Lucene search
+L

2236 matches found

CVE
CVE
•added 2021/08/11 7:28 p.m.•66 views

CVE-2021-33794

CVE-2021-33794 affects Foxit Reader and PhantomPDF before 10.1.4. The issue arises from mishandling the Tab key during XFA form interactions, leading to information disclosure or an application crash. Reported across multiple sources (NVD, Red Hat, CVE catalogs, and regional bulletins) with impac...

9.1CVSS8.7AI score0.01105EPSS
SaveExploits0References1Affected Software2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/08/11 12:00 a.m.•6 views

CVE-2021-33793: Out-of-bounds Write

Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 have an out-of-bounds write because the Cross-Reference table is mishandled during Office document conversion...

9.8CVSS5.8AI score0.01087EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2021/08/11 12:00 a.m.•19 views

Foxit Reader 安全漏洞

Foxit Reader is a PDF document reader from the Chinese company Foxit. A security vulnerability exists in Foxit Reader versions prior to 10.1.4 and PhantomPDF versions prior to 10.1.4, which stems from the software's incorrect handling of the Tab key during XFA form interactions, resulting in...

9.1CVSS8.2AI score0.01105EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2021/08/11 12:00 a.m.•16 views

Foxit Reader和Foxit PhantomPDF 安全漏洞

Foxit Reader and Foxit PhantomPDF are both PDF document readers from the Chinese company Foxit. A security vulnerability exists in Foxit Reader and PhantomPDF versions prior to 10.1.4, which stems from the application allowing arbitrary files to be written because the extractPages pathname is not...

9.8CVSS8.3AI score0.01117EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/08/11 12:00 a.m.•7 views

CVE-2021-33794: Undefined Security Weakness

Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 allow information disclosure or an application crash after mishandling the Tab key during XFA form interaction...

9.1CVSS5.8AI score0.01105EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/08/11 12:00 a.m.•6 views

CVE-2021-38573: Undefined Security Weakness

An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows writing to arbitrary files because a CombineFiles pathname is not validated...

9.8CVSS5.9AI score0.01117EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/08/11 12:00 a.m.•6 views

CVE-2021-38574: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows SQL Injection via crafted data at the end of a string...

9.8CVSS5.8AI score0.00994EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2021/08/11 12:00 a.m.•18 views

Foxit Reader和Foxit PhantomPDF 缓冲区错误漏洞

Foxit Reader and Foxit PhantomPDF are both PDF document readers from Foxit, a Chinese company. Foxit Reader and PhantomPDF versions prior to 10.1.4 have a security vulnerability that could be exploited to corrupt memory during the conversion of PDF documents to a different document format...

9.8CVSS5.6AI score0.01087EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2021/08/11 12:00 a.m.•17 views

Foxit Reader和Foxit PhantomPDF 安全漏洞

Foxit Reader and Foxit PhantomPDF are both PDF document readers from Foxit, a Chinese company. Foxit Reader and PhantomPDF versions prior to 10.1.4 contain a security vulnerability that could be exploited by an attacker to invoke the stack via a recursive function during the processing of XFA for...

7.5CVSS5.6AI score0.00961EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2021/08/11 12:00 a.m.•16 views

Foxit Reader和Foxit PhantomPDF 缓冲区错误漏洞

Foxit Reader and Foxit PhantomPDF are both PDF document readers from the Chinese company Foxit. A security vulnerability exists in Foxit Reader versions prior to 10.1.4 and PhantomPDF versions prior to 10.1.4, which stems from the software's mishandling of cross-reference tables during the...

9.8CVSS8.3AI score0.01087EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/08/11 12:00 a.m.•6 views

PT-2021-5315 · Foxit · Foxit Pdf Editor +2

Name of the Vulnerable Software and Affected Versions: Foxit PhantomPDF versions affected versions not specified Foxit Reader versions affected versions not specified Foxit PDF Editor versions affected versions not specified Description: The issue is related to a buffer overflow when handling...

10CVSS7.8AI score0.00349EPSS
SaveExploits0References11
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/08/11 12:00 a.m.•5 views

CVE-2021-38572: Undefined Security Weakness

An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows writing to arbitrary files because the extractPages pathname is not validated...

9.8CVSS5.9AI score0.01117EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/08/11 12:00 a.m.•4 views

CVE-2021-38571: Uncontrolled Search Path Element

An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows DLL hijacking, aka CNVD-C-2021-68000 and CNVD-C-2021-68502...

7.8CVSS5.7AI score0.00542EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/08/11 12:00 a.m.•8 views

CVE-2021-38568: Out-of-bounds Write

An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows memory corruption during conversion of a PDF document to a different document format...

9.8CVSS6AI score0.01087EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2021/08/11 12:00 a.m.•14 views

Foxit Reader和Foxit PhantomPDF SQL注入漏洞

Foxit Reader and Foxit PhantomPDF are both PDF document readers from the Chinese company Foxit. A SQL injection vulnerability exists in Foxit Reader and PhantomPDF versions prior to 10.1.4. The vulnerability stems from a lack of validation of externally-entered SQL statements in database-based...

9.8CVSS8.7AI score0.00994EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2021/08/11 12:00 a.m.•18 views

Foxit Reader和Foxit PhantomPDF 后置链接漏洞

Foxit Reader and Foxit PhantomPDF are both PDF document readers from Foxit, a Chinese company. Foxit Reader and PhantomPDF versions prior to 10.1.4 have a security vulnerability that could be exploited to corrupt memory during the conversion of PDF documents to a different document format...

9.1CVSS5.6AI score0.01166EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/08/11 12:00 a.m.•6 views

CVE-2021-38569: Uncontrolled Recursion

An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows stack consumption via recursive function calls during the handling of XFA forms or link objects...

7.5CVSS5.8AI score0.00961EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2021/08/11 12:00 a.m.•16 views

Foxit Reader和Foxit PhantomPDF 代码问题漏洞

Foxit Reader and Foxit PhantomPDF are both PDF document readers from the Chinese company Foxit. A security vulnerability exists in Foxit Reader and PhantomPDF versions prior to 10.1.4, which stems from the application allowing DLL hijacking...

7.8CVSS7.3AI score0.00542EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2021/08/11 12:00 a.m.•7 views

PT-2021-6063 · Foxit · Foxit Phantompdf +2

Name of the Vulnerable Software and Affected Versions: Foxit Reader affected versions not specified Foxit PhantomPDF affected versions not specified Foxit PDF Editor affected versions not specified Description: The issue is related to a buffer overflow in memory, allowing a remote attacker to...

10CVSS8AI score0.00349EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/08/11 12:00 a.m.•5 views

CVE-2021-38570: Improper Link Resolution Before File Access

An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows attackers to delete arbitrary files during uninstallation via a symlink...

9.1CVSS5.9AI score0.01166EPSS
SaveExploits0References2
Rows per page
Query Builder