Lucene search
K

31649 matches found

CNVD
CNVD
added 2024/05/22 12:0 a.m.8 views

Adobe Acrobat Reader Input Validation Error Vulnerability (CNVD-2024-44504)

Adobe Acrobat Reader is a PDF viewer from the American company Audobee Adobe. The software is used to print, sign and annotate PDF. A security vulnerability exists in Adobe Acrobat Reader, which can be exploited by an attacker to cause arbitrary code to be executed in the context of the current...

7.8CVSS7AI score0.00213EPSS
Exploits0References1
CNVD
CNVD
added 2024/05/22 12:0 a.m.7 views

Adobe Acrobat Reader Resource Management Error Vulnerability (CNVD-2024-43037)

Adobe Acrobat Reader is a PDF viewer from the American company Audobee Adobe. The software is used to print, sign and annotate PDF. Adobe Acrobat Reader has a security vulnerability that can be exploited by an attacker to cause arbitrary code execution in the context of the current user...

7.8CVSS7.4AI score0.00336EPSS
Exploits0References1
CNVD
CNVD
added 2024/05/22 12:0 a.m.6 views

Adobe Acrobat Reader Resource Management Error Vulnerability (CNVD-2024-43038)

Adobe Acrobat Reader is a PDF viewer from the American company Audobee Adobe. The software is used to print, sign and annotate PDF. Adobe Acrobat Reader has a security vulnerability that can be exploited by an attacker to cause arbitrary code execution in the context of the current user...

7.8CVSS7.4AI score0.00336EPSS
Exploits0References1
The Hacker News
The Hacker News
added 2024/05/20 12:20 p.m.13 views

Foxit PDF Reader Flaw Exploited by Hackers to Deliver Diverse Malware Arsenal

Multiple threat actors are weaponizing a design flaw in Foxit PDF Reader to deliver a variety of malware such as Agent Tesla, AsyncRAT, DCRat, NanoCore RAT, NjRAT, Pony, Remcos RAT, and XWorm. "This exploit triggers security warnings that could deceive unsuspecting users into executing harmful...

7.1AI score
Exploits0
BDU FSTEC
BDU FSTEC
added 2024/05/20 12:0 a.m.2 views

The vulnerability of the PDF document viewing program Foxit PDF Reader (formerly Foxit Reader) is related to data type mixing errors, allowing attackers to execute arbitrary code.

The vulnerability of the PDF document viewing program Foxit PDF Reader formerly Foxit Reader is related to data type mixing errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created PDF document from a remote location...

10CVSS7.7AI score0.03545EPSS
Exploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/05/20 12:0 a.m.2 views

The vulnerability of the ComboBox control in the PDF viewer application for electronic documents by Foxit PDF Reader (formerly Foxit Reader) allows a hacker to execute arbitrary code.

The vulnerability of the ComboBox control in the PDF document viewing application of the Foxit PDF Reader formerly Foxit Reader is related to the use of memory after it is freed. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using a specially created file...

10CVSS7.6AI score0.03545EPSS
Exploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/05/20 12:0 a.m.1 views

The vulnerability of the ComboBox control in the PDF viewer application for electronic documents by Foxit PDF Reader (formerly Foxit Reader) allows a hacker to execute arbitrary code.

The vulnerability of the ComboBox control in the PDF document viewing application of the Foxit PDF Reader formerly Foxit Reader is related to the use of memory after it is freed. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using a specially created file...

10CVSS7.6AI score0.02641EPSS
Exploits1References3Affected Software1
OSV
OSV
added 2024/05/19 9:15 a.m.0 views

UBUNTU-CVE-2024-35908

In the Linux kernel, the following vulnerability has been resolved: tls: get psock ref after taking rxlock to avoid leak At the start of tlsswrecvmsg, we take a reference on the psock, and then call tlsrxreaderlock. If that fails, we return directly without releasing the reference. Instead of...

5.5CVSS6.6AI score0.00033EPSS
Exploits0References11
Positive Technologies
Positive Technologies
added 2024/05/19 12:0 a.m.3 views

PT-2024-6697 · Foxit · Foxit Pdf Reader

Name of the Vulnerable Software and Affected Versions: Foxit PDF Reader affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability, where the...

7.8CVSS8AI score0.01126EPSS
Exploits0References9
Zero Day Initiative
Zero Day Initiative
added 2024/05/19 12:0 a.m.26 views

Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handli...

7.8CVSS6.8AI score0.00336EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/05/19 12:0 a.m.21 views

Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handli...

7.8CVSS6.8AI score0.00351EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/05/19 12:0 a.m.27 views

Adobe Acrobat Reader DC PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handli...

7.8CVSS6.9AI score0.00971EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/05/19 12:0 a.m.30 views

Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handli...

7.8CVSS6.8AI score0.00336EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/05/19 12:0 a.m.22 views

Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handli...

7.8CVSS6.8AI score0.01301EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/05/19 12:0 a.m.2 views

PT-2024-6698 · Foxit · Foxit Pdf Reader

Name of the Vulnerable Software and Affected Versions: Foxit PDF Reader affected versions not specified Description: The issue is related to an out-of-bounds read in the annotation handler of Foxit PDF Reader, which can allow an attacker to disclose sensitive information by opening a specially...

7.1CVSS7.5AI score0.00349EPSS
Exploits0References9
Zero Day Initiative
Zero Day Initiative
added 2024/05/19 12:0 a.m.29 views

Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handli...

7.8CVSS6.8AI score0.0035EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2024/05/17 10:24 p.m.14 views

CVE-2024-27423

A flaw was found in the Linux kernel's netrom module. A race condition can occur when reading the sysctlnetromtransportrequestedwindowsize resource due to a missing lock, which may impact system stability and result in a denial of service...

5.5CVSS6.2AI score
Exploits0References4
RedhatCVE
RedhatCVE
added 2024/05/17 10:24 p.m.31 views

CVE-2024-27419

A flaw was found in the netrom module in the Linux kernel. A race condition can occur when reading the sysctlnetbusyread resource due to a missing lock, which may impact system stability and can result in a denial of service...

5.5CVSS7.6AI score0.00012EPSS
Exploits0References4
NVD
NVD
added 2024/05/17 2:15 p.m.12 views

CVE-2024-35821

In the Linux kernel, the following vulnerability has been resolved: ubifs: Set page uptodate in the correct place Page cache reads are lockless, so setting the freshly allocated page uptodate before we've overwritten it with the data it's supposed to have in it will allow a simultaneous reader to...

7.5CVSS7.3AI score0.00115EPSS
Exploits0References11
NVD
NVD
added 2024/05/17 12:15 p.m.14 views

CVE-2024-27419

In the Linux kernel, the following vulnerability has been resolved: netrom: Fix data-races around sysctlnetbusyread We need to protect the reader reading the sysctl value because the value can be changed concurrently...

4.7CVSS7.6AI score0.00012EPSS
Exploits0References11
Rows per page
Query Builder