Lucene search
K

17 matches found

CNNVD
CNNVD
added 2024/11/22 12:0 a.m.3 views

Foxit PDF Reader 资源管理错误漏洞

Foxit PDF Reader is a PDF reader from the Chinese company Foxit. A resource management error vulnerability exists in Foxit PDF Reader, which arises from manipulating AcroForms without verifying the existence of the object, which could lead to remote code execution...

7.8CVSS7.7AI score0.00497EPSS
Exploits0References1
Openbugbounty
Openbugbounty
added 2024/07/25 8:36 a.m.5 views

abczech.cz Cross Site Scripting vulnerability OBB-3950614

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
Exploits0
CNNVD
CNNVD
added 2022/02/10 12:0 a.m.3 views

Foxit PDF Reader 资源管理错误漏洞

Foxit PDF Reader is a PDF reader from Foxit China.A security vulnerability exists in Foxit PDF Reader, which stems from the lack of verification of the existence of an object before performing operations on it, and can be exploited by attackers to execute arbitrary code in the context of the...

6.5CVSS6.1AI score0.00506EPSS
Exploits0References5
CNNVD
CNNVD
added 2022/02/10 12:0 a.m.2 views

Foxit PDF Reader 资源管理错误漏洞

Foxit PDF Reader is a PDF reader from Foxit, a Chinese company. Foxit PDF Reader is vulnerable due to a lack of verification of the existence of an object before performing operations on it, which can be exploited to execute code in the context of the current process...

8.8CVSS5.9AI score0.0066EPSS
Exploits0References5
CNNVD
CNNVD
added 2022/02/10 12:0 a.m.2 views

Foxit PDF Reader 资源管理错误漏洞

Foxit PDF Reader is a PDF reader from Foxit China.A security vulnerability exists in Foxit PDF Reader, which stems from the lack of verification of the existence of an object before performing operations on it, and can be exploited by attackers to execute code in the context of the current proces...

8.8CVSS5.9AI score0.0066EPSS
Exploits0References5
CNNVD
CNNVD
added 2021/10/15 12:0 a.m.3 views

Foxit PDF Editor 缓冲区错误漏洞

Foxit PDF Editor is China Foxit Foxit company a PDF editor. Foxit PDF has a buffer overflow vulnerability that originates from not verifying the existence of an object before performing an operation on it, which can be exploited by a remote attacker to execute arbitrary code on an affected PDF...

7.8CVSS6.8AI score0.01717EPSS
Exploits0References4
CNVD
CNVD
added 2021/08/02 12:0 a.m.17 views

Foxit PDF Reader Post-release Reuse Vulnerability (CNVD-2021-64090)

Foxit PDF Reader formerly known as Foxit Reader is a set of software used to read PDF format files, developed by Foxit Software Fujian. The vulnerability stems from not verifying the existence of the object before performing operations on it. An attacker could exploit this vulnerability to execut...

6.8CVSS3.3AI score0.03065EPSS
Exploits0Affected Software1
CNVD
CNVD
added 2021/08/02 12:0 a.m.22 views

Foxit PDF Reader Post-release Reuse Vulnerability (CNVD-2021-79771)

Foxit PDF Reader formerly known as Foxit Reader is a set of software used to read PDF format files, developed by Foxit Software Fujian. The vulnerability stems from not verifying the existence of the object before performing operations on it. An attacker could exploit this vulnerability to execut...

6.8CVSS3.3AI score0.03065EPSS
Exploits0Affected Software1
Openbugbounty
Openbugbounty
added 2017/10/06 6:1 p.m.18 views

concurso.cnice.mec.es Open Redirect vulnerability

Vulnerable URL: http://concurso.cnice.mec.es/cnice2006/material077/oca/flashdetection.swf?flashContentURL=https://openbugbounty.org Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 07.01.2018 Vulnerability type:| Open Redirect Vulnerability status:|...

6.8AI score
Exploits0
Openbugbounty
Openbugbounty
added 2017/10/02 4:54 p.m.18 views

secure1.infinityprosports.com Open Redirect vulnerability

Vulnerable URL: http://secure1.infinityprosports.com/virtual/brooklyncyclones.com/sites/200801/www/en/tracker/index.html?t=sponsorid=55=data%3Atext%2Fhtml%3Bbase64%2CPHNjcmlwdD5hbGVydCgvT1BFTkJVR0JPVU5UWS8pPC9zY3JpcHQ%2B Details: Description| Value ---|--- Patched:| Verification in progress Lates...

6.8AI score
Exploits0
Openbugbounty
Openbugbounty
added 2017/04/24 11:11 a.m.12 views

ivybridge-today.co.uk XSS vulnerability

Vulnerable URL: http://www.ivybridge-today.co.uk/search.cfm?sectionIs=search=LocalNews=2011="= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 6664122 VIP website status:| No...

6.4AI score
Exploits0
Tenable Nessus
Tenable Nessus
added 2016/06/28 12:0 a.m.49 views

Ubuntu 16.04 LTS : Linux kernel vulnerabilities (USN-3016-1)

The remote Ubuntu 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3016-1 advisory. Jesse Hertz and Tim Newsham discovered that the Linux netfilter implementation did not correctly perform validation when handling 32 bit compatibility...

7.8CVSS7.1AI score0.05493EPSS
Exploits15References9
Prion
Prion
added 2016/05/23 10:59 a.m.27 views

Null pointer dereference

The tipcnlpubldump function in net/tipc/socket.c in the Linux kernel through 4.6 does not verify socket existence, which allows local users to cause a denial of service NULL pointer dereference and system crash or possibly have unspecified other impact via a dumpit operation...

7.2CVSS7.2AI score0.00114EPSS
Exploits0References15Affected Software3
exploitpack
exploitpack
added 2002/11/29 12:0 a.m.17 views

SUIDPerl 5.6 - Information Disclosure

SUIDPerl 5.6 - Information Disclosure source: https://www.securityfocus.com/bid/6282/info An information disclosure vulnerability has been reported for SuidPerl. Reportedly, it is possible for an attacker to determine whether files exist in non-accessible directories. An attacker can exploit this...

7.2AI score
Exploits0
Symantec
Symantec
added 2000/11/24 12:0 a.m.29 views

Lotus Notes Client R5 File Existence Verification Vulnerability

Description Lotus Notes Client R5 is a messaging and collaboration tool that contains a built in web browser. The web browser implements a Java Virtual Machine VM designed specifically for Lotus Notes. A security vulnerability exists in the Execution Control List ECL feature within the Java VM th...

0.6AI score
Exploits0References2
exploitpack
exploitpack
added 2000/01/31 12:0 a.m.13 views

Microsoft Virtual Machine 2000 - Series3000 Series getSystemResource

Microsoft Virtual Machine 2000 - Series3000 Series getSystemResource source: https://www.securityfocus.com/bid/957/info Microsoft's Java Virtual Machine will allow the reading of local file information by a remote Java application. This can be done two ways: 1: Via the getSystemResourceAsStream...

7.4AI score
Exploits0
Exploit DB
Exploit DB
added 2000/01/31 12:0 a.m.23 views

Microsoft Virtual Machine 2000 - Series/3000 Series getSystemResource

source: https://www.securityfocus.com/bid/957/info Microsoft's Java Virtual Machine will allow the reading of local file information by a remote Java application. This can be done two ways: 1: Via the getSystemResourceAsStream function. The filename must be specified, and must be in certain paths...

7.4AI score
Exploits0
Rows per page
Query Builder