Lucene search
+L

4441 matches found

BDU FSTEC
BDU FSTEC
added 2021/03/25 12:00 a.m.13 views

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to lack of access control mechanisms. This allows attackers to enhance their privileges.

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to lack of access control mechanisms. Exploiting these vulnerabilities can allow a malicious actor to enhance their...

9CVSS7.6AI score0.017EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2021/03/25 12:00 a.m.11 views

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to memory usage after it is freed. This allows attackers to execute arbitrary code.

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat and Document Cloud, are related to the use of memory after it is freed. Arbitrary code can be executed in the context of the current user using a specially crafte...

8.8CVSS7.4AI score0.03977EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2021/03/25 12:00 a.m.13 views

The vulnerability of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, is related to incorrect path name restrictions for restricted access catalogs. This allows attackers to execute arbitrary code.

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to incorrect path name restrictions for access to restricted catalogs. Exploiting these vulnerabilities can allow an...

8.8CVSS7.9AI score0.03233EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2021/03/25 12:00 a.m.8 views

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to the issue of executing code outside of the buffer memory. This allows attackers to execute arbitrary code.

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to the issue of code execution outside the buffer. Exploiting these vulnerabilities can allow a malicious actor to...

9.3CVSS8.2AI score0.02617EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2021/03/25 12:00 a.m.10 views

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to memory usage after it is freed. This allows attackers to execute arbitrary code.

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat and Document Cloud, are related to the use of memory after it is freed. Arbitrary code can be executed in the context of the current user using a specially crafte...

8.8CVSS7.4AI score0.02956EPSS
SaveExploits0References3
OSV
OSV
added 2021/03/22 5:15 p.m.11 views

CVE-2021-27595

When a user opens manipulated Portable Document Format .PDF files received from untrusted sources in SAP 3D Visual Enterprise Viewer, the application crashes and becomes temporarily unavailable to the user until restart of the application...

3.3CVSS5.8AI score0.01384EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2021/03/22 5:15 p.m.5 views

CVE-2021-27595

When a user opens manipulated Portable Document Format .PDF files received from untrusted sources in SAP 3D Visual Enterprise Viewer, the application crashes and becomes temporarily unavailable to the user until restart of the application...

4.3CVSS4.9AI score0.01384EPSS
SaveExploits0References3Affected Software1
CNNVD
CNNVD
added 2021/03/22 12:00 a.m.11 views

Foxit PhantomPDF 资源管理错误漏洞

Foxit PhantomPDF is China's Foxit Foxit company a PDF document reader. A memory misreference vulnerability exists in Foxit PhantomPDF when handling U3D objects in PDF files. The vulnerability stems from the program not verifying the existence of an object before performing an operation on it. An...

7.8CVSS6AI score0.02491EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2021/03/22 12:00 a.m.10 views

Foxit PhantomPDF 缓冲区错误漏洞

Foxit PhantomPDF is China's Foxit Foxit company a PDF document reader. Foxit PhantomPDF suffers from an out-of-bounds read vulnerability when processing U3D objects in PDF files. The vulnerability is caused due to a lack of proper validation of user-supplied data, which could result in reading...

4.3CVSS5.9AI score0.02187EPSS
SaveExploits0References4
OpenVAS
OpenVAS
added 2021/03/20 12:00 a.m.27 views

Fedora: Security Advisory for mupdf (FEDORA-2021-baeaa7bccb)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.8CVSS5.5AI score0.50234EPSS
SaveExploits0References2
Fedora
Fedora
added 2021/03/19 8:32 p.m.59 views

[SECURITY] Fedora 34 Update: upx-3.96-8.fc34

UPX is a free, portable, extendable, high-performance executable packer for several different executable formats. It achieves an excellent compression ratio and offers very fast decompression. Your executables suffer no memory overhead or other drawbacks...

8.3CVSS4.8AI score0.00751EPSS
SaveExploits1
OSV
OSV
added 2021/03/19 4:15 p.m.1 views

DEBIAN-CVE-2021-27807

A carefully crafted PDF file can trigger an infinite loop while loading the file. This issue affects Apache PDFBox version 2.0.22 and prior 2.0.x versions...

5.5CVSS6.7AI score0.02979EPSS
SaveExploits0References1
OSV
OSV
added 2021/03/19 4:15 a.m.4 views

ALPINE-CVE-2021-25292

An issue was discovered in Pillow before 8.1.1. The PDF parser allows a regular expression DoS ReDoS attack via a crafted PDF file because of a catastrophic backtracking regex...

6.5CVSS8.5AI score0.01622EPSS
SaveExploits0References1
PyPA
PyPA
added 2021/03/19 4:15 a.m.9 views

PYSEC-2021-38

An issue was discovered in Pillow before 8.1.1. The PDF parser allows a regular expression DoS ReDoS attack via a crafted PDF file because of a catastrophic backtracking regex...

6.5CVSS7AI score0.01622EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2021/03/19 4:15 a.m.11 views

PYSEC-2021-38

An issue was discovered in Pillow before 8.1.1. The PDF parser allows a regular expression DoS ReDoS attack via a crafted PDF file because of a catastrophic backtracking regex...

6.5CVSS5.8AI score0.01622EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2021/03/11 12:00 a.m.5 views

Pillow 安全漏洞

Pillow is a Python-based image processing library. Pillow version 8.1.1 previously contained a security vulnerability that could be exploited by attackers to conduct regular expression DoS ReDoS attacks via crafted PDF files...

6.5CVSS5.5AI score0.01622EPSS
SaveExploits0References10
BDU FSTEC
BDU FSTEC
added 2021/03/11 12:00 a.m.8 views

The vulnerability of the GetFieldValue function implementation in the program for displaying text in Foxit Reader and the PDF editing program Foxit PhantomPDF allows a perpetrator to execute arbitrary code.

The vulnerability of the GetFieldValue function implementation in programs for displaying text in Foxit Reader and editing PDF files in Foxit PhantomPDF is related to data type conversion errors. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely...

10CVSS7.6AI score0.04689EPSS
SaveExploits0References4Affected Software2
OSV
OSV
added 2021/03/09 3:15 p.m.6 views

CVE-2021-27591

When a user opens manipulated Portable Document Format .PDF format files received from untrusted sources in SAP 3D Visual Enterprise Viewer version 9, the application crashes and becomes temporarily unavailable to the user until restart of the application...

7.8CVSS5.8AI score0.01242EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2021/03/09 3:15 p.m.5 views

CVE-2021-27591

When a user opens manipulated Portable Document Format .PDF format files received from untrusted sources in SAP 3D Visual Enterprise Viewer version 9, the application crashes and becomes temporarily unavailable to the user until restart of the application...

7.8CVSS5.6AI score0.01242EPSS
SaveExploits0References4Affected Software1
Fedora
Fedora
added 2021/03/02 3:35 p.m.68 views

[SECURITY] Fedora 32 Update: webkit2gtk3-2.30.5-1.fc32

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. This package contains WebKit2 based WebKitGTK for GTK 3...

8.8CVSS1.3AI score0.01857EPSS
SaveExploits1
Rows per page
Query Builder