Lucene search
+L

28628 matches found

Vulnrichment
Vulnrichment
added 2026/04/27 11:00 a.m.10 views

CVE-2026-5941 Foxit PDF Editor/Reader AcroForm Signature Remote Code Execution Vulnerability

Parsing logic flaws cause non-signature data to be misidentified as valid signatures when processing malformed form field hierarchies, leading to invalid memory writes and program crashes during internal data structure construction...

7.8CVSS5.2AI score0.00169EPSS
SaveExploits0References1
CVE
CVE
added 2026/04/27 11:00 a.m.43 views

CVE-2026-5941

CVE-2026-5941 affects Foxit PDF Editor/Reader, specifically the AcroForm Signature processing. The issue is a parsing logic flaw where non-signature data can be misidentified as valid signatures when processing malformed form field hierarchies, leading to invalid memory writes and program crashes...

7.8CVSS5.2AI score0.00169EPSS
SaveExploits0References1Affected Software2
CNNVD
CNNVD
added 2026/04/27 12:00 a.m.14 views

Foxit PDF Reader和Foxit PDF Editor 资源管理错误漏洞

Foxit PDF Reader and Foxit PDF Editor are products of Foxit Corporation, a Chinese company. Foxit PDF Reader is a PDF reader. Foxit PDF Editor is a PDF editor. Both Foxit PDF Reader and Foxit PDF Editor have a resource management vulnerability. This vulnerability arises from the special XFA PDF...

5.5CVSS6.1AI score0.00113EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2026/04/27 12:00 a.m.16 views

Foxit PDF Reader AcroForm Signature Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS4.1AI score0.00182EPSS
SaveExploits0References1
Packet Storm
Packet Storm
added 2026/04/27 12:00 a.m.128 views

📄 pdf-image 2.0.0 Command Injection

In pdf-image version 2.0.0, a security issue allows OS command injection when untrusted input is passed to the PDFImage constructor and later processed by methods such as getInfo...

9.8CVSS5.4AI score0.02493EPSS
SaveExploits4
Tenable Nessus
Tenable Nessus
added 2026/04/27 12:00 a.m.17 views

Foxit PDF Reader < 2026.1.1 Multiple Vulnerabilities

According to its version, the Foxit PDF Reader application previously named Foxit Reader installed on the remote Windows host is prior to 2026.1.1. It is, therefore affected by multiple vulnerabilities: - Document structural anomalies caused inconsistencies between page element relationships and...

7.8CVSS6.9AI score0.00182EPSS
SaveExploits0References8
CNNVD
CNNVD
added 2026/04/27 12:00 a.m.16 views

Foxit PDF Reader和Foxit PDF Editor 资源管理错误漏洞

Foxit PDF Reader and Foxit PDF Editor are products of Foxit Corporation, a Chinese company. Foxit PDF Reader is a PDF reader. Foxit PDF Editor is a PDF editor. There is a resource management vulnerability in Foxit PDF Editor and Foxit PDF Reader. This vulnerability arises from abnormal document...

7.8CVSS7.1AI score0.00181EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/04/27 12:00 a.m.15 views

Foxit PDF Reader和Foxit PDF Editor 资源管理错误漏洞

Foxit PDF Reader and Foxit PDF Editor are products of Foxit Corporation, a Chinese company. Foxit PDF Reader is a PDF reader. Foxit PDF Editor is a PDF editor. Both Foxit PDF Reader and Foxit PDF Editor have a resource management vulnerability. This vulnerability arises from calling a function th...

7.8CVSS7.1AI score0.00169EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2026/04/27 12:00 a.m.21 views

Foxit PDF Reader AcroForm Signature Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

7.8CVSS6AI score0.00169EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/04/27 12:00 a.m.17 views

Foxit PDF Reader和Foxit PDF Editor 资源管理错误漏洞

Foxit PDF Reader and Foxit PDF Editor are products of Foxit Corporation, a Chinese company. Foxit PDF Reader is a PDF reader. Foxit PDF Editor is a PDF editor. There is a resource management vulnerability in Foxit PDF Editor and Foxit PDF Reader. This vulnerability stems from a page lifecycle...

5.5CVSS5.8AI score0.00182EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2026/04/27 12:00 a.m.15 views

Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

7.8CVSS6AI score0.00169EPSS
SaveExploits0References1
Snyk
Snyk
added 2026/04/27 12:00 a.m.7 views

Allocation of Resources Without Limits or Throttling

Overview org.springframework.ai:spring-ai-pdf-document-reader is a Spring AI PDF document reader Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via ForkPDFLayoutTextStripper. An attacker can cause denial of service by supplying a crafted P...

7.1CVSS5.5AI score0.0024EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/04/27 12:00 a.m.10 views

Foxit PDF Editor < 14.0.4 / 2026.1.1 Multiple Vulnerabilities

According to its version, the Foxit PDF Editor application previously named Foxit PhantomPDF installed on the remote Windows host is prior to 2026.1.1/14.0.4. It is, therefore affected by multiple vulnerabilities: - Document structural anomalies caused inconsistencies between page element...

7.8CVSS6.9AI score0.00182EPSS
SaveExploits0References8
GithubExploit
GithubExploit
added 2026/04/26 6:09 p.m.138 views

Advanced-AI-Recon-and-Exploit-Framework

reNgine: The Ultimate Web Reconnaissance & Vulnerability Scanner...

6.1AI score
SaveExploits0
CVE
CVE
added 2026/04/26 1:19 p.m.14 views

CVE-2018-25279

jiNa OCR Image to Text 1.0 contains a local denial-of-service vulnerability: processing a specially crafted PNG with an oversized buffer causes the application to crash during PNG-to-PDF conversion. Root cause: malformed PNG triggers a crash in the image-to-text pipeline. Impact is local, with av...

6.9CVSS5.5AI score0.00123EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/04/26 1:19 p.m.40 views

CVE-2018-25279 jiNa OCR Image to Text 1.0 Denial of Service via PNG

jiNa OCR Image to Text 1.0 contains a denial of service vulnerability that allows local attackers to crash the application by processing a malformed PNG file. Attackers can create a specially crafted PNG file with an oversized buffer and trigger the crash when the application attempts to convert...

6.9CVSS0.00123EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/04/26 1:19 p.m.4 views

CVE-2018-25279

jiNa OCR Image to Text 1.0 contains a denial of service vulnerability that allows local attackers to crash the application by processing a malformed PNG file. Attackers can create a specially crafted PNG file with an oversized buffer and trigger the crash when the application attempts to convert...

6.9CVSS5.4AI score0.00123EPSS
SaveExploits0References3Affected Software1
CNNVD
CNNVD
added 2026/04/26 12:00 a.m.15 views

jiNa OCR Image to Text 安全漏洞

jiNa OCR Image to Text is an open-source tool developed by Convertimagetotext, which supports extracting text from images. Version 1.0 of jiNa OCR Image to Text contains a security vulnerability. This vulnerability arises from a denial-of-service attack when processing deformed PNG files. It may...

6.9CVSS5.8AI score0.00123EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/04/25 11:09 a.m.12 views

CVE-2026-41312

A flaw was found in pypdf. An attacker can craft a malicious PDF file containing a specially compressed stream. When this file is processed, it can lead to excessive memory consumption RAM exhaustion, resulting in a Denial of Service DoS for the affected system. Mitigation Mitigation for this iss...

6.5CVSS5AI score0.00226EPSS
SaveExploits0References7
RedhatCVE
RedhatCVE
added 2026/04/25 11:04 a.m.8 views

CVE-2026-41168

A flaw was found in pypdf. An attacker can craft a malicious PDF file containing oversized cross-reference streams or object streams. Processing such a file can lead to excessively long runtimes, resulting in a Denial of Service DoS for applications using the pypdf library. Mitigation Mitigation...

6.9CVSS5.1AI score0.00297EPSS
SaveExploits0References7
Rows per page
Query Builder