF versions prior to 8.3.12. An attacker could exploit this vulnerability to cause a denial of service...
Foxit Reader and PhantomPDF Resource Management Error Vulnerability (CNVD-2020-32085)
Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. A resource management error vulnerability exists in Foxit Reader versions prior to 9.7.2 and PhantomPDF versions prior to 9.7.2. An attacker can exploit this vulnerability to cause a denial of service...
Foxit Reader and PhantomPDF Resource Management Error Vulnerability (CNVD-2020-32082)
Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. A resource management error vulnerability exists in Foxit Reader versions prior to 9.7.2 and PhantomPDF versions prior to 9.7.2, which is caused by the execution of JavaScript code after a delete or clos...
Foxit Reader and PhantomPDF Resource Management Error Vulnerability (CNVD-2020-32443)
Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. A resource management error vulnerability exists in Foxit Reader versions prior to 9.7.1 and PhantomPDF versions prior to 9.7.1. The vulnerability stems from a networked system or product that improperly...
CVE-2019-20835
An issue was discovered in Foxit Reader and PhantomPDF before 9.5. It has homograph mishandling...