Lucene search
K

31698 matches found

RedhatCVE
RedhatCVE
added 2025/05/22 3:20 a.m.7 views

CVE-2011-4220

Investintech.com SlimPDF Reader does not properly restrict the arguments to unspecified function calls, which allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted PDF document...

9.3CVSS8.2AI score0.07379EPSS
Exploits5References1
RedhatCVE
RedhatCVE
added 2025/05/22 2:52 a.m.8 views

CVE-2012-4759

Untrusted search path vulnerability in facebookplugin.fpi in the Facebook plug-in in Foxit Reader 5.3.1.0606 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory, as demonstrated by a directory that contains a .pdf file. NOTE: some of these...

6.9CVSS6.8AI score0.00864EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 2:12 a.m.22 views

CVE-2012-4337

Foxit Reader before 5.3 on Windows XP and Windows 7 allows remote attackers to execute arbitrary code via a PDF document with a crafted attachment that triggers calculation of a negative number during processing of cross references...

9.3CVSS7.8AI score0.05EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 2:1 a.m.6 views

CVE-2012-4162

Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Mac OS X allow attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2012-4161...

7.5CVSS8AI score0.03638EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 1:29 a.m.12 views

CVE-2015-8843

The Foxit Cloud Update Service FoxitCloudUpdateService in Foxit Reader 6.1 through 6.2.x and 7.x before 7.2.2, when an update to the Cloud plugin is available, allows local users to gain privileges by writing crafted data to a shared memory region, which triggers memory corruption...

7.4CVSS6.9AI score0.00656EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/21 11:57 p.m.8 views

CVE-2009-0691

The Foxit JPEG2000/JBIG2 Decoder add-on before 2.0.2009.616 for Foxit Reader 3.0 before Build 1817 does not properly handle a fatal error during decoding of a JPEG2000 aka JPX header, which allows remote attackers to cause a denial of service memory corruption and application crash or possibly...

9.3CVSS8.4AI score0.05633EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/21 7:12 p.m.16 views

CVE-2009-0690

The Foxit JPEG2000/JBIG2 Decoder add-on before 2.0.2009.616 for Foxit Reader 3.0 before Build 1817 does not properly handle a negative value for the stream offset in a JPEG2000 aka JPX stream, which allows remote attackers to cause a denial of service memory corruption and application crash or...

9.3CVSS8.3AI score0.05658EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/05/20 12:0 a.m.6 views

PT-2025-34315

Name of the Vulnerable Software and Affected Versions: Foxit PDF Reader affected versions not specified Description: Foxit PDF Reader contains a flaw in the parsing of JP2 files due to insufficient validation of user-supplied data. This can lead to a read past the end of an allocated object,...

3.3CVSS4.2AI score0.00218EPSS
Exploits0References6
Tenable Nessus
Tenable Nessus
added 2025/05/14 12:0 a.m.8 views

Alibaba Cloud Linux 3 : 0120: libxml2 (ALINUX3-SA-2024:0120)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2024:0120 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2024-25062: An issue was discovered in libxml2...

7.5CVSS6.7AI score0.01375EPSS
Exploits3References2
BDU FSTEC
BDU FSTEC
added 2025/05/14 12:0 a.m.5 views

The vulnerability of PDF viewing and editing programs such as Acrobat DC, Acrobat Reader DC, Acrobat 2017, and Acrobat Reader 2017 lies in the use of memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of PDF viewing and editing programs such as Acrobat DC, Acrobat Reader DC, Acrobat 2017, and Acrobat Reader 2017 is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

10CVSS8.1AI score0.09948EPSS
Exploits0References5
BDU FSTEC
BDU FSTEC
added 2025/05/14 12:0 a.m.5 views

The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2020, and Adobe Acrobat 2024, as well as Adobe Acrobat Reader 2020, are related to reading beyond the buffer memory limit. This allows attackers to gain unauthorized access to protected information.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 are related to reading data beyond the buffer memory. Exploiting these vulnerabilities can allow attackers to gain...

5.5CVSS7.4AI score0.004EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2025/05/14 12:0 a.m.7 views

The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2020, and Adobe Acrobat 2024, as well as Adobe Acrobat Reader 2020, are related to reading beyond the buffer memory limit. This allows attackers to gain unauthorized access to protected information.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 are related to reading data beyond the buffer memory. Exploiting these vulnerabilities can allow attackers to gain...

5.5CVSS7.4AI score0.00399EPSS
Exploits0References4
SUSE CVE
SUSE CVE
added 2025/05/13 3:33 a.m.1 views

SUSE CVE-2025-47814

libpspp-core.a in GNU PSPP through 2.0.1 allows attackers to cause a heap-based buffer overflow in inflateread called indirectly from spvreadxmlmember in zip-reader.c...

9.8CVSS7.3AI score0.00258EPSS
Exploits1References3
SUSE CVE
SUSE CVE
added 2025/05/13 3:32 a.m.1 views

SUSE CVE-2025-47815

libpspp-core.a in GNU PSPP through 2.0.1 allows attackers to cause a heap-based buffer overflow in inflateread called indirectly from zipmemberreadall in zip-reader.c...

9.8CVSS7.3AI score0.00258EPSS
Exploits1References3
Amazon
Amazon
added 2025/05/13 12:0 a.m.7 views

Medium: javapackages-bootstrap

Issue Overview: Uncontrolled Resource Consumption vulnerability in Apache Commons IO. The org.apache.commons.io.input.XmlStreamReader class may excessively consume CPU resources when processing maliciously crafted input. This issue affects Apache Commons IO: from 2.0 before 2.14.0. Users are...

4.3CVSS6.9AI score0.01249EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2025/05/12 12:6 a.m.26 views

CVE-2025-47815

A flaw was found in the GNU PSPP ZIP Reader functionality. This vulnerability allows attackers to cause a heap-based buffer overflow via a crafted ZIP archive. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security...

4.5CVSS4.7AI score0.00258EPSS
Exploits1References4
RedhatCVE
RedhatCVE
added 2025/05/12 12:6 a.m.26 views

CVE-2025-47814

libpspp-core.a in GNU PSPP through 2.0.1 allows attackers to cause a heap-based buffer overflow in inflateread called indirectly from spvreadxmlmember in zip-reader.c. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product...

4.5CVSS4.9AI score0.00258EPSS
Exploits1References4
NVD
NVD
added 2025/05/10 10:15 p.m.21 views

CVE-2025-47814

libpspp-core.a in GNU PSPP through 2.0.1 allows attackers to cause a heap-based buffer overflow in inflateread called indirectly from spvreadxmlmember in zip-reader.c...

9.8CVSS0.00258EPSS
Exploits1References1
NVD
NVD
added 2025/05/10 10:15 p.m.16 views

CVE-2025-47815

libpspp-core.a in GNU PSPP through 2.0.1 allows attackers to cause a heap-based buffer overflow in inflateread called indirectly from zipmemberreadall in zip-reader.c...

9.8CVSS0.00258EPSS
Exploits1References1
OSV
OSV
added 2025/05/10 10:15 p.m.1 views

DEBIAN-CVE-2025-47814

libpspp-core.a in GNU PSPP through 2.0.1 allows attackers to cause a heap-based buffer overflow in inflateread called indirectly from spvreadxmlmember in zip-reader.c...

9.8CVSS5.5AI score0.00258EPSS
Exploits1References1
Rows per page
Query Builder