Lucene search
K

790 matches found

RedhatCVE
RedhatCVE
added 2025/03/26 8:23 p.m.22 views

CVE-2025-2231

PDF-XChange Editor RTF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visi...

7.8CVSS7.8AI score0.00679EPSS
Exploits0References4
NVD
NVD
added 2025/03/24 8:15 p.m.6 views

CVE-2025-2231

PDF-XChange Editor RTF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visi...

7.8CVSS0.00679EPSS
Exploits0References2
OSV
OSV
added 2025/03/24 8:15 p.m.4 views

CVE-2025-2231

PDF-XChange Editor RTF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visi...

7.8CVSS6.2AI score
Exploits0References2
Cvelist
Cvelist
added 2025/03/24 7:45 p.m.10 views

CVE-2025-2231 PDF-XChange Editor RTF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

PDF-XChange Editor RTF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visi...

7.8CVSS0.00679EPSS
Exploits0References2
CVE
CVE
added 2025/03/24 7:45 p.m.67 views

CVE-2025-2231

CVE-2025-2231 affects PDF-XChange Editor. The vulnerability is an out-of-bounds read in the RTF file parsing path that can allow remote code execution in the editor. Root cause: improper validation of user-supplied data leading to reading past the end of an allocated buffer. Exploitation requires...

7.8CVSS7.8AI score0.00679EPSS
Exploits0References2Affected Software2
Vulnrichment
Vulnrichment
added 2025/03/24 7:45 p.m.17 views

CVE-2025-2231 PDF-XChange Editor RTF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

PDF-XChange Editor RTF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visi...

7.8CVSS7.8AI score0.00679EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/03/12 12:0 a.m.6 views

PT-2025-11130 · Pdf Xchange · Pdf-Xchange Editor +1

Name of the Vulnerable Software and Affected Versions: PDF-XChange Editor affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations. It requires user interaction, such as visiting a malicious page or opening a malicious fil...

7.8CVSS7.8AI score0.00679EPSS
Exploits0References8
Zero Day Initiative
Zero Day Initiative
added 2025/03/12 12:0 a.m.3 views

PDF-XChange Editor RTF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS6.8AI score0.00679EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/02/14 4:24 p.m.24 views

CVE-2024-11629

In Progress® Telerik® Document Processing Libraries, versions prior to 2025 Q1 2025.1.205, using .NET Standard 2.0, the contents of a file at an arbitrary path can be exported to RTF...

7.1CVSS6.8AI score0.0076EPSS
Exploits0References1
OSV
OSV
added 2025/02/12 5:15 p.m.3 views

CVE-2024-11629

In Progress® Telerik® Document Processing Libraries, versions prior to 2025 Q1 2025.1.205, using .NET Standard 2.0, the contents of a file at an arbitrary path can be exported to RTF...

6.5CVSS5.9AI score0.0076EPSS
Exploits0References1
NVD
NVD
added 2025/02/12 5:15 p.m.8 views

CVE-2024-11629

In Progress® Telerik® Document Processing Libraries, versions prior to 2025 Q1 2025.1.205, using .NET Standard 2.0, the contents of a file at an arbitrary path can be exported to RTF...

7.1CVSS0.0076EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/02/12 4:21 p.m.10 views

CVE-2024-11629 Telerik Document Processing RTF Export of Arbitrary File Path

In Progress® Telerik® Document Processing Libraries, versions prior to 2025 Q1 2025.1.205, using .NET Standard 2.0, the contents of a file at an arbitrary path can be exported to RTF...

7.1CVSS6.9AI score0.0076EPSS
Exploits0References1
CVE
CVE
added 2025/02/12 4:21 p.m.48 views

CVE-2024-11629

CVE-2024-11629 affects Progress Telerik Document Processing Libraries (prior to 2025 Q1, version 2025.1.205) when targeting .NET Standard 2.0. The issue allows exporting the contents of a file at an arbitrary path to RTF, indicating an potential arbitrary file read/export vulnerability due to the...

7.1CVSS6.9AI score0.0076EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2025/02/12 4:21 p.m.9 views

CVE-2024-11629 Telerik Document Processing RTF Export of Arbitrary File Path

In Progress® Telerik® Document Processing Libraries, versions prior to 2025 Q1 2025.1.205, using .NET Standard 2.0, the contents of a file at an arbitrary path can be exported to RTF...

7.1CVSS0.0076EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/02/12 12:0 a.m.1 views

Progress Telerik Document Processing Libraries 安全漏洞

Progress Telerik Document Processing Libraries is a document processing library from Progress USA. A security vulnerability exists in Progress Telerik Document Processing Libraries prior to version 2025 Q1, which originates from the ability to export the contents of a file in an arbitrary path to...

7.1CVSS6.8AI score0.0076EPSS
Exploits0References1
OSV
OSV
added 2025/02/11 8:15 p.m.3 views

CVE-2025-0903

PDF-XChange Editor RTF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target...

8.8CVSS6.2AI score0.00552EPSS
Exploits0References1
NVD
NVD
added 2025/02/11 8:15 p.m.21 views

CVE-2025-0903

PDF-XChange Editor RTF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target...

8.8CVSS0.00552EPSS
Exploits0References1
CVE
CVE
added 2025/02/11 7:57 p.m.63 views

CVE-2025-0903

PDF-XChange Editor is affected by a heap-based buffer overflow in the RTF file parser that can lead to remote code execution. The flaw arises from insufficient validation of the length of user-supplied data before copying it into a fixed-length heap buffer. Exploitation requires user interaction ...

8.8CVSS8.4AI score0.00552EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2025/02/11 7:57 p.m.18 views

CVE-2025-0903 PDF-XChange Editor RTF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

PDF-XChange Editor RTF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target...

7.8CVSS0.00552EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2025/01/31 12:0 a.m.8 views

PDF-XChange Editor RTF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS6.8AI score0.00552EPSS
Exploits0References1
Rows per page
Query Builder