Lucene search
K

610 matches found

Talos
Talos
added 2020/01/16 12:0 a.m.46 views

Foxit PDF Reader Javascript createTemplate Invalid Page Code Execution Vulnerability

Summary An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s Foxit PDF Reader version 9.7.0.29435. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to...

8.8CVSS8.6AI score0.03867EPSS
Exploits1
CNVD
CNVD
added 2019/12/10 12:0 a.m.4 views

Unspecified Vulnerability in CKEditor Image Uploader and Browser

CKEditor is a set of open source, web-based text editor. Image Uploader and Browser is one of the image upload and download plugin. A security vulnerability exists in the pluginconfig.php file in versions of Image Uploader and Browser prior to 4.1.9 used in CKEditor, which stems from the program...

9.8CVSS6.9AI score0.00853EPSS
Exploits0References1
Fedora
Fedora
added 2019/12/01 1:4 a.m.18 views

[SECURITY] Fedora 30 Update: djvulibre-3.5.27-16.fc30

DjVu is a web-centric format and software platform for distributing documen ts and images. DjVu can advantageously replace PDF, PS, TIFF, JPEG, and GIF for distributing scanned documents, digital documents, or high-resolution pictu res. DjVu content downloads faster, displays and renders faster,...

7.5CVSS2.9AI score0.04581EPSS
Exploits1
Fedora
Fedora
added 2019/11/30 12:58 a.m.25 views

[SECURITY] Fedora 31 Update: djvulibre-3.5.27-17.fc31

DjVu is a web-centric format and software platform for distributing documen ts and images. DjVu can advantageously replace PDF, PS, TIFF, JPEG, and GIF for distributing scanned documents, digital documents, or high-resolution pictu res. DjVu content downloads faster, displays and renders faster,...

7.5CVSS2.9AI score0.04581EPSS
Exploits1
Fedora
Fedora
added 2019/11/18 1:52 a.m.38 views

[SECURITY] Fedora 29 Update: djvulibre-3.5.27-14.fc29

DjVu is a web-centric format and software platform for distributing documen ts and images. DjVu can advantageously replace PDF, PS, TIFF, JPEG, and GIF for distributing scanned documents, digital documents, or high-resolution pictu res. DjVu content downloads faster, displays and renders faster,...

5.5CVSS2.9AI score0.00862EPSS
Exploits4
NVD
NVD
added 2019/10/02 4:15 p.m.16 views

CVE-2019-5031

An exploitable memory corruption vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader, version 9.4.1.16828. A specially crafted PDF document can trigger an out-of-memory condition which isn't handled properly, resulting in arbitrary code execution. An attacker needs ...

8.8CVSS8.9AI score0.01021EPSS
Exploits1References1
OSV
OSV
added 2019/10/02 4:15 p.m.2 views

CVE-2019-5031

An exploitable memory corruption vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader, version 9.4.1.16828. A specially crafted PDF document can trigger an out-of-memory condition which isn't handled properly, resulting in arbitrary code execution. An attacker needs ...

8.8CVSS7.4AI score
Exploits0References1
Prion
Prion
added 2019/10/02 4:15 p.m.13 views

Memory corruption

An exploitable memory corruption vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader, version 9.4.1.16828. A specially crafted PDF document can trigger an out-of-memory condition which isn't handled properly, resulting in arbitrary code execution. An attacker needs ...

6.8CVSS8.9AI score0.01021EPSS
Exploits1References1Affected Software2
Cvelist
Cvelist
added 2019/10/02 3:55 p.m.20 views

CVE-2019-5031

An exploitable memory corruption vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader, version 9.4.1.16828. A specially crafted PDF document can trigger an out-of-memory condition which isn't handled properly, resulting in arbitrary code execution. An attacker needs ...

8.8CVSS8.9AI score0.01021EPSS
Exploits1References1
CVE
CVE
added 2019/10/02 3:55 p.m.91 views

CVE-2019-5031

CVE-2019-5031 affects Foxit PDF Reader, version 9.4.1.16828. The vulnerability is a memory corruption in the V8/JavaScript engine that can be triggered by a specially crafted PDF, causing an out-of-memory condition and arbitrary code execution. Exploitation requires the user to open the malicious...

8.8CVSS8.8AI score0.01021EPSS
Exploits1References1Affected Software2
AlpineLinux
AlpineLinux
added 2019/10/02 3:55 p.m.16 views

CVE-2019-5031

An exploitable memory corruption vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader, version 9.4.1.16828. A specially crafted PDF document can trigger an out-of-memory condition which isn't handled properly, resulting in arbitrary code execution. An attacker needs ...

8.8CVSS7.4AI score0.01021EPSS
Exploits1References1
OSV
OSV
added 2019/08/21 12:15 p.m.1 views

CVE-2016-10897

The sermon-browser plugin before 0.45.16 for WordPress has multiple XSS issues...

6.1CVSS5.8AI score
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2019/06/11 12:0 a.m.35 views

Adobe Flash Player <= 32.0.0.192 (APSB19-30)

The version of Adobe Flash Player installed on the remote Windows host is equal or prior to version 32.0.0.192. It is therefore affected by the following vulnerabilities : - An unspecified flaw exists that allows an unspecified use-after-free to occur. An unauthenticated, remote attacker could...

8.8CVSS8.8AI score0.10437EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2019/02/15 12:0 a.m.20 views

Apache Struts Config Browser Plugin Detection

Binary data strutsconfigbrowserdetect.nbin...

7.3AI score
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2019/02/12 12:0 a.m.127 views

Adobe Flash Player <= 32.0.0.114 (APSB19-06)

The version of Adobe Flash Player installed on the remote Windows host is equal or prior to version 32.0.0.114. It is therefore affected by an information disclosure vulnerability. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...

6.5CVSS7.1AI score0.01229EPSS
Exploits0References3
NVD
NVD
added 2019/01/30 10:29 p.m.14 views

CVE-2018-3956

An exploitable out-of-bounds read vulnerability exists in the handling of certain XFA element attributes of Foxit Software's PDF Reader version 9.1.0.5096. A specially crafted PDF document can trigger an out-of-bounds read, which can disclose sensitive memory content and aid in exploitation when...

7.1CVSS6.9AI score0.1606EPSS
Exploits1References1
OSV
OSV
added 2019/01/30 10:29 p.m.1 views

CVE-2018-3956

An exploitable out-of-bounds read vulnerability exists in the handling of certain XFA element attributes of Foxit Software's PDF Reader version 9.1.0.5096. A specially crafted PDF document can trigger an out-of-bounds read, which can disclose sensitive memory content and aid in exploitation when...

7.1CVSS5.6AI score0.1606EPSS
Exploits1References1
Prion
Prion
added 2019/01/30 10:29 p.m.16 views

Out-of-bounds

An exploitable out-of-bounds read vulnerability exists in the handling of certain XFA element attributes of Foxit Software's PDF Reader version 9.1.0.5096. A specially crafted PDF document can trigger an out-of-bounds read, which can disclose sensitive memory content and aid in exploitation when...

5.8CVSS6.6AI score0.1606EPSS
Exploits1References1Affected Software2
CVE
CVE
added 2019/01/30 10:0 p.m.69 views

CVE-2018-3956

CVE-2018-3956 is an out-of-bounds read/write vulnerability in Foxit Software’s PDF Reader/PhantomPDF related to handling of XFA element attributes. Affected products include Foxit Reader and Foxit PhantomPDF prior to version 9.4, with a specific reference to Foxit PDF Reader 9.1.0.5096. The vulne...

7.1CVSS6.7AI score0.1606EPSS
Exploits1References1Affected Software2
Cvelist
Cvelist
added 2019/01/30 10:0 p.m.18 views

CVE-2018-3956

An exploitable out-of-bounds read vulnerability exists in the handling of certain XFA element attributes of Foxit Software's PDF Reader version 9.1.0.5096. A specially crafted PDF document can trigger an out-of-bounds read, which can disclose sensitive memory content and aid in exploitation when...

6.8CVSS6.8AI score0.1606EPSS
Exploits1References1
Rows per page
Query Builder