CVE-2024-3204

CVE-2024-3204 affects c-blosc2 up to version 2.13.2. The vulnerability is a heap-based buffer overflow in the function ndlz4_decompress (ndlz4x4.c), exploitable remotely. Upgrading to version 2.14.3 is the recommended mitigation. If exploitation details or in-wild activity are disclosed in the so...

CVE-2024-3202

CVE-2024-3202 affects codelyfe Stupid Simple CMS 1.2.4 Login Page. The issue is inadequate restriction of excessive authentication attempts (no rate limiting), enabling remote abuse. Exploitation is publicly disclosed; attack complexity is high per source data. No concrete patch/version fix detai...

CVE-2024-30371

CVE-2024-30371 affects Foxit PDF Reader (and related Foxit PDF Editor/PhantomPDF lineage) with an AcroForm Use-After-Free remote code execution. The root cause is failure to validate the existence of an object before performing operations on it within AcroForms, enabling an attacker to execute co...

CVE-2024-30370

CVE-2024-30370 concerns WinRAR. The flaw resides in the archive extraction logic that can bypass Mark‑Of‑The‑Web protection via a crafted archive entry, potentially enabling arbitrary file creation and, with other issues, code execution in the current user’s context. Exploitation requires user in...

CVE-2024-30367

Foxit PDF Reader is affected by CVE-2024-30367: an AcroForm Use-After-Free vulnerability allows remote code execution. The flaw arises from not validating the existence of an object before performing operations on it, enabling an attacker to run code in the target process. Exploitation is user-in...

CVE-2024-30365

CVE-2024-30365 affects Foxit PDF Reader/Editor (AcroForm Use-After-Free) with the flaw in AcroForms object handling: it does not validate object existence before operations, enabling arbitrary code execution in the current process after user opens a malicious file/page. The entry references ZDI-C...

CVE-2024-30362

Foxit PDF Editor/Reader (Windows; Mac notes appear in related Nessus/OpenVAS listings) is affected by a Use-After-Free vulnerability in object handling within PDF processing (AcroForm, Doc objects). The flaw stems from not validating the existence of an object before performing operations on it, ...

CVE-2024-30361

CVE-2024-30361 is a Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution vulnerability. Root cause: object existence is not validated before operations on AcroForm objects, allowing code execution in the app process. Exploitation requires user interaction (visiting malicious page or ope...

CVE-2024-30359

CVE-2024-30359 describes a remote code execution vulnerability in Foxit PDF Reader related to AcroForm 3D objects. The flaw arises from insufficient validation of user-supplied data when handling 3D AcroForm objects, allowing an out-of-bounds read that can lead to code execution in the context of...

CVE-2024-30358

CVE-2024-30358 is a Foxit PDF Reader AcroForm Use-After-Free remote code execution vulnerability. The flaw arises from not validating the existence of an object before performing operations on it during AcroForm handling, allowing an attacker to execute code in the process context after a user vi...

CVE-2024-30357

CVE-2024-30357 stems from Foxit PDF Reader/Editor AcroForm Annotation handling where missing validation enables type confusion in Annotations, allowing remote code execution in the target process. Exploitation requires user interaction (visiting a malicious page or opening a malicious file). The ...

CVE-2024-30354

CVE-2024-30354 affects Foxit PDF Reader (AcroForm) with a Use-After-Free in AcroForms handling of Doc objects, caused by not validating object existence before operations. The vulnerability allows code execution in the process context and requires user interaction (target must visit a malicious p...

CVE-2024-30353

CVE-2024-30353 is a Foxit PDF Reader AcroForm Use-After-Free/Out-of-Bounds Read vulnerability with the root cause in AcroForm Doc object handling. The issue allows an attacker to trigger a read past the end of a buffer, potentially enabling remote code execution in the context of the current proc...

CVE-2024-30352

Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution (CVE-2024-30352) is described as a vulnerability in Foxit PDF Reader where the AcroForm handling can perform operations on objects without validating their existence, enabling code execution via a malicious page or file after user int...

CVE-2024-30351

CVE-2024-30351 concerns Foxit PDF Reader/Editor and relates to Use-After-Free vulnerabilities in AcroForms and Doc objects that can lead to remote code execution. The flaw stems from not validating object existence before performing operations on Doc objects and within AcroForm handling, allowing...

CVE-2024-30349

CVE-2024-30349 describes a remote code execution in Foxit PDF Reader via U3D file parsing. The flaw arises from inadequate validation of user-supplied data during U3D parsing, causing an out-of-bounds write that can execute code in the target process. Exploitation requires user interaction (visit...

CVE-2024-30348

CVE-2024-30348 affects Foxit PDF Reader (and related Foxit PDF tooling) with an out-of-bounds write during U3D file parsing that can lead to remote code execution. The flaw stems from improper validation of user-supplied data in the U3D parsing path, allowing an attacker to write past the end of ...

CVE-2024-30345

Foxit PDF Reader/Editor Critically vulnerable to Use-After-Free: AcroForm and Doc Object handling flaws allow remote code execution when a user opens a malicious file or visits a malicious page. The root cause is lack of validation of object existence before performing operations on Doc/AcroForm ...

CVE-2024-30343

CVE-2024-30343 is a Foxit PDF Reader Annotation Use-After-Free Remote Code Execution. The flaw arises from not validating the existence of an object before performing operations on Annotation objects, enabling code execution in the current process when a user opens a malicious file/page or visits...

CVE-2024-30342

CVE-2024-30342 affects Foxit PDF Reader/Editor. The vulnerability is a Use-After-Free in handling of Annotation objects, caused by not validating the existence of an object before operations, enabling code execution in the process context when a user opens a malicious file or visits a crafted pag...