Lucene search
+L

1214 matches found

Zero Day Initiative
Zero Day Initiative
added 2023/07/13 12:00 a.m.17 views

Kofax Power PDF PNG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kofax Power PDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PNG...

7.8CVSS6.7AI score0.00401EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/07/13 12:00 a.m.26 views

Kofax Power PDF PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kofax Power PDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PDF...

7.8CVSS6.8AI score0.00296EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/07/13 12:00 a.m.21 views

Kofax Power PDF J2K File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kofax Power PDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of J2K...

7.8CVSS6.8AI score0.00401EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/07/13 12:00 a.m.20 views

Kofax Power PDF TIF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kofax Power PDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of TIF...

7.8CVSS6.8AI score0.00296EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/07/13 12:00 a.m.17 views

Kofax Power PDF U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Kofax Power PDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

3.3CVSS5.9AI score0.0038EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/07/13 12:00 a.m.9 views

PT-2023-25904 · Kofax · Kofax Power Pdf

Name of the Vulnerable Software and Affected Versions: Kofax Power PDF affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a maliciou...

7.8CVSS7.4AI score0.00296EPSS
SaveExploits0References4
Zero Day Initiative
Zero Day Initiative
added 2023/07/13 12:00 a.m.22 views

Kofax Power PDF PNG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kofax Power PDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PNG...

7.8CVSS6.8AI score0.00301EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/07/13 12:00 a.m.13 views

PT-2023-25922 · Kofax · Kofax Power Pdf

Name of the Vulnerable Software and Affected Versions: Kofax Power PDF affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations. It requires user interaction, such as visiting a malicious page or opening a maliciou...

5.5CVSS7AI score0.0038EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2023/07/06 12:00 a.m.9 views

PT-2023-5452 · Kofax · Kofax Power Pdf Advanced

Name of the Vulnerable Software and Affected Versions: Kofax Power PDF Advanced affected versions not specified Description: The issue is related to a heap-based buffer overflow in the parsing of PDF files, which can be exploited to execute arbitrary code on affected installations. This requires...

7.8CVSS7.7AI score0.00351EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2023/07/06 12:00 a.m.9 views

PT-2023-5453 · Kofax · Kofax Power Pdf Advanced

Name of the Vulnerable Software and Affected Versions: Kofax Power PDF Advanced affected versions not specified Description: The issue is related to a heap-based buffer overflow in the Kofax Power PDF Advanced software when processing PDF files. This can allow an attacker to execute arbitrary cod...

7.8CVSS7.9AI score0.00343EPSS
SaveExploits0References8
NVD
NVD
added 2021/01/07 6:15 p.m.35 views

CVE-2018-18688

The Portable Document Format PDF specification does not provide any information regarding the concrete procedure of how to validate signatures. Consequently, an Incremental Saving vulnerability exists in multiple products. When an attacker uses the Incremental Saving feature to add pages or...

5.3CVSS6.7AI score0.01133EPSS
SaveExploits0References4
Prion
Prion
added 2021/01/07 6:15 p.m.23 views

Design/Logic Flaw

The Portable Document Format PDF specification does not provide any information regarding the concrete procedure of how to validate signatures. Consequently, an Incremental Saving vulnerability exists in multiple products. When an attacker uses the Incremental Saving feature to add pages or...

5CVSS5.7AI score0.01133EPSS
SaveExploits0References4Affected Software13
CVE
CVE
added 2021/01/07 5:38 p.m.90 views

CVE-2018-18688

The CVE-2018-18688 entry describes a signature-validation bypass in PDF processing that arises because the PDF specification lacks concrete validation procedures for incremental savings. Affected products include Foxit Reader (pre-9.4), Foxit PhantomPDF (pre-8.3.9 and pre-9.4 for 9.x), and other ...

5.3CVSS5.8AI score0.01133EPSS
SaveExploits0References4Affected Software13
Cvelist
Cvelist
added 2021/01/07 5:38 p.m.39 views

CVE-2018-18688

The Portable Document Format PDF specification does not provide any information regarding the concrete procedure of how to validate signatures. Consequently, an Incremental Saving vulnerability exists in multiple products. When an attacker uses the Incremental Saving feature to add pages or...

5.9AI score0.01133EPSS
SaveExploits0References4
Rows per page
Query Builder