Lucene search
+L

88 matches found

NVD
NVD
added 2019/10/25 7:15 p.m.52 views

CVE-2019-17139

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.5.0.20723. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

8.8CVSS8.1AI score0.05783EPSS
SaveExploits0References2
OSV
OSV
added 2019/10/25 7:15 p.m.9 views

CVE-2019-17139

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.5.0.20723. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

8.8CVSS6.1AI score0.05783EPSS
SaveExploits0References2
Prion
Prion
added 2019/10/25 7:15 p.m.24 views

Design/Logic Flaw

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.5.0.20723. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

6.8CVSS8.8AI score0.05783EPSS
SaveExploits0References2Affected Software2
CVE
CVE
added 2019/10/25 6:14 p.m.197 views

CVE-2019-17139

Foxit PhantomPDF 9.5.0.20723 is affected by CVE-2019-17139 due to an out-of-bounds write in the HTML2PDF plugin while processing JavaScript. The flaw arises from insufficient validation of user-supplied data, enabling remote code execution in the context of the current process. Exploitation requi...

8.8CVSS8.8AI score0.05783EPSS
SaveExploits0References2Affected Software2
Cvelist
Cvelist
added 2019/10/25 6:14 p.m.59 views

CVE-2019-17139

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.5.0.20723. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS8.8AI score0.05783EPSS
SaveExploits0References2
CNVD
CNVD
added 2019/10/23 12:0 a.m.4 views

Foxit PhantomPDF Out-of-Bounds Write Remote Code Execution Vulnerability

PhantomPDF is a Chinese Foxit Foxit company for enterprise-level users of PDF document processing software. An out-of-bounds write remote code execution vulnerability exists in the handling of Javascript in the HTML2PDF plug-in in Foxit PhantomPDF 9.6.0.25114 and earlier versions. The vulnerabili...

8.8CVSS8.6AI score0.05783EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/10/22 12:0 a.m.68 views

Foxit PhantomPDF HTML2PDF HTML Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of...

7.8CVSS1.9AI score0.05783EPSS
SaveExploits0References1
vulnersOsv
vulnersOsv
added 2019/06/12 4:37 p.m.6 views

@aabenoja/karma-phantomjs-launcher (=0.2.1), @aabenoja/phantomjs (=2.0.0) +460 more potentially affected by unknown CVE via npmconf (>=0.0.19 <=2.1.2)

npmconf NPM version =0.0.19, =0.1.28, =1.2.6, =2.7.2, =4.5.201902251314, =1.5.0, =5.0.201901071713, =5.0.201812141540, =1.0.1-server20190117165116, =1.0.201901260938, =1.0.3, =2.19.0, =2.19.3 - @jrossi/phantomjs2 =2.0.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-57CF-349J-352G...

5.8AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2019/05/15 12:0 a.m.34 views

Adobe Acrobat Pro DC HTML2PDF HTML Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

7.8CVSS3AI score0.09767EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/05/15 12:0 a.m.26 views

Adobe Acrobat Pro DC HTML2PDF HTML Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

5.5CVSS0.9AI score0.08724EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/04/29 12:0 a.m.27 views

Foxit PhantomPDF HTML2PDF HTML Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the conversion ...

7.8CVSS1.9AI score0.03484EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/04/29 12:0 a.m.46 views

Foxit PhantomPDF HTML2PDF HTML Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit PhantomPDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS1AI score0.02551EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/02/12 12:0 a.m.27 views

Adobe Acrobat Pro DC HTML2PDF HTML Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

7.8CVSS3.2AI score0.03915EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/02/12 12:0 a.m.30 views

Adobe Acrobat Pro DC HTML2PDF HTML Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

7.8CVSS3AI score0.03915EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/02/12 12:0 a.m.24 views

Adobe Acrobat Pro DC HTML2PDF HTML Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

7.8CVSS3.3AI score0.03915EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/01/25 12:0 a.m.28 views

Foxit PhantomPDF HTML2PDF HTML Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the conversion ...

7.8CVSS3.3AI score0.03719EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2018/12/17 12:0 a.m.22 views

Adobe Acrobat Pro DC HTML2PDF HTML Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

7.8CVSS3.2AI score0.05388EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2018/12/17 12:0 a.m.24 views

Adobe Acrobat Pro DC HTML2PDF HTML Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

7.8CVSS3.2AI score0.05388EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2018/12/17 12:0 a.m.23 views

Adobe Acrobat Pro DC HTML2PDF HTML Parsing Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

3.3CVSS2AI score0.04875EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2018/12/17 12:0 a.m.26 views

Adobe Acrobat Pro DC HTML2PDF HTML Parsing Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS1AI score0.06725EPSS
SaveExploits0References1
Rows per page
Query Builder