Lucene search
+L

1356 matches found

Zero Day Initiative
Zero Day Initiative
•added 2023/07/13 12:00 a.m.•24 views

Kofax Power PDF JP2 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Kofax Power PDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

3.3CVSS5.9AI score0.0038EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/07/13 12:00 a.m.•31 views

Kofax Power PDF PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Kofax Power PDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

3.3CVSS5.9AI score0.0038EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2023/07/13 12:00 a.m.•20 views

PT-2023-25924 · Kofax · Kofax Power Pdf

Name of the Vulnerable Software and Affected Versions: Kofax Power PDF affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations. It requires user interaction, such as visiting a malicious page or opening a malicious file...

7.8CVSS7.5AI score0.00401EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2023/07/13 12:00 a.m.•17 views

PT-2023-25907 · Kofax · Kofax Power Pdf

Name of the Vulnerable Software and Affected Versions: Kofax Power PDF affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of Kofax Power PDF. It requires user interaction, where the target must visit a malicious page...

7.8CVSS7.3AI score0.00296EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2023/07/13 12:00 a.m.•19 views

PT-2023-26287 · Kofax · Kofax Power Pdf

Name of the Vulnerable Software and Affected Versions: Kofax Power PDF affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a maliciou...

7.8CVSS7.3AI score0.00404EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2023/07/13 12:00 a.m.•17 views

PT-2023-26294 · Kofax · Kofax Power Pdf

Name of the Vulnerable Software and Affected Versions: Kofax Power PDF affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a maliciou...

7.8CVSS7.4AI score0.00407EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2023/07/13 12:00 a.m.•28 views

PT-2023-25912 · Kofax · Kofax Power Pdf

Name of the Vulnerable Software and Affected Versions: Kofax Power PDF affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a maliciou...

7.8CVSS7.3AI score0.00306EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2023/07/13 12:00 a.m.•21 views

PT-2023-25929 · Kofax · Kofax Power Pdf

Name of the Vulnerable Software and Affected Versions: Kofax Power PDF affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations. It requires user interaction, such as visiting a malicious page or opening a maliciou...

5.5CVSS7.2AI score0.0038EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2023/07/06 12:00 a.m.•15 views

PT-2023-5453 · Kofax · Kofax Power Pdf Advanced

Name of the Vulnerable Software and Affected Versions: Kofax Power PDF Advanced affected versions not specified Description: The issue is related to a heap-based buffer overflow in the Kofax Power PDF Advanced software when processing PDF files. This can allow an attacker to execute arbitrary cod...

7.8CVSS7.9AI score0.00399EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2023/07/06 12:00 a.m.•16 views

PT-2023-5452 · Kofax · Kofax Power Pdf Advanced

Name of the Vulnerable Software and Affected Versions: Kofax Power PDF Advanced affected versions not specified Description: The issue is related to a heap-based buffer overflow in the parsing of PDF files, which can be exploited to execute arbitrary code on affected installations. This requires...

7.8CVSS7.7AI score0.00407EPSS
SaveExploits0References8
NVD
NVD
•added 2021/01/07 6:15 p.m.•40 views

CVE-2018-18688

The Portable Document Format PDF specification does not provide any information regarding the concrete procedure of how to validate signatures. Consequently, an Incremental Saving vulnerability exists in multiple products. When an attacker uses the Incremental Saving feature to add pages or...

5.3CVSS6.7AI score0.01146EPSS
SaveExploits0References4
Prion
Prion
•added 2021/01/07 6:15 p.m.•26 views

Design/Logic Flaw

The Portable Document Format PDF specification does not provide any information regarding the concrete procedure of how to validate signatures. Consequently, an Incremental Saving vulnerability exists in multiple products. When an attacker uses the Incremental Saving feature to add pages or...

5CVSS5.7AI score0.01146EPSS
SaveExploits0References4Affected Software13
Cvelist
Cvelist
•added 2021/01/07 5:38 p.m.•45 views

CVE-2018-18688

The Portable Document Format PDF specification does not provide any information regarding the concrete procedure of how to validate signatures. Consequently, an Incremental Saving vulnerability exists in multiple products. When an attacker uses the Incremental Saving feature to add pages or...

5.9AI score0.01146EPSS
SaveExploits0References4
CVE
CVE
•added 2021/01/07 5:38 p.m.•97 views

CVE-2018-18688

The CVE-2018-18688 entry describes a signature-validation bypass in PDF processing that arises because the PDF specification lacks concrete validation procedures for incremental savings. Affected products include Foxit Reader (pre-9.4), Foxit PhantomPDF (pre-8.3.9 and pre-9.4 for 9.x), and other ...

5.3CVSS5.8AI score0.01146EPSS
SaveExploits0References4Affected Software13
Positive Technologies
Positive Technologies
•added 2021/01/07 12:00 a.m.•5 views

PT-2021-8829

Name of the Vulnerable Software and Affected Versions Foxit Reader versions prior to 9.4 PhantomPDF versions prior to 8.3.9 and 9.x prior to 9.4 LibreOffice affected versions not specified Master PDF Editor affected versions not specified Nitro Pro affected versions not specified Nitro Reader...

5.3CVSS5.7AI score0.01146EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/01/07 12:00 a.m.•4 views

CVE-2018-18688: Improper Verification of Cryptographic Signature

The Portable Document Format PDF specification does not provide any information regarding the concrete procedure of how to validate signatures. Consequently, an Incremental Saving vulnerability exists in multiple products. When an attacker uses the Incremental Saving feature to add pages or...

5.3CVSS5.8AI score0.01146EPSS
SaveExploits0References2
Rows per page
Query Builder