Lucene search
+L

1663 matches found

OSV
OSV
added 2024/11/26 7:15 p.m.8 views

CVE-2024-53619

An authenticated arbitrary file upload vulnerability in the Documents module of SPIP v4.3.3 allows attackers to execute arbitrary code via uploading a crafted PDF file...

6.3CVSS6.1AI score0.00545EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2024/11/26 12:0 a.m.9 views

PT-2024-35793 · Spip · Spip

Name of the Vulnerable Software and Affected Versions: SPIP version 4.3.3 Description: The issue concerns an authenticated arbitrary file upload vulnerability in the Documents module. This allows attackers to execute arbitrary code by uploading a crafted PDF file. There is no information provided...

6.3CVSS7.8AI score0.00545EPSS
SaveExploits1References6
OSV
OSV
added 2024/11/22 10:15 p.m.6 views

CVE-2024-9248

Foxit PDF Reader PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a...

7.8CVSS6.3AI score0.00585EPSS
SaveExploits0References2
OSV
OSV
added 2024/11/22 9:15 p.m.7 views

CVE-2024-9764

Tungsten Automation Power PDF PDF File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tungsten Automation Power PDF. User interaction is required to exploit this vulnerability in that th...

7.8CVSS7.5AI score0.00316EPSS
SaveExploits0References1
OSV
OSV
added 2024/11/22 2:23 p.m.4 views

OESA-2024-2455 ghostscript security update

Ghostscript is an interpreter for PostScript™ and Portable Document Format PDF files. Ghostscript consists of a PostScript interpreter layer, and a graphics library. Security Fixes: Artifex Ghostscript before 10.03.0 sometimes has a stack-based buffer overflow via the CIDFSubstPath and...

5.4CVSS7.5AI score0.00717EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/11/22 12:0 a.m.6 views

Tungsten Automation Power PDF 缓冲区错误漏洞

Tungsten Automation Power PDF Kofax Power PDF is a powerful PDF processing software from Tungsten Automation. Tungsten Automation Power PDF suffers from a buffer error vulnerability that stems from the parsing of PDF files containing a memory corruption issue. An attacker could exploit this...

7.8CVSS8.2AI score0.00271EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/11/22 12:0 a.m.10 views

Tungsten Automation Power PDF 安全漏洞

Tungsten Automation Power PDF Kofax Power PDF is a powerful PDF processing software from Tungsten Automation, Inc. A security vulnerability exists in Tungsten Automation Power PDF, which stems from a heap-based buffer overflow problem contained in the parsing of PDF files. An attacker exploiting...

7.8CVSS8.2AI score0.00275EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/11/22 12:0 a.m.7 views

Tungsten Automation Power PDF 资源管理错误漏洞

Tungsten Automation Power PDF Kofax Power PDF is a powerful PDF processing software from Tungsten Automation, Inc. Tungsten Automation Power PDF suffers from a resource management error vulnerability that stems from the parsing of PDF files containing a post-release reuse issue. An attacker could...

7.8CVSS8AI score0.00316EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/11/22 12:0 a.m.5 views

Tungsten Automation Power PDF 缓冲区错误漏洞

Tungsten Automation Power PDF Kofax Power PDF is a powerful PDF processing software from Tungsten Automation. Tungsten Automation Power PDF suffers from a buffer error vulnerability that stems from the parsing of PNG files containing an out-of-bounds read issue. An attacker could cause remote cod...

7.8CVSS8.1AI score0.00283EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/11/22 12:0 a.m.5 views

Tungsten Automation Power PDF 安全漏洞

Tungsten Automation Power PDF Kofax Power PDF is a powerful PDF processing software from Tungsten Automation, Inc. A security vulnerability exists in Tungsten Automation Power PDF, which stems from a heap-based buffer overflow problem contained in the parsing of PDF files. An attacker exploiting...

7.8CVSS8.2AI score0.00275EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/11/22 12:0 a.m.7 views

Tungsten Automation Power PDF 缓冲区错误漏洞

Tungsten Automation Power PDF Kofax Power PDF is a powerful PDF processing software from Tungsten Automation. A buffer error vulnerability exists in Tungsten Automation Power PDF, which stems from a PDF file parsing issue that includes an out-of-bounds read. An attacker who exploited this...

3.3CVSS4.4AI score0.0025EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/11/22 12:0 a.m.7 views

Tungsten Automation Power PDF 缓冲区错误漏洞

Tungsten Automation Power PDF Kofax Power PDF is a powerful PDF processing software from Tungsten Automation. Tungsten Automation Power PDF suffers from a buffer error vulnerability that stems from a PDF file parsing issue that includes an out-of-bounds write problem. An attacker could exploit th...

7.8CVSS8.2AI score0.00271EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2024/11/15 12:0 a.m.8 views

The vulnerability of PDF viewing and editing programs like Acrobat Reader lies in the improper use of dynamic memory, allowing attackers to execute arbitrary code.

The vulnerability of PDF viewing and editing programs like Acrobat Reader is related to the improper use of dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.5AI score0.02961EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2024/11/15 12:0 a.m.9 views

The vulnerability of the CoolType font processing framework in Acrobat Reader software, which is used for viewing and editing PDF files, allows a perpetrator to disclose protected information.

The vulnerability of the CoolType font processing framework in Acrobat Reader software, which is used for reading and editing PDF files, involves reading data beyond the allowed range in memory. Exploiting this vulnerability can allow an attacker to disclose protected information through a...

5.5CVSS5.4AI score0.02047EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2024/11/15 12:0 a.m.10 views

The vulnerability of the Acrobat Reader PDF viewing and editing software lies in the ability to write outside the buffer, allowing an attacker to execute arbitrary code.

The vulnerability of the Acrobat Reader PDF viewer and editor lies in the issue of buffer overflow attacks. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially crafted file...

7.8CVSS7.9AI score0.03901EPSS
SaveExploits0References5
OSV
OSV
added 2024/11/12 3:54 p.m.11 views

USN-7103-1 ghostscript vulnerabilities

It was discovered that Ghostscript incorrectly handled parsing certain PS files. An attacker could use this issue to cause Ghostscript to crash, resulting in a denial of service, or possibly execute arbitrary code. CVE-2024-46951, CVE-2024-46953, CVE-2024-46955, CVE-2024-46956 It was discovered...

8.4CVSS7.3AI score0.0055EPSS
SaveExploits0References7
BDU FSTEC
BDU FSTEC
added 2024/11/12 12:0 a.m.7 views

The vulnerability of the PDF document viewing program Foxit PDF Reader (formerly Foxit Reader) and the PDF file editing program Foxit PDF Editor (formerly Foxit PhantomPDF) lies in the use of memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of the PDF document viewing program Foxit PDF Reader formerly Foxit Reader and the PDF file editing program Foxit PDF Editor formerly Foxit PhantomPDF is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.6AI score0.0081EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2024/11/11 12:0 a.m.12 views

The vulnerability of the PDF editing program Foxit PDF Editor (formerly Foxit PhantomPDF) lies in its use of memory after it is freed, allowing a hacker to execute arbitrary code.

The vulnerability of the Foxit PDF Editor formerly Foxit PhantomPDF PDF editing software is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code using a specially created PDF file...

7.8CVSS7.6AI score0.0081EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/11/11 12:0 a.m.8 views

The vulnerability of the PDF editing program Foxit PDF Editor (formerly Foxit PhantomPDF) lies in its use of memory after it is freed, allowing a hacker to execute arbitrary code.

The vulnerability of the Foxit PDF Editor formerly Foxit PhantomPDF PDF editing software is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code using a specially created PDF file...

7.8CVSS7.6AI score0.00914EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2024/11/11 12:0 a.m.9 views

The vulnerability of the PDF editing program Foxit PDF Editor (formerly Foxit PhantomPDF) lies in its use of memory after it is freed, allowing a hacker to execute arbitrary code.

The vulnerability of the Foxit PDF Editor formerly Foxit PhantomPDF PDF editing software is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code using a specially created PDF file...

7.8CVSS7.6AI score0.00793EPSS
SaveExploits0References4Affected Software2
Rows per page
Query Builder