CVE-2025-8616: Authentication Bypass by Capture-replay

A weakness identified in OpenText Advanced Authentication where a Malicious browser plugin can record and replay the user authentication process to bypass Authentication. This issue affects Advanced Authentication on or before 6.5.0...

CVE-2023-38573

A use-after-free vulnerability exists in the way Foxit Reader 12.1.2.15356 handles a signature field. A specially crafted Javascript code inside a malicious PDF document can trigger reuse of a previously freed object, which can lead to memory corruption and result in arbitrary code execution. An...

CVE-2021-21831

A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 10.1.3.37598. A specially crafted PDF document can trigger the reuse of previously freed memory, which can lead to arbitrary code execution. An attacker needs to trick the user to open the...

CVE-2019-5031

An exploitable memory corruption vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader, version 9.4.1.16828. A specially crafted PDF document can trigger an out-of-memory condition which isn't handled properly, resulting in arbitrary code execution. An attacker needs ...

CVE-2020-13548

In Foxit Reader 10.1.0.37527, a specially crafted PDF document can trigger reuse of previously free memory which can lead to arbitrary code execution. An attacker needs to trick the user to open the malicious file to trigger this vulnerability. If the browser plugin extension is enabled, visiting...

CVE-2024-49576

A use-after-free vulnerability exists in the way Foxit Reader 2024.3.0.26795 handles a checkbox CBFWidget object. A specially crafted Javascript code inside a malicious PDF document can trigger this vulnerability, which can lead to memory corruption and result in arbitrary code execution. An...

CVE-2024-28888

A use-after-free vulnerability exists in the way Foxit Reader 2024.1.0.23997 handles a checkbox field object. A specially crafted Javascript code inside a malicious PDF document can trigger this vulnerability, which can lead to memory corruption and result in arbitrary code execution. An attacker...

CVE-2024-49576

A use-after-free vulnerability exists in the way Foxit Reader 2024.3.0.26795 handles a checkbox CBFWidget object. A specially crafted Javascript code inside a malicious PDF document can trigger this vulnerability, which can lead to memory corruption and result in arbitrary code execution. An...

CVE-2024-47810

A use-after-free vulnerability exists in the way Foxit Reader 2024.3.0.26795 handles a 3D page object. A specially crafted Javascript code inside a malicious PDF document can trigger this vulnerability, which can lead to memory corruption and result in arbitrary code execution. An attacker needs ...

CVE-2024-47810

A use-after-free vulnerability exists in the way Foxit Reader 2024.3.0.26795 handles a 3D page object. A specially crafted Javascript code inside a malicious PDF document can trigger this vulnerability, which can lead to memory corruption and result in arbitrary code execution. An attacker needs ...

CVE-2024-49576

A use-after-free vulnerability exists in the way Foxit Reader 2024.3.0.26795 handles a checkbox CBFWidget object. A specially crafted Javascript code inside a malicious PDF document can trigger this vulnerability, which can lead to memory corruption and result in arbitrary code execution. An...

CVE-2024-47810

A use-after-free vulnerability exists in the way Foxit Reader 2024.3.0.26795 handles a 3D page object. A specially crafted Javascript code inside a malicious PDF document can trigger this vulnerability, which can lead to memory corruption and result in arbitrary code execution. An attacker needs ...

PT-2024-9691 · Foxit · Foxit Reader

Name of the Vulnerable Software and Affected Versions: Foxit Reader version 2024.3.0.26795 Description: A use-after-free vulnerability exists in the way Foxit Reader handles a checkbox CBF Widget object. This vulnerability can be triggered by a specially crafted Javascript code inside a malicious...

PT-2024-10303 · Foxit · Foxit Reader

Name of the Vulnerable Software and Affected Versions: Foxit Reader version 2024.3.0.26795 Description: A use-after-free vulnerability exists in the way Foxit Reader handles a 3D page object. This can be triggered by a specially crafted Javascript code inside a malicious PDF document, leading to...

com.googlecode.struts2-conversation:struts2-conversation-config-browser-extension (1.7.2), com.jgeppert.struts2.jquery:struts2-jquery-chart-plugin (3.5.0) +47 more potentially affected by CVE-2024-53677 via org.apache.struts:struts2-core (2.3.7)

org.apache.struts:struts2-core MAVEN version 2.3.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.struts:struts2-core and may be impacted: - com.googlecode.struts2-conversation:struts2-conversation-config-browser-extension 1.7.2 -...

com.moomanow.web.struts:struts-moo-authentication-tag (>=0.0.9, <=0.0.12), com.moomanow.web.struts:struts-moo-select-tag (>=0.0.11, <=0.0.12) +39 more potentially affected by CVE-2024-53677 via org.apache.struts:struts2-core (2.5.2)

org.apache.struts:struts2-core MAVEN version 2.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.struts:struts2-core and may be impacted: - com.moomanow.web.struts:struts-moo-authentication-tag =0.0.9, =0.0.11, =0.0.9, =0.0.1, =0.0.4,...

com.google.inject.extensions:guice-struts2-plugin (2.0), com.google.inject.integration:guice-struts2-plugin (1.0) +20 more potentially affected by CVE-2024-53677 via org.apache.struts:struts2-core (2.0.5)

org.apache.struts:struts2-core MAVEN version 2.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.struts:struts2-core and may be impacted: - com.google.inject.extensions:guice-struts2-plugin 2.0 -...

org.apache.struts:struts2-apps (2.0.12), org.apache.struts:struts2-blank (2.0.12) +19 more potentially affected by CVE-2024-53677 via org.apache.struts:struts2-core (2.0.12)

org.apache.struts:struts2-core MAVEN version 2.0.12 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.struts:struts2-core and may be impacted: - org.apache.struts:struts2-apps 2.0.12 - org.apache.struts:struts2-blank 2.0.12 -...

org.apache.continuum:continuum-core (>=1.3.3, <=1.4.0), org.apache.continuum:continuum-webapp (>=1.3.1, <=1.4.0) +19 more potentially affected by CVE-2024-53677 via org.apache.struts:struts2-core (2.0.14)

org.apache.struts:struts2-core MAVEN version 2.0.14 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.struts:struts2-core and may be impacted: - org.apache.continuum:continuum-core =1.3.3, =1.3.1, =1.4.0 - org.apache.struts:struts2-apps 2.0.14...

org.apache.struts:struts2-apps (2.0.11), org.apache.struts:struts2-assembly (2.0.11) +18 more potentially affected by CVE-2024-53677 via org.apache.struts:struts2-core (2.0.11)

org.apache.struts:struts2-core MAVEN version 2.0.11 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.struts:struts2-core and may be impacted: - org.apache.struts:struts2-apps 2.0.11 - org.apache.struts:struts2-assembly 2.0.11 -...