Lucene search
+L

1951 matches found

Zero Day Initiative
Zero Day Initiative
added 2021/10/15 12:0 a.m.33 views

Foxit PDF Editor Circle Annotation Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

7.8CVSS2.3AI score0.00349EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/10/15 12:0 a.m.21 views

Foxit PDF Editor Stamp Annotation Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

7.8CVSS1.8AI score0.00349EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/10/15 12:0 a.m.8 views

Foxit PDF Reader 缓冲区错误漏洞

Foxit PDF Reader is a PDF reader from Foxit China. Foxit PDF Reader is vulnerable to an information disclosure vulnerability that originates when the product does not verify the existence of an Annotation object before operating on it. An attacker could use this and other vulnerabilities to execu...

5.5CVSS6AI score0.0034EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2021/10/15 12:0 a.m.11 views

Foxit PDF Editor 缓冲区错误漏洞

Foxit PDF Editor is a PDF editor from the Chinese company Foxit. A buffer error vulnerability exists in Foxit PDF Editor, which stems from the product's failure to validate the existence of an Annotation object before manipulating it. This vulnerability can be exploited to cause malicious code to...

7.8CVSS7.5AI score0.00349EPSS
SaveExploits0References4
Zero Day Initiative
Zero Day Initiative
added 2021/10/15 12:0 a.m.29 views

Foxit PDF Editor Squiggly Annotation Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

7.8CVSS2.2AI score0.00349EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/10/15 12:0 a.m.32 views

Foxit PDF Editor Underline Annotation Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

7.8CVSS2.1AI score0.00349EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/10/15 12:0 a.m.32 views

Foxit PDF Editor Square Annotation Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

7.8CVSS2.3AI score0.00349EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2021/10/15 12:0 a.m.4 views

PT-2021-5389 · Foxit · Foxit Pdf Reader +1

Name of the Vulnerable Software and Affected Versions: Foxit PDF Reader and Foxit PDF Editor affected versions not specified Description: The issue is caused by a buffer overflow in memory, allowing a remote attacker to execute arbitrary code on the target system by opening a specially crafted...

10CVSS8.1AI score0.00349EPSS
SaveExploits0References8
Zero Day Initiative
Zero Day Initiative
added 2021/10/15 12:0 a.m.34 views

Foxit PDF Editor Text Annotation Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

7.8CVSS2.1AI score0.00349EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/10/15 12:0 a.m.10 views

Foxit PDF Reader 缓冲区错误漏洞

Foxit PDF Reader is a PDF reader from the Chinese company Foxit. A buffer error vulnerability exists in Foxit PDF Reader due to a lack of proper initialization before the product accesses a pointer to an Annotation object. The vulnerability can be exploited to cause malicious code execution by...

3.3CVSS6.4AI score0.0032EPSS
SaveExploits0References4
Zero Day Initiative
Zero Day Initiative
added 2021/10/15 12:0 a.m.32 views

Foxit PDF Reader Annotation Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS1.4AI score0.0034EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/10/15 12:0 a.m.7 views

Foxit PDF Reader 缓冲区错误漏洞

Foxit PDF Editor is a PDF editor from the Chinese company Foxit. A buffer error vulnerability exists in Foxit PDF Editor, which stems from the product's failure to validate the existence of an Annotation object before manipulating it. This vulnerability can be exploited to cause malicious code to...

7.8CVSS7.5AI score0.00349EPSS
SaveExploits0References4
Zero Day Initiative
Zero Day Initiative
added 2021/10/15 12:0 a.m.36 views

Foxit PDF Editor StrikeOut Annotation Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

7.8CVSS2.1AI score0.00349EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/10/15 12:0 a.m.9 views

Foxit PDF Reader 缓冲区错误漏洞

Foxit PDF Reader is a PDF reader from the Chinese company Foxit. A buffer error vulnerability exists in Foxit PDF Reader due to a lack of proper initialization before the product accesses a pointer to an Annotation object. The vulnerability can be exploited to cause malicious code execution by...

7.8CVSS7.9AI score0.00349EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2021/10/15 12:0 a.m.11 views

Foxit PDF Editor 缓冲区错误漏洞

Foxit PDF Editor is a PDF editor from the Chinese company Foxit. A buffer error vulnerability exists in Foxit PDF Editor, which stems from the product's failure to validate the existence of an Annotation object before manipulating it. This vulnerability can be exploited to cause malicious code to...

7.8CVSS7.5AI score0.00349EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2021/10/12 12:0 a.m.5 views

PT-2021-5314 · Foxit · Foxit Pdf Reader +1

Name of the Vulnerable Software and Affected Versions: Foxit PDF Editor affected versions not specified Foxit PDF Reader affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the...

10CVSS8AI score0.00349EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2021/10/06 12:0 a.m.5 views

PT-2021-6002 · Foxit · Foxit Phantompdf +1

Name of the Vulnerable Software and Affected Versions: Foxit PDF Reader affected versions not specified Foxit PhantomPDF affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the...

10CVSS8.3AI score0.00349EPSS
SaveExploits0References7
Source Incite
Source Incite
added 2021/08/20 12:0 a.m.80 views

SRC-2021-0023 : Foxit Reader Annotation transitionToState Use-After-Free Remote Code Execution Vulnerability

Vulnerability Details: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

7.8CVSS7.7AI score0.00751EPSS
SaveExploits1
RedHat Linux
RedHat Linux
added 2021/08/18 9:54 a.m.5 views

cron-utils: template injection allows attackers to inject arbitrary Java EL expressions leading to remote code execution

A flaw was found in cron-utils. End applications passing unsanitized user input which is subsequently parsed by the @Cron annotation can allow an attacker to execute arbitrary expressions using JavaEL which will be implicitly executed by the constraint validator. The highest threat from this...

8.1CVSS7.5AI score0.04204EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
added 2021/08/18 9:13 a.m.5 views

cron-utils: template injection allows attackers to inject arbitrary Java EL expressions leading to remote code execution

A flaw was found in cron-utils. End applications passing unsanitized user input which is subsequently parsed by the @Cron annotation can allow an attacker to execute arbitrary expressions using JavaEL which will be implicitly executed by the constraint validator. The highest threat from this...

8.1CVSS7.5AI score0.04204EPSS
SaveExploits1References4
Rows per page
Query Builder