Lucene search
+L

1995 matches found

Positive Technologies
Positive Technologies
added 2021/08/13 12:0 a.m.3 views

PT-2021-5377 · Foxit · Foxit Phantompdf +1

Name of the Vulnerable Software and Affected Versions: Foxit PhantomPDF versions affected versions not specified Foxit Reader versions affected versions not specified Description: The issue is related to a buffer overflow when handling annotation objects, which can allow a remote attacker to...

10CVSS6.3AI score0.0034EPSS
SaveExploits0References8
CNVD
CNVD
added 2021/08/12 12:0 a.m.22 views

Foxit Reader and Foxit PhantomPDF Buffer Overflow Vulnerability (CNVD-2021-66414)

Foxit Reader and Foxit PhantomPDF are both PDF document readers from Foxit, a Chinese company. Foxit Reader and PhantomPDF versions prior to 10.1.4 have a security vulnerability that could be exploited to corrupt memory during the conversion of PDF documents to a different document format...

6.4CVSS3.2AI score0.01166EPSS
SaveExploits0Affected Software2
CNVD
CNVD
added 2021/08/12 12:0 a.m.20 views

Foxit Reader and Foxit PhantomPDF Buffer Overflow Vulnerability (CNVD-2021-66412)

Foxit Reader and Foxit PhantomPDF are both PDF document readers from Foxit, a Chinese company. Foxit Reader and PhantomPDF versions prior to 10.1.4 have a security vulnerability that could be exploited to corrupt memory during the conversion of PDF documents to a different document format...

7.5CVSS3.2AI score0.01087EPSS
SaveExploits0Affected Software2
CNVD
CNVD
added 2021/08/12 12:0 a.m.22 views

Foxit Reader and Foxit PhantomPDF Denial of Service Vulnerability

Foxit Reader and Foxit PhantomPDF are both PDF document readers from Foxit, a Chinese company. Foxit Reader and PhantomPDF versions prior to 10.1.4 contain a security vulnerability that could be exploited by an attacker to invoke the stack via a recursive function during the processing of XFA for...

5CVSS4.2AI score0.00961EPSS
SaveExploits0Affected Software2
NVD
NVD
added 2021/08/11 10:15 p.m.23 views

CVE-2021-38574

An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows SQL Injection via crafted data at the end of a string...

9.8CVSS0.00994EPSS
SaveExploits0References1
OSV
OSV
added 2021/08/11 10:15 p.m.7 views

CVE-2021-38574

An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows SQL Injection via crafted data at the end of a string...

9.8CVSS5.8AI score0.00994EPSS
SaveExploits0References1
NVD
NVD
added 2021/08/11 10:15 p.m.21 views

CVE-2021-38568

An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows memory corruption during conversion of a PDF document to a different document format...

9.8CVSS0.01087EPSS
SaveExploits0References1
OSV
OSV
added 2021/08/11 10:15 p.m.8 views

CVE-2021-38571

An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows DLL hijacking, aka CNVD-C-2021-68000 and CNVD-C-2021-68502...

7.8CVSS5.8AI score
SaveExploits0References1
NVD
NVD
added 2021/08/11 10:15 p.m.26 views

CVE-2021-38571

An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows DLL hijacking, aka CNVD-C-2021-68000 and CNVD-C-2021-68502...

7.8CVSS0.00542EPSS
SaveExploits0References1
NVD
NVD
added 2021/08/11 10:15 p.m.35 views

CVE-2021-38569

An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows stack consumption via recursive function calls during the handling of XFA forms or link objects...

7.5CVSS0.00961EPSS
SaveExploits0References1
NVD
NVD
added 2021/08/11 10:15 p.m.21 views

CVE-2021-38572

An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows writing to arbitrary files because the extractPages pathname is not validated...

9.8CVSS0.01117EPSS
SaveExploits0References1
OSV
OSV
added 2021/08/11 10:15 p.m.8 views

CVE-2021-38569

An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows stack consumption via recursive function calls during the handling of XFA forms or link objects...

7.5CVSS7.1AI score0.00961EPSS
SaveExploits0References1
OSV
OSV
added 2021/08/11 10:15 p.m.6 views

CVE-2021-38570

An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows attackers to delete arbitrary files during uninstallation via a symlink...

9.1CVSS7.4AI score0.01166EPSS
SaveExploits0References1
OSV
OSV
added 2021/08/11 10:15 p.m.5 views

CVE-2021-38573

An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows writing to arbitrary files because a CombineFiles pathname is not validated...

9.8CVSS5.9AI score0.01117EPSS
SaveExploits0References1
NVD
NVD
added 2021/08/11 10:15 p.m.18 views

CVE-2021-38570

An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows attackers to delete arbitrary files during uninstallation via a symlink...

9.1CVSS0.01166EPSS
SaveExploits0References1
NVD
NVD
added 2021/08/11 10:15 p.m.25 views

CVE-2021-38573

An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows writing to arbitrary files because a CombineFiles pathname is not validated...

9.8CVSS0.01117EPSS
SaveExploits0References1
Prion
Prion
added 2021/08/11 10:15 p.m.24 views

Design/Logic Flaw

An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows stack consumption via recursive function calls during the handling of XFA forms or link objects...

5CVSS7.5AI score0.00961EPSS
SaveExploits0References1Affected Software2
Prion
Prion
added 2021/08/11 10:15 p.m.20 views

Memory corruption

An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows memory corruption during conversion of a PDF document to a different document format...

7.5CVSS9.4AI score0.01087EPSS
SaveExploits0References1Affected Software2
Prion
Prion
added 2021/08/11 10:15 p.m.21 views

Design/Logic Flaw

An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows attackers to delete arbitrary files during uninstallation via a symlink...

6.4CVSS9AI score0.01166EPSS
SaveExploits0References1Affected Software2
Prion
Prion
added 2021/08/11 10:15 p.m.27 views

Sql injection

An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows SQL Injection via crafted data at the end of a string...

7.5CVSS9.7AI score0.00994EPSS
SaveExploits0References1Affected Software2
Rows per page
Query Builder