EUVD-2026-25824

Improper control flow management allows a crafted document action chain to cause modal dialog reentry on the main thread, resulting in UI freeze and denial of service...

CVE-2026-5938

Improper control flow management allows a crafted document action chain to cause modal dialog reentry on the main thread, resulting in UI freeze and denial of service...

SUSE CVE-2020-9359

KDE Okular before 1.10.0 allows code execution via an action link in a PDF document...

Arbitrary Code Execution

okular is vulnerable to arbitrary code execution. An attacker is able to execute arbitrary code via an action link in a PDF document...

Adobe Acrobat Pro DC WillSave Action Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Acrobat DC Pro. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handlin...

CVE-2015-6689

Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to execute arbitrary code via ...

Adobe Acrobat Pro WillSave document action Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Acrobat Pro. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling o...

Sql injection

SQL injection vulnerability in index.php in Tribiq CMS Community 5.0.10B and 5.0.11E allows remote attackers to execute arbitrary SQL commands via the cID parameter in a document action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

CVE-2008-5960

Affected software: Tribiq CMS Community 5.0.10B and 5.0.11E. Vulnerability: SQL injection in index.php via the cID parameter in a document action. This allows remote attackers to execute arbitrary SQL commands. Root cause/impact: Not further detailed beyond the injection via cID; impacts confiden...