Lucene search
+L

1678 matches found

CNNVD
CNNVD
added 2024/11/22 12:00 a.m.9 views

Tungsten Automation Power PDF 缓冲区错误漏洞

Tungsten Automation Power PDF Kofax Power PDF is a powerful PDF processing software from Tungsten Automation. Tungsten Automation Power PDF suffers from a buffer error vulnerability that stems from a PDF file parsing issue that includes an out-of-bounds write problem. An attacker could exploit th...

7.8CVSS8.2AI score0.00269EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2024/11/15 12:00 a.m.10 views

The vulnerability of PDF viewing and editing programs like Acrobat Reader lies in the improper use of dynamic memory, allowing attackers to execute arbitrary code.

The vulnerability of PDF viewing and editing programs like Acrobat Reader is related to the improper use of dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.5AI score0.02961EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2024/11/15 12:00 a.m.13 views

The vulnerability of the CoolType font processing framework in Acrobat Reader software, which is used for viewing and editing PDF files, allows a perpetrator to disclose protected information.

The vulnerability of the CoolType font processing framework in Acrobat Reader software, which is used for reading and editing PDF files, involves reading data beyond the allowed range in memory. Exploiting this vulnerability can allow an attacker to disclose protected information through a...

5.5CVSS5.4AI score0.02047EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2024/11/15 12:00 a.m.14 views

The vulnerability of the Acrobat Reader PDF viewing and editing software lies in the ability to write outside the buffer, allowing an attacker to execute arbitrary code.

The vulnerability of the Acrobat Reader PDF viewer and editor lies in the issue of buffer overflow attacks. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially crafted file...

7.8CVSS7.9AI score0.03901EPSS
SaveExploits0References5
OSV
OSV
added 2024/11/12 3:54 p.m.14 views

USN-7103-1 ghostscript vulnerabilities

It was discovered that Ghostscript incorrectly handled parsing certain PS files. An attacker could use this issue to cause Ghostscript to crash, resulting in a denial of service, or possibly execute arbitrary code. CVE-2024-46951, CVE-2024-46953, CVE-2024-46955, CVE-2024-46956 It was discovered...

8.4CVSS7.3AI score0.00551EPSS
SaveExploits0References7
BDU FSTEC
BDU FSTEC
added 2024/11/12 12:00 a.m.9 views

The vulnerability of the PDF document viewing program Foxit PDF Reader (formerly Foxit Reader) and the PDF file editing program Foxit PDF Editor (formerly Foxit PhantomPDF) lies in the use of memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of the PDF document viewing program Foxit PDF Reader formerly Foxit Reader and the PDF file editing program Foxit PDF Editor formerly Foxit PhantomPDF is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.6AI score0.0081EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2024/11/11 12:00 a.m.19 views

The vulnerability of the PDF editing program Foxit PDF Editor (formerly Foxit PhantomPDF) lies in its use of memory after it is freed, allowing a hacker to execute arbitrary code.

The vulnerability of the Foxit PDF Editor formerly Foxit PhantomPDF PDF editing software is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code using a specially created PDF file...

7.8CVSS7.6AI score0.0081EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/11/11 12:00 a.m.12 views

The vulnerability of the PDF editing program Foxit PDF Editor (formerly Foxit PhantomPDF) lies in its use of memory after it is freed, allowing a hacker to execute arbitrary code.

The vulnerability of the Foxit PDF Editor formerly Foxit PhantomPDF PDF editing software is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code using a specially created PDF file...

7.8CVSS7.6AI score0.00914EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2024/11/11 12:00 a.m.13 views

The vulnerability of the PDF editing program Foxit PDF Editor (formerly Foxit PhantomPDF) lies in its use of memory after it is freed, allowing a hacker to execute arbitrary code.

The vulnerability of the Foxit PDF Editor formerly Foxit PhantomPDF PDF editing software is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code using a specially created PDF file...

7.8CVSS7.6AI score0.00793EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2024/11/11 12:00 a.m.12 views

The vulnerability of the PDF editing program Foxit PDF Editor (formerly Foxit PhantomPDF) lies in its use of memory after it is freed, allowing a hacker to execute arbitrary code.

The vulnerability of the Foxit PDF Editor formerly Foxit PhantomPDF PDF editing software is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code using a specially created PDF file...

7.8CVSS7.6AI score0.0081EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2024/11/11 12:00 a.m.13 views

The vulnerability of the PDF editing program Foxit PDF Editor (formerly Foxit PhantomPDF) lies in its use of memory after it is freed, allowing a hacker to execute arbitrary code.

The vulnerability of the Foxit PDF Editor formerly Foxit PhantomPDF PDF editing software is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code using a specially created PDF file...

7.8CVSS7.6AI score0.00914EPSS
SaveExploits0References4Affected Software2
OSV
OSV
added 2024/11/10 10:15 p.m.4 views

DEBIAN-CVE-2024-46952

An issue was discovered in pdf/pdfxref.c in Artifex Ghostscript before 10.04.0. There is a buffer overflow during handling of a PDF XRef stream related to W array values...

7.8CVSS7.8AI score0.00316EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2024/10/23 12:00 a.m.19 views

The vulnerability of the Pandoc format conversion library written in Haskell allows attackers to create or rewrite any files in the system.

The vulnerability of the Pandoc format conversion library written in Haskell is related to insufficient validation of input data. Exploiting this vulnerability allows attackers to create or overwrite arbitrary files in the system by using the --extract-media parameter or by exporting files in PDF...

5CVSS6.3AI score0.00368EPSS
SaveExploits1References9Affected Software6
Positive Technologies
Positive Technologies
added 2024/10/11 12:00 a.m.11 views

PT-2024-39825 · Tungsten Automation · Tungsten Automation Power Pdf

Name of the Vulnerable Software and Affected Versions: Tungsten Automation Power PDF affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations. User interaction is required to exploit this, where the target must vis...

3.3CVSS6.9AI score0.00252EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2024/10/11 12:00 a.m.10 views

PT-2024-39808 · Tungsten Automation · Tungsten Automation Power Pdf

Name of the Vulnerable Software and Affected Versions: Tungsten Automation Power PDF affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of Tungsten Automation Power PDF. User interaction is required, where the target...

7.8CVSS7.3AI score0.0027EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2024/10/11 12:00 a.m.18 views

PT-2024-39803 · Tungsten Automation · Tungsten Automation Power Pdf

Name of the Vulnerable Software and Affected Versions: Tungsten Automation Power PDF affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or...

7.8CVSS7.5AI score0.00269EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2024/10/11 12:00 a.m.11 views

PT-2024-39797 · Tungsten Automation · Tungsten Automation Power Pdf

Name of the Vulnerable Software and Affected Versions: Tungsten Automation Power PDF affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or...

7.8CVSS7.4AI score0.00269EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
added 2024/10/07 1:38 a.m.18 views

firefox: thunderbird: Cross-origin access to PDF contents through multipart responses

A flaw was found in Mozilla. The Mozilla Foundation's Security Advisory describes the issue as follows: An attacker could, via a specially crafted multipart response, execute arbitrary JavaScript under the resource://pdf.js origin. This could allow them to access cross-origin PDF content. This...

7.5CVSS7.5AI score0.00397EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
added 2024/10/07 1:23 a.m.8 views

firefox: thunderbird: Cross-origin access to PDF contents through multipart responses

A flaw was found in Mozilla. The Mozilla Foundation's Security Advisory describes the issue as follows: An attacker could, via a specially crafted multipart response, execute arbitrary JavaScript under the resource://pdf.js origin. This could allow them to access cross-origin PDF content. This...

7.5CVSS7.5AI score0.00397EPSS
SaveExploits0References8
BDU FSTEC
BDU FSTEC
added 2024/10/04 12:00 a.m.12 views

The vulnerability of PDF-XChange Editor’s PDF document viewing and editing software, related to the occurrence of operations outside the buffer in memory, allows attackers to disclose protected information.

The vulnerability of PDF-XChange Editor’s PDF document viewing and editing software lies in the issue of operations going beyond the buffer in memory during PDF file processing. Exploiting this vulnerability can allow attackers to disclose protected information...

3.3CVSS6AI score0.00369EPSS
SaveExploits0References5Affected Software3
Rows per page
Query Builder