Lucene search
+L

9933 matches found

Zero Day Initiative
Zero Day Initiative
•added 2021/10/15 12:00 a.m.•40 views

Foxit PDF Editor Text Annotation Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

7.8CVSS2.1AI score0.00349EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/10/15 12:00 a.m.•36 views

Foxit PDF Editor Squiggly Annotation Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

7.8CVSS2.2AI score0.00349EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/10/15 12:00 a.m.•46 views

Foxit PDF Editor PolyLine Annotation Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

7.8CVSS2.1AI score0.00349EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/10/15 12:00 a.m.•45 views

Foxit PDF Editor Caret Annotation Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

7.8CVSS2.2AI score0.00349EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/10/15 12:00 a.m.•44 views

Foxit PDF Editor StrikeOut Annotation Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

7.8CVSS2.1AI score0.00349EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/10/15 12:00 a.m.•33 views

Foxit PDF Reader Annotation Use of Uninitialized Variable Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

7.8CVSS3.2AI score0.00349EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/10/15 12:00 a.m.•28 views

Foxit PDF Editor Stamp Annotation Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

7.8CVSS1.8AI score0.00349EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/10/15 12:00 a.m.•36 views

Foxit PDF Editor Underline Annotation Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

7.8CVSS2.1AI score0.00349EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/10/15 12:00 a.m.•36 views

Foxit PDF Reader Annotation Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS1.4AI score0.0034EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/10/15 12:00 a.m.•36 views

Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

7.8CVSS2.3AI score0.00349EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/10/15 12:00 a.m.•31 views

Foxit PDF Editor Line Annotation Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

7.8CVSS2.1AI score0.00349EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/10/15 12:00 a.m.•7 views

PT-2021-5376 · Foxit · Foxit Pdf Reader +1

Name of the Vulnerable Software and Affected Versions: Foxit PDF Reader and Foxit PDF Editor affected versions not specified Description: The issue is caused by a use-after-free vulnerability in the handling of Annotation objects, which results from the lack of validating the existence of an obje...

10CVSS8AI score0.00349EPSS
SaveExploits0References11
Positive Technologies
Positive Technologies
•added 2021/10/15 12:00 a.m.•10 views

PT-2021-5421 · Foxit · Foxit Pdf Reader +1

Name of the Vulnerable Software and Affected Versions: Foxit PDF Reader and Foxit PDF Editor affected versions not specified Description: The issue is caused by a use-after-free error in the handling of Annotation objects, resulting from the lack of validation of an object's existence before...

10CVSS8AI score0.00349EPSS
SaveExploits0References8
CNNVD
CNNVD
•added 2021/10/13 12:00 a.m.•25 views

Nitro Software Nitro Pro resource management error vulnerability

Nitro Software Nitro Pro is a U.S. Nitro Software PDF document editor software. The software supports PDF document editing, PDF document format conversion and PDF document encryption. Nitro Pro PDF resource management error vulnerability exists, the vulnerability stems from the product fails to...

8.8CVSS7.7AI score0.15046EPSS
SaveExploits1References4
CNVD
CNVD
•added 2021/10/13 12:00 a.m.•67 views

Siemens SINEC NMS code issue vulnerability

SINEC NMS is a network management system from Siemens for monitoring and managing industrial networks. a code issue vulnerability exists in versions prior to SINEC NMS 1.0 SP2 Update 1. The vulnerability stems from the fact that the affected system allows the upload of JSON objects deserialized t...

9CVSS3.2AI score0.01551EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2021/10/12 6:15 p.m.•18 views

CVE-2021-35494

The Rest API component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server - Community Edition, TIBCO JasperReports Server - Developer Edition, TIBCO JasperReports Server for AWS...

5.3CVSS5.8AI score0.00502EPSS
SaveExploits0References2
Prion
Prion
•added 2021/10/12 6:15 p.m.•33 views

Race condition

The Rest API component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server - Community Edition, TIBCO JasperReports Server - Developer Edition, TIBCO JasperReports Server for AWS...

3.5CVSS4.9AI score0.00502EPSS
SaveExploits0References2Affected Software1
attackerkb
attackerkb
•added 2021/10/12 5:00 p.m.•10 views

CVE-2021-35494

The Rest API component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server - Community Edition, TIBCO JasperReports Server - Developer Edition, TIBCO JasperReports Server for AWS...

5.7CVSS6.2AI score0.00502EPSS
SaveExploits0References3Affected Software2
osv_cve
osv_cve
•added 2021/10/12 10:15 a.m.•20 views

CVE-2021-33728

A vulnerability has been identified in SINEC NMS All versions V1.0 SP2 Update 1. The affected system allows to upload JSON objects that are deserialized to JAVA objects. Due to insecure deserialization of user-supplied content by the affected software, a privileged attacker could exploit this...

7.2CVSS6.1AI score0.01551EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2021/10/12 10:15 a.m.•14 views

CVE-2021-33728

A vulnerability has been identified in SINEC NMS All versions V1.0 SP2 Update 1. The affected system allows to upload JSON objects that are deserialized to JAVA objects. Due to insecure deserialization of user-supplied content by the affected software, a privileged attacker could exploit this...

9CVSS7.3AI score0.01551EPSS
SaveExploits0References2
Rows per page
Query Builder