Lucene search
+L

470 matches found

NVD
NVD
•added 2021/01/07 6:15 p.m.•46 views

CVE-2018-18688

The Portable Document Format PDF specification does not provide any information regarding the concrete procedure of how to validate signatures. Consequently, an Incremental Saving vulnerability exists in multiple products. When an attacker uses the Incremental Saving feature to add pages or...

5.3CVSS6.7AI score0.01146EPSS
SaveExploits0References4
Prion
Prion
•added 2021/01/07 6:15 p.m.•27 views

Design/Logic Flaw

The Portable Document Format PDF specification does not provide any information regarding the concrete procedure of how to validate signatures. Consequently, an Incremental Saving vulnerability exists in multiple products. When an attacker uses the Incremental Saving feature to add pages or...

5CVSS5.7AI score0.01146EPSS
SaveExploits0References4Affected Software13
Cvelist
Cvelist
•added 2021/01/07 5:38 p.m.•52 views

CVE-2018-18688

The Portable Document Format PDF specification does not provide any information regarding the concrete procedure of how to validate signatures. Consequently, an Incremental Saving vulnerability exists in multiple products. When an attacker uses the Incremental Saving feature to add pages or...

5.9AI score0.01146EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2021/01/07 12:00 a.m.•8 views

PT-2021-8829

Name of the Vulnerable Software and Affected Versions Foxit Reader versions prior to 9.4 PhantomPDF versions prior to 8.3.9 and 9.x prior to 9.4 LibreOffice affected versions not specified Master PDF Editor affected versions not specified Nitro Pro affected versions not specified Nitro Reader...

5.3CVSS5.7AI score0.01146EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/01/07 12:00 a.m.•9 views

CVE-2018-18688: Improper Verification of Cryptographic Signature

The Portable Document Format PDF specification does not provide any information regarding the concrete procedure of how to validate signatures. Consequently, an Incremental Saving vulnerability exists in multiple products. When an attacker uses the Incremental Saving feature to add pages or...

5.3CVSS5.8AI score0.01146EPSS
SaveExploits0References2
CNVD
CNVD
•added 2021/01/06 12:00 a.m.•40 views

Unspecified Vulnerability in Foxit Reader and PhantomPDF (CNVD-2021-04405)

Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. A security vulnerability exists in Foxit Reader and PhantomPDF, which can be exploited by attackers to spoof authenticated PDF documents via a malicious annotation attack, as the product does not take in...

7.8CVSS6.7AI score0.02322EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2020/12/31 9:15 p.m.•20 views

CVE-2020-35931

An issue was discovered in Foxit Reader before 10.1.1 and before 4.1.1 on macOS and PhantomPDF before 9.7.5 and 10.x before 10.1.1 and before 4.1.1 on macOS. An attacker can spoof a certified PDF document via an Evil Annotation Attack because the products fail to consider a null value for a Subty...

7.8CVSS5.6AI score0.02322EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/12/31 12:00 a.m.•11 views

CVE-2020-35931: Improper Check for Unusual or Exceptional Conditions

An issue was discovered in Foxit Reader before 10.1.1 and before 4.1.1 on macOS and PhantomPDF before 9.7.5 and 10.x before 10.1.1 and before 4.1.1 on macOS. An attacker can spoof a certified PDF document via an Evil Annotation Attack because the products fail to consider a null value for a Subty...

7.8CVSS5.8AI score0.02322EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2020/12/31 12:00 a.m.•26 views

Foxit Reader and Foxit PhantomPDF code-related vulnerabilities

Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. A security vulnerability exists in Foxit Reader and PhantomPDF, which can be exploited by attackers to spoof authenticated PDF documents via a malicious annotation attack, as the product does not take in...

7.8CVSS5.8AI score0.02322EPSS
SaveExploits0References2
Hacker One
Hacker One
•added 2020/12/24 1:43 p.m.•63 views

h1-ctf: Invading Grinch Network and Saving Christmas

How we saved Christmas As usual with H1 CTF challenges we are provided with a target URL. In our case it is the following: https://hackyholidays.h1ctf.com/ We started by visiting the URL and see what is going on. All we could see is a page with an image with a warning message. F1125722 We quickly...

7.5AI score
SaveExploits0
CNNVD
CNNVD
•added 2020/12/08 12:00 a.m.•24 views

Digital Error Vulnerability in Multiple Qualcomm Products

A Qualcomm chip is a chip from Qualcomm Incorporated USA. It is a way of miniaturizing circuits mainly semiconductor devices, but also passive components, etc. and is often fabricated on the surface of semiconductor wafers. A numeric error vulnerability exists in several Qualcomm products, which...

7.5CVSS7.1AI score0.00787EPSS
SaveExploits0References4
Fedora
Fedora
•added 2020/03/24 10:15 a.m.•60 views

[SECURITY] Fedora 30 Update: timeshift-20.03-1.fc30

Timeshift for Linux is an application that provides functionality similar to the System Restore feature in Windows and the Time Machine tool in Mac OS. Timeshift protects your system by taking incremental snapshots of the file system at regular intervals. These snapshots can be restored at a late...

7CVSS6.6AI score0.0028EPSS
SaveExploits0
Fedora
Fedora
•added 2020/03/24 1:49 a.m.•53 views

[SECURITY] Fedora 31 Update: timeshift-20.03-1.fc31

Timeshift for Linux is an application that provides functionality similar to the System Restore feature in Windows and the Time Machine tool in Mac OS. Timeshift protects your system by taking incremental snapshots of the file system at regular intervals. These snapshots can be restored at a late...

7CVSS6.6AI score0.0028EPSS
SaveExploits0
OpenVAS
OpenVAS
•added 2020/03/24 12:00 a.m.•53 views

Fedora: Security Advisory for timeshift (FEDORA-2020-6b3ae09449)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7CVSS6.9AI score0.0028EPSS
SaveExploits0References2
Fedora
Fedora
•added 2020/03/23 8:26 p.m.•61 views

[SECURITY] Fedora 32 Update: timeshift-20.03-1.fc32

Timeshift for Linux is an application that provides functionality similar to the System Restore feature in Windows and the Time Machine tool in Mac OS. Timeshift protects your system by taking incremental snapshots of the file system at regular intervals. These snapshots can be restored at a late...

7CVSS6.6AI score0.0028EPSS
SaveExploits0
Microsoft KB
Microsoft KB
•added 2020/03/10 7:00 a.m.•73 views

Cumulative Update 10 for Microsoft Dynamics 365 Business Central April'19 on-premises (Application Build 14.11.41204, Platform Build 14.0.41143)

None None...

8CVSS7.3AI score0.10838EPSS
SaveExploits0
Kitploit
Kitploit
•added 2020/02/08 12:00 p.m.•247 views

Acunetix v13 - Web Application Security Scanner

Acunetix, the pioneer in automated web application security software, has announced the release of Acunetix Version 13. The new release comes with an improved user interface and introduces innovations such as the SmartScan engine, malware detection functionality, comprehensive network scanning,...

7.4AI score
SaveExploits0
CNVD
CNVD
•added 2019/08/07 12:00 a.m.•27 views

cPanel Authorization Issues Vulnerability (CNVD-2019-29606)

cPanel is a set of Web-based automated colocation platforms from the American company cPanel. The platform is primarily used to automate the management of websites and servers. The security vulnerability in cPanel versions prior to 68.0.15 stems from the program assigning weak privileges for...

7.8CVSS7.2AI score0.0047EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2019/08/02 1:15 p.m.•17 views

CVE-2017-18390

cPanel before 68.0.15 allows code execution in the context of the root account because of weak permissions on incremental backups SEC-322...

7.8CVSS6.2AI score0.0047EPSS
SaveExploits0References2
Prion
Prion
•added 2019/08/02 1:15 p.m.•29 views

Code injection

cPanel before 68.0.15 allows code execution in the context of the root account because of weak permissions on incremental backups SEC-322...

7.2CVSS7.9AI score0.0047EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder