Lucene search
+L

4957 matches found

CNVD
CNVD
added 2018/10/17 12:00 a.m.16 views

Foxit Reader and Foxit PhantomPDF for Windows Memory Misreference Vulnerability (CNVD-2018-25194)

Foxit Reader for Windows is a Windows-based PDF document reader from China's Foxit Foxit Software Corporation.Foxit PhantomPDF for Windows is its commercial version. A memory misreference vulnerability exists in the handling of the Form count property in Foxit Reader 9.2.0.9297 and earlier versio...

8.8CVSS8.7AI score0.03918EPSS
SaveExploits0References1
CNVD
CNVD
added 2018/10/17 12:00 a.m.15 views

Foxit Reader and Foxit PhantomPDF for Windows Memory Misreference Vulnerability (CNVD-2018-25193)

Foxit Reader for Windows is a Windows-based PDF document reader from China's Foxit Foxit Software Corporation.Foxit PhantomPDF for Windows is its commercial version. A memory misreference vulnerability exists in the handling of the Form count property in Foxit Reader 9.2.0.9297 and earlier versio...

8.8CVSS8.7AI score0.03918EPSS
SaveExploits0References1
CNVD
CNVD
added 2018/10/17 12:00 a.m.6 views

Foxit Reader and Foxit PhantomPDF for Windows Memory Misreference Vulnerability (CNVD-2018-25199)

Foxit Reader for Windows is a Windows-based PDF document reader from China's Foxit Foxit Software Corporation.Foxit PhantomPDF for Windows is its commercial version. A memory misreference vulnerability exists in the handling of the mandatory property of TimeField in Foxit Reader 9.2.0.9297 and...

8.8CVSS8.8AI score0.03918EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2018/10/11 12:00 a.m.33 views

Foxit PhantomPDF display Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

7.8CVSS2AI score0.03855EPSS
SaveExploits2References1
Zero Day Initiative
Zero Day Initiative
added 2018/10/11 12:00 a.m.35 views

Foxit PhantomPDF fillColor Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

7.8CVSS2AI score0.03855EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2018/10/11 12:00 a.m.26 views

Foxit Reader Annotations highlight Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the...

7.8CVSS1.3AI score0.03314EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2018/10/11 12:00 a.m.38 views

Foxit Reader XFA TimeField colSpan Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the...

7.8CVSS1.9AI score0.03918EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2018/10/11 12:00 a.m.27 views

Foxit Reader XFA localeSet name Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the...

7.8CVSS2AI score0.03918EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2018/10/11 12:00 a.m.32 views

Foxit Reader XFA host title Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the...

7.8CVSS1.8AI score0.03918EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2018/10/11 12:00 a.m.35 views

Foxit Reader XFA Form count Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the...

7.8CVSS2.2AI score0.03918EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2018/10/11 12:00 a.m.33 views

Foxit Reader XFA host response Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the...

7.8CVSS2AI score0.03918EPSS
SaveExploits0References1
Openbugbounty
Openbugbounty
added 2018/10/05 10:45 a.m.8 views

property-ninja.com Improper Access Control vulnerability

Open Bug Bounty ID: OBB-682826 Description| Value ---|--- Affected Website:| property-ninja.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3 Score:|...

0.3AI score
SaveExploits0
OSV
OSV
added 2018/10/02 9:29 p.m.5 views

CVE-2018-3958

A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.1.0.5096. A use-after-free condition can occur when accessing the Subject property of the this.info object. An attacker needs to trick the user to open the malicious file to trigger this...

7.8CVSS5.6AI score0.02895EPSS
SaveExploits0References3
OSV
OSV
added 2018/10/02 9:29 p.m.7 views

CVE-2018-3962

A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.1.0.5096. A use-after-free condition can occur when accessing the CreationDate property of the this.info object. An attacker needs to trick the user to open the malicious file to trigger...

7.3CVSS5.6AI score0.02497EPSS
SaveExploits0References3
NVD
NVD
added 2018/10/02 9:29 p.m.34 views

CVE-2018-3959

A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.1.0.5096. A use-after-free condition can occur when accessing the Author property of the this.info object. An attacker needs to trick the user to open the malicious file to trigger this...

8CVSS7.6AI score0.02361EPSS
SaveExploits0References2
OSV
OSV
added 2018/10/02 9:29 p.m.11 views

CVE-2018-3960

A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.1.0.5096. A use-after-free condition can occur when accessing the Producer property of the this.info object. An attacker needs to trick the user to open the malicious file to trigger this...

7.8CVSS5.6AI score0.02361EPSS
SaveExploits0References2
NVD
NVD
added 2018/10/02 9:29 p.m.30 views

CVE-2018-3957

A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.1.0.5096. A use-after-free condition can occur when accessing the Keywords property of the this.info object. An attacker needs to trick the user to open the malicious file to trigger this...

8CVSS7.6AI score0.02895EPSS
SaveExploits0References3
NVD
NVD
added 2018/10/02 9:29 p.m.31 views

CVE-2018-3961

A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.1.0.5096. A use-after-free condition can occur when accessing the Creator property of the this.info object. An attacker needs to trick the user to open the malicious file to trigger this...

8CVSS7.6AI score0.02361EPSS
SaveExploits0References2
Prion
Prion
added 2018/10/02 9:29 p.m.22 views

Design/Logic Flaw

A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.1.0.5096. A use-after-free condition can occur when accessing the Author property of the this.info object. An attacker needs to trick the user to open the malicious file to trigger this...

6.8CVSS7.6AI score0.02361EPSS
SaveExploits0References2Affected Software2
Prion
Prion
added 2018/10/02 9:29 p.m.23 views

Design/Logic Flaw

A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.1.0.5096. A use-after-free condition can occur when accessing the CreationDate property of the this.info object. An attacker needs to trick the user to open the malicious file to trigger...

6CVSS7.2AI score0.02497EPSS
SaveExploits0References3Affected Software2
Rows per page
Query Builder