Lucene search
K

218 matches found

Prion
Prion
added 2021/02/09 6:15 p.m.19 views

Design/Logic Flaw

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Studio Photo 3.6.6.922. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...

4.3CVSS3.3AI score0.02687EPSS
Exploits0References2Affected Software1
Prion
Prion
added 2021/02/09 6:15 p.m.19 views

Design/Logic Flaw

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Studio Photo 3.6.6.922. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...

4.3CVSS7.3AI score0.02848EPSS
Exploits0References2Affected Software1
Prion
Prion
added 2021/02/09 6:15 p.m.13 views

Design/Logic Flaw

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Studio Photo 3.6.6.922. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...

6.8CVSS7.3AI score0.02865EPSS
Exploits0References2Affected Software1
CVE
CVE
added 2021/02/09 3:46 p.m.48 views

CVE-2020-17436

Foxit Studio Photo 3.6.6.922 is affected by a CMP file parsing vulnerability causing an out-of-bounds read in the target process. The issue arises from insufficient validation of user-supplied data and can be leveraged with other vulnerabilities to execute code in the context of the current proce...

7.8CVSS7.2AI score0.02865EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2021/02/09 3:46 p.m.19 views

CVE-2020-17436

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Studio Photo 3.6.6.922. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...

3.3CVSS7.3AI score0.02865EPSS
Exploits0References2
Cvelist
Cvelist
added 2021/02/09 3:46 p.m.19 views

CVE-2020-17433

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Studio Photo 3.6.6.922. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...

3.3CVSS7.3AI score0.02865EPSS
Exploits0References2
Cvelist
Cvelist
added 2021/02/09 3:46 p.m.18 views

CVE-2020-17429

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Studio Photo 3.6.6.922. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...

3.3CVSS7.3AI score0.02848EPSS
Exploits0References2
CVE
CVE
added 2021/02/09 3:46 p.m.46 views

CVE-2020-17428

Foxit Studio Photo CMP file parsing vulnerability (CVE-2020-17428) allows information disclosure via a CMP data handling flaw that can read past the end of an allocated structure. Evidence from ZDI-20-1339 confirms an out-of-bounds read, enabling leakage when a user visits a malicious page or ope...

4.3CVSS3.3AI score0.02687EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2021/02/09 3:46 p.m.18 views

CVE-2020-17428

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Studio Photo 3.6.6.922. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...

3.3CVSS3.3AI score0.02687EPSS
Exploits0References2
CNNVD
CNNVD
added 2021/02/09 12:0 a.m.4 views

Foxit Studio Photo 缓冲区错误漏洞

Foxit Studio Photo is a set of image editing software from the Chinese company Foxit Foxit. An information disclosure vulnerability exists in the handling of CMP files in Foxit Studio Photo 3.6.6.930 and earlier versions. The vulnerability stems from a lack of proper validation of user-supplied...

7.8CVSS6.1AI score0.02865EPSS
Exploits0References2
OSV
OSV
added 2021/01/13 12:1 a.m.9 views

OSV-2018-179 Heap-buffer-overflow in OT::post::accelerator_t::cmp_gids

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11290 Crash type: Heap-buffer-overflow READ 5 Crash state: OT::post::acceleratort::cmpgids sortrcmpswap sortrsimple...

7.2AI score
Exploits0References1
OSV
OSV
added 2021/01/13 12:0 a.m.12 views

OSV-2018-73 Stack-buffer-overflow in hb_array_t<char const>::cmp

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11908 Crash type: Stack-buffer-overflow READ 4 Crash state: hbarrayt::cmp OT::post::acceleratort::cmpkey hbbsearchr...

7.2AI score
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2020/12/24 12:0 a.m.46 views

GLSA-202012-13 : OpenSSL: Denial of service

The remote host is affected by the vulnerability described in GLSA-202012-13 OpenSSL: Denial of service A NULL pointer dereference flaw was found in OpenSSL. Impact : A remote attacker, able to control the arguments of the GENERALNAMEcmp function in an application linked against OpenSSL, could...

5.9CVSS6.9AI score0.07201EPSS
Exploits3References2
RedHat Linux
RedHat Linux
added 2020/12/21 12:21 p.m.2 views

openssl: EDIPARTYNAME NULL pointer de-reference

A null pointer dereference flaw was found in openssl. A remote attacker, able to control the arguments of the GENERALNAMEcmp function, could cause the application, compiled with openssl to crash resulting in a denial of service. The highest threat from this vulnerability is to system availability...

5.9CVSS6.8AI score0.07201EPSS
Exploits3References5
RedHat Linux
RedHat Linux
added 2020/12/17 5:1 p.m.1 views

openssl: EDIPARTYNAME NULL pointer de-reference

A null pointer dereference flaw was found in openssl. A remote attacker, able to control the arguments of the GENERALNAMEcmp function, could cause the application, compiled with openssl to crash resulting in a denial of service. The highest threat from this vulnerability is to system availability...

5.9CVSS6.8AI score0.07201EPSS
Exploits3References5
Tenable Nessus
Tenable Nessus
added 2020/12/11 12:0 a.m.30 views

F5 Networks BIG-IP : F5 TMM vulnerability (K05204103)

An early syncookie leaks forwarding flows if the virtual server has Clustered Multiprocessing CMPdisabled and the BIG-IP AFM module is provisioned.CVE-2020-5950 Impact The BIG-IP system resources may be excessively consumed and potentially leadto a failover event.Traffic processing is disrupted...

5.3CVSS5.7AI score0.01035EPSS
Exploits0References2
CNVD
CNVD
added 2020/10/29 12:0 a.m.4 views

Foxit Studio Photo Information Disclosure Vulnerability (CNVD-2020-59777)

Foxit Studio Photo is a set of image editing software from the Chinese company Foxit Foxit. An information disclosure vulnerability exists in the handling of CMP files in Foxit Studio Photo 3.6.6.930 and earlier versions. The vulnerability stems from a lack of proper validation of user-supplied...

4.3CVSS6AI score0.02687EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/10/28 12:0 a.m.24 views

Foxit Studio Photo CMP File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Studio Photo. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS1.9AI score0.02865EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/10/28 12:0 a.m.29 views

Foxit Studio Photo CMP File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Studio Photo. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS1.1AI score0.02848EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/10/28 12:0 a.m.31 views

Foxit Studio Photo CMP File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Studio Photo. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS1.9AI score0.02865EPSS
Exploits0References1
Rows per page
Query Builder