Lucene search
K

2672 matches found

CNVD
CNVD
added 2018/04/28 12:0 a.m.2 views

Foxit Reader XFA boundItem Method Remote Code Execution Vulnerability

Foxit Reader is a small PDF document viewer and printing program. Foxit Reader has a security vulnerability in the XFA boundItem event of the Button element, which can be exploited by an attacker to execute arbitrary code in the context of the current process due to a lack of validation before...

8.8CVSS7.7AI score0.00367EPSS
Exploits0References1
CNVD
CNVD
added 2018/04/28 12:0 a.m.0 views

Foxit Reader XFA execEvent Method Remote Code Execution Vulnerability

Foxit Reader is a small PDF document viewer and printing program. Foxit Reader has a security vulnerability in the XFA execEvent event of the Button element, which can be exploited by an attacker to execute arbitrary code in the context of the current process due to a lack of validation before...

8.8CVSS7.7AI score0.00529EPSS
Exploits0References1
CNVD
CNVD
added 2018/04/28 12:0 a.m.5 views

Foxit Reader XFA Button resolveNode Remote Code Execution Vulnerability

Foxit Reader is a small PDF document viewer and printing program. Foxit Reader has a security vulnerability in the handling of the XFA Button resolveNode method, which can be exploited by an attacker to execute arbitrary code in the context of the current process due to a lack of authentication...

8.8CVSS7.9AI score0.00367EPSS
Exploits0References1
CNVD
CNVD
added 2018/04/28 12:0 a.m.1 views

Foxit Reader XFA Button formattedValue Remote Code Execution Vulnerability

Foxit Reader is a small PDF document viewer and printing program. Foxit Reader has a security vulnerability in the handling of the XFA Button formattedValue element, which can be exploited by an attacker to execute arbitrary code in the context of the current process due to a lack of validation...

8.8CVSS7.7AI score0.00367EPSS
Exploits0References1
CNVD
CNVD
added 2018/04/28 12:0 a.m.2 views

Foxit Reader Text Annotations Remote Code Execution Vulnerability

Foxit Reader is a small PDF document viewer and printing program. Foxit Reader has a security vulnerability in the handling of the XFA Button element, which can be exploited by an attacker to execute arbitrary code in the context of the current process due to a failure to validate an object befor...

8.8CVSS7.7AI score0.00328EPSS
Exploits0References1
CNVD
CNVD
added 2018/04/28 12:0 a.m.3 views

Foxit Reader XFA Button Remote Code Execution Vulnerability (CNVD-2018-09950)

Foxit Reader is a small PDF document viewer and printing program. Foxit Reader has a security vulnerability in the handling of the XFA Button element, which can be exploited by an attacker to execute arbitrary code in the context of the current process due to a failure to validate an object befor...

8.8CVSS7.7AI score0.00367EPSS
Exploits0References1
CNVD
CNVD
added 2018/04/28 12:0 a.m.3 views

Foxit Reader XFA Button Remote Code Execution Vulnerability

Foxit Reader is a small PDF document viewer and printing program. Foxit Reader has a security vulnerability in the handling of the XFA Button element, which can be exploited by an attacker to execute arbitrary code in the context of the current process due to a failure to validate an object befor...

8.8CVSS7.7AI score0.00367EPSS
Exploits0References1
CNVD
CNVD
added 2018/04/28 12:0 a.m.2 views

Foxit Reader XFA Button resolveNodes Remote Code Execution Vulnerability

Foxit Reader is a small PDF document viewer and printing program. Foxit Reader has a security vulnerability in the handling of the XFA Button resolveNodes element, which can be exploited to execute arbitrary code in the context of the current process, due to a lack of validation before performing...

8.8CVSS7.7AI score0.00367EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2018/04/20 12:0 a.m.29 views

Foxit Reader XFA Button formattedValue Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of XFA...

6.8CVSS2AI score0.00367EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2018/04/20 12:0 a.m.19 views

Foxit Reader XFA Button boundItem Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the XFA boundItem...

6.8CVSS2.6AI score0.00367EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2018/04/20 12:0 a.m.25 views

Foxit Reader XFA Button y Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of XFA...

6.8CVSS1.9AI score0.00367EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2018/04/20 12:0 a.m.36 views

Foxit Reader XFA Button execEvent Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the XFA execEvent...

6.8CVSS2.5AI score0.00529EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2018/04/20 12:0 a.m.23 views

Foxit Reader XFA Button resolveNode Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the XFA resolveNode...

6.8CVSS2.3AI score0.00367EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2018/04/20 12:0 a.m.25 views

Foxit Reader XFA Button resolveNodes Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the XFA resolveNode...

6.8CVSS2.3AI score0.00367EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2018/04/20 12:0 a.m.20 views

Foxit Reader XFA Button resetData Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of XFA...

6.8CVSS4.1AI score0.00328EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2018/04/20 12:0 a.m.21 views

Foxit Reader XFA Button title Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of XFA...

6.8CVSS1.8AI score0.00367EPSS
Exploits0References1
OSV
OSV
added 2018/04/10 5:29 a.m.15 views

CVE-2018-9840

The Open Whisper Signal app before 2.23.2 for iOS allows physically proximate attackers to bypass the screen locker feature via certain rapid sequences of actions that include app opening, clicking on cancel, and using the home button...

6.8CVSS6.9AI score
Exploits0References3
CNVD
CNVD
added 2018/04/10 12:0 a.m.1 views

Open Whisper Signal Screen Lock Bypass Vulnerability

Signal is an instant messaging application for private communication with friends. A screen lock bypass vulnerability exists in Open Whisper Signal for iOS before 2.23.2. An immediate attacker can exploit the vulnerability to bypass the screen lock feature through a certain sequence of quick...

6.8CVSS6.5AI score0.00058EPSS
Exploits0References1
CNVD
CNVD
added 2018/02/08 12:0 a.m.3 views

Ring video doorbells information leakage vulnerability

Ring formerly known as DoorBot video doorbells is a video-enabled smart doorbell from Ring, USA. A security vulnerability exists in Ring video doorbells. The vulnerability can be exploited by a remote attacker to obtain wireless network configuration information by pressing and holding the Setup...

4.6CVSS6.7AI score0.0015EPSS
Exploits0References1
Hacker One
Hacker One
added 2017/11/16 8:44 a.m.20 views

Infogram: Persistent XSS in share button

Persistent XSS in "Share" button was found: 1. In custom link field for "Share" button add: ". 2. Share the infographic publicly, navigate to its public URL and click the "Share" button. 3. See that pop-up window activates...

6.3AI score
Exploits0
Rows per page
Query Builder