Lucene search
+L

2199 matches found

OSV
OSV
added 2021/08/04 4:15 p.m.11 views

CVE-2021-34841

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS7.6AI score0.04EPSS
SaveExploits0References2
CNVD
CNVD
added 2021/08/02 12:00 a.m.73 views

Foxit PDF Reader Post-release Reuse Vulnerability (CNVD-2021-79771)

Foxit PDF Reader formerly known as Foxit Reader is a set of software used to read PDF format files, developed by Foxit Software Fujian. The vulnerability stems from not verifying the existence of the object before performing operations on it. An attacker could exploit this vulnerability to execut...

6.8CVSS3.3AI score0.04EPSS
SaveExploits0Affected Software1
CNVD
CNVD
added 2021/08/02 12:00 a.m.68 views

Foxit PDF Reader Post-release Reuse Vulnerability (CNVD-2021-64090)

Foxit PDF Reader formerly known as Foxit Reader is a set of software used to read PDF format files, developed by Foxit Software Fujian. The vulnerability stems from not verifying the existence of the object before performing operations on it. An attacker could exploit this vulnerability to execut...

6.8CVSS3.3AI score0.03769EPSS
SaveExploits0Affected Software1
CNVD
CNVD
added 2021/08/02 12:00 a.m.70 views

Foxit PDF Reader Post-release Reuse Vulnerability (CNVD-2021-64091)

Foxit PDF Reader formerly known as Foxit Reader is a set of software used to read PDF format files, developed by Foxit Software Fujian. The vulnerability stems from not verifying the existence of the object before performing operations on it. An attacker could exploit this vulnerability to execut...

6.8CVSS3.3AI score0.04EPSS
SaveExploits0Affected Software1
CNNVD
CNNVD
added 2021/07/30 12:00 a.m.16 views

Foxit PDF Reader 资源管理错误漏洞

Foxit PDF Reader is a PDF reader from the Chinese company Foxit. Foxit PDF Reader suffers from a Resource Management Error vulnerability, which is caused by failing to validate the existence of an object before performing an operation on it, and can be exploited by an attacker to execute code in...

7.8CVSS7.7AI score0.95655EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2021/07/30 12:00 a.m.14 views

Foxit PDF Reader 资源管理错误漏洞

Foxit PDF Reader formerly known as Foxit Reader is a set of software used to read PDF format files, developed by Foxit Software Fujian. The vulnerability stems from not verifying the existence of the object before performing operations on it. An attacker could exploit this vulnerability to execut...

7.8CVSS8.2AI score0.04EPSS
SaveExploits0References3
Zero Day Initiative
Zero Day Initiative
added 2021/07/30 12:00 a.m.51 views

Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

7.8CVSS2.3AI score0.04EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/07/30 12:00 a.m.14 views

Foxit PDF Reader 资源管理错误漏洞

Foxit PDF Reader formerly known as Foxit Reader is a set of software used to read PDF format files, developed by Foxit Software Fujian. The vulnerability stems from not verifying the existence of the object before performing operations on it. An attacker could exploit this vulnerability to execut...

7.8CVSS8.2AI score0.03769EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2021/07/30 12:00 a.m.12 views

Foxit PDF Reader 资源管理错误漏洞

Foxit PDF Reader formerly known as Foxit Reader is a set of software used to read PDF format files, developed by Foxit Software Fujian. The vulnerability stems from not verifying the existence of the object before performing operations on it. An attacker could exploit this vulnerability to execut...

7.8CVSS8.2AI score0.04EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2021/07/30 12:00 a.m.14 views

Foxit PDF Reader 资源管理错误漏洞

Foxit PDF Reader formerly known as Foxit Reader is a set of software used to read PDF format files, developed by Foxit Software Fujian. The vulnerability stems from not verifying the existence of the object before performing operations on it. An attacker could exploit this vulnerability to execut...

7.8CVSS8.2AI score0.03103EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2021/07/30 12:00 a.m.16 views

Foxit PDF Reader 资源管理错误漏洞

Foxit PDF Reader formerly known as Foxit Reader is a set of software used to read PDF format files, developed by Foxit Software Fujian. The vulnerability stems from not verifying the existence of the object before performing operations on it. An attacker could exploit this vulnerability to execut...

7.8CVSS8.2AI score0.04EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2021/07/30 12:00 a.m.15 views

Foxit PDF Reader 资源管理错误漏洞

Foxit PDF Reader formerly known as Foxit Reader is a set of software used to read PDF format files, developed by Foxit Software Fujian. The vulnerability stems from not verifying the existence of the object before performing operations on it. An attacker could exploit this vulnerability to execut...

7.8CVSS8.2AI score0.13346EPSS
SaveExploits0References3
Zero Day Initiative
Zero Day Initiative
added 2021/07/19 12:00 a.m.76 views

Siemens JT2Go BMP File Parsing Double Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens JT2Go. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of BMP...

7.8CVSS4.6AI score0.0166EPSS
SaveExploits0References2
Code423n4
Code423n4
added 2021/06/23 12:00 a.m.11 views

Actual yield source check on address will succeed for non-existent contract

Handle 0xRajeev Vulnerability details Impact Low-level calls call/delegatecall/staticcall return true even if the account called is non-existent per EVM design. Solidity documentation warns: "The low-level functions call, delegatecall and staticcall return true as their first return value if the...

6.9AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2021/06/22 12:00 a.m.35 views

Autodesk Design Review PDF File Parsing Double Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk Design Review. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

7.8CVSS4.8AI score0.03017EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/06/22 12:00 a.m.35 views

Autodesk Design Review PNG File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk Design Review. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

7.8CVSS5AI score0.01606EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2021/06/08 10:39 p.m.10 views

389-ds-base: information disclosure during the binding of a DN

When binding against a DN during authentication, the reply from 389-ds-base will be different whether the DN exists or not. This can be used by an unauthenticated attacker to check the existence of an entry in the LDAP database...

5.3CVSS5.8AI score0.01538EPSS
SaveExploits0References4
OSV
OSV
added 2021/06/08 6:15 p.m.5 views

DEBIAN-CVE-2021-33203

Django before 2.2.24, 3.x before 3.1.12, and 3.2.x before 3.2.4 has a potential directory traversal via django.contrib.admindocs. Staff members could use the TemplateDetailView view to check the existence of arbitrary files. Additionally, if and only if the default admindocs templates have been...

4.9CVSS6.7AI score0.02737EPSS
SaveExploits0References1
PyPA
PyPA
added 2021/06/08 6:15 p.m.13 views

PYSEC-2021-98

Django before 2.2.24, 3.x before 3.1.12, and 3.2.x before 3.2.4 has a potential directory traversal via django.contrib.admindocs. Staff members could use the TemplateDetailView view to check the existence of arbitrary files. Additionally, if and only if the default admindocs templates have been...

4.9CVSS7AI score0.02737EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2021/06/08 6:15 p.m.10 views

PYSEC-2021-98

Django before 2.2.24, 3.x before 3.1.12, and 3.2.x before 3.2.4 has a potential directory traversal via django.contrib.admindocs. Staff members could use the TemplateDetailView view to check the existence of arbitrary files. Additionally, if and only if the default admindocs templates have been...

4.9CVSS6.8AI score0.02737EPSS
SaveExploits0References4
Rows per page
Query Builder