CVE-2024-30331

CVE-2024-30331 affects Foxit PDF Reader/Editor (AcroForm Use-After-Free in AcroForms handling). The flaw arises from not validating object existence before operations on Doc objects, enabling code execution in the process context when a user opens a malicious file/page or visits a crafted page. T...

CVE-2024-30330

CVE-2024-30330 is a Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution vulnerability. The flaw arises from not validating the existence of an object before performing operations on Doc objects within AcroForms, allowing an attacker to execute code in the current process. Exploitation ...

CVE-2024-30329

CVE-2024-30329 concerns Foxit PDF Reader/Viewer: an Annotation Use-After-Free vulnerability in the handling of Annotation objects. The flaw arises from not validating object existence before performing operations, enabling an information disclosure exposure on affected installations. The descript...

CVE-2024-30328

Foxit PDF Reader/Editor (various Mac/Windows versions) is affected by CVE-2024-30328: an Use-After-Free in AcroForms Doc objects leading to remote code execution. Exploitation requires user interaction (visiting a malicious page or opening a crafted file). The issue stems from not validating obje...

CVE-2024-30327

CVE-2024-30327 affects Foxit PDF Reader (and by extension Foxit PDF Editor) with a Use-After-Free in template objects during processing of template documents. The flaw stems from not validating object existence before operations, enabling arbitrary code execution in the current process when a use...

CVE-2024-20332

The CVE-2024-20332 issue affects Cisco Identity Services Engine (ISE) web-based management interface. It is a server-side request forgery (SSRF) caused by improper input validation in specific HTTP requests, enabling an authenticated attacker to cause the ISE to make arbitrary network requests so...

CVE-2024-30326

CVE-2024-30326 concerns Foxit PDF Reader/Controller components (Foxit PDF Reader) where the Doc Object Use-After-Free vulnerability exists in the handling of Doc objects. The flaw stems from not validating the existence of an object before performing operations, enabling an attacker to execute co...

CVE-2024-30325

CVE-2024-30325 describes a use-after-free vulnerability in Foxit PDF Reader related to AcroForms. The flaw occurs when handling Doc objects in AcroForms: the code does not validate the existence of an object before performing operations, enabling an attacker to execute arbitrary code in the conte...

CVE-2024-30324

Foxit PDF Reader/Editor is affected by a Doc Object Use-After-Free Remote Code Execution vulnerability. The flaw arises from not validating the existence of a Doc object before performing operations, allowing an attacker to execute code in the current process when a user opens a malicious file or...

CVE-2024-27345

CVE-2024-27345 affects Kofax Power PDF and stems from PDF file parsing. The flaw is a lack of proper validation of user-supplied data, causing an out-of-bounds read (read past the end of an allocated object) that can disclose sensitive information. This vulnerability requires user interaction (ta...

CVE-2024-27341

Kofax Power PDF is affected by a heap-based buffer overflow in PDF file parsing that can lead to remote code execution. The flaw arises from improper validation of the length of user-supplied data before copying into a fixed-length heap buffer. Exploitation requires user interaction (visiting a m...

CVE-2024-27339

Kofax Power PDF is affected by CVE-2024-27339 due to an out-of-bounds write in PDF file parsing that can allow arbitrary code execution. The flaw stems from insufficient validation of user-supplied data, leading to a write past the end of an allocated buffer. Exploitation requires user interactio...

CVE-2024-27338

CVE-2024-27338 affects Kofax Power PDF. The flaw is in the app.response method, caused by insufficient validation of user-supplied data, which can lead to a read past the end of an allocated object and remote code execution. Exploitation requires user interaction (target user visits a malicious p...

CVE-2024-27335

CVE-2024-27335 – Kofax Power PDF : PNG file parsing has an out-of-bounds read due to missing validation of user data, enabling remote code execution. Impact is high and requires user interaction (visit malicious page or open a malicious file). Documented details come from ZDI/NVD; no fix version ...

CVE-2024-31393

This CVE (CVE-2024-31393) affects Mozilla Firefox for iOS prior to version 124. The issue stems from insufficient input validation when dragging Javascript URLs into the address bar, which could cause the URL to load and bypass certain security protections. Affected component is the address bar h...

CVE-2024-26727

CVE-2024-26727 (Linux kernel, btrfs subvolume creation) Concrete details are present in connected Astra/Linux advisory. The issue arises when creating a new subvolume under btrfs: after inserting the root item, a backref/read could access the subvolume before a preallocated anonymous device (anon...

CVE-2024-26726

CVE-2024-26726 : In the Linux kernel, a Btrfs bug could panic when writing the free-space inode because the extent map was dropped on a write error and then looked up again, yielding EXTENT_MAP_HOLE on a second pass. The fix removes dropping the extent_map range for the failed free-space cache wr...

CVE-2024-26708

CVE-2024-26708 affects the Linux kernel MPTCP subsystem. Description in provided docs: fastopen race between Fastopen and PM-trigger subflow shutdown can race; initial patch missed a state change before subflow_state_change callback. The fix copies all states reachable from TCP_FIN_WAIT1 to handl...

CVE-2024-26706

CVE-2024-26706 (parisc): Linux kernel vulnerability causing random data corruption in the exception handler for user-space memory access. Root cause is a potential register mismatch for the error code in the fault handler, which could lead to storing -EFAULT into the wrong register and corrupt da...

CVE-2024-26705

The CVE-2024-26705 issue affects the Linux kernel parisc BTLB path during CPU bringup with hotplug for 32-bit CPUs. The crash occurred when querying BTLB information from firmware to set up static TLB entries, because the static btlb_info struct required write access but was marked __ro_after_ini...