R7-Officer document editor Arbitrary JavaScript Execution

The vulnerability of the R7-Officer corporate server document editor is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow an attacker to execute arbitrary JavaScript code...

PDF Document Buffer Overflow

The vulnerability of PDF viewing and editing programs such as PDF-XChange Editor, PDF-Tools, and PDF-XChange PRO lies in the issue of operations going beyond the buffer in memory during the processing of U3D files. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

PDF-XChange Editor Buffer Overflow Information Disclosure

The vulnerability of PDF-XChange Editor’s PDF document viewing and editing functionality lies in the issue of operations going beyond the buffer in memory when processing U3D format files. Exploiting this vulnerability can allow attackers to disclose sensitive information that is protected by the...

PDF-XChange Editor Memory Use Code Execution

The vulnerability of PDF-XChange Editor, a program for viewing and editing PDF documents, is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

PDF-XChange Editor Memory Use Code Execution

The vulnerability of PDF-XChange Editor’s PDF document viewing and editing software lies in the use of memory after it is freed. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created EMF file...

CVE-2021-43449

ONLYOFFICE all versions as of 2021-11-08 is vulnerable to Server-Side Request Forgery SSRF. The document editor service can be abused to read and serve arbitrary URLs as a document...

PDF viewer Memory Use Code Execution

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat and Document Cloud, are related to the use of memory after it is freed. Exploiting these vulnerabilities can allow an attacker to execute arbitrary code...

PDF Viewing Information Disclosure

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 are related to information disclosure. Exploiting these vulnerabiliti...

PDF Viewing Privilege Management Code Execution

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 are related to privilege management errors. Exploiting these vulnerabilities can allow a malicio...

PDF Viewer Code Execution

The vulnerability of the MakeAccessible plugin for PDF viewing and editing applications, such as Adobe Reader, Adobe Acrobat Document Cloud, Adobe Reader Document Cloud, and Adobe Acrobat, arises due to an operation that goes beyond the buffer in memory. Exploiting this vulnerability allows a...

PDF viewer Code Execution

The vulnerability in the image processing core of PDF viewer software such as Adobe Reader and Document Cloud, as well as PDF editing software like Adobe Acrobat Document Cloud and Adobe Acrobat, arises due to an operation that goes beyond the buffer in memory. Exploiting this vulnerability allow...