Lucene search
K

790 matches found

Zero Day Initiative
Zero Day Initiative
added 2025/01/15 12:0 a.m.8 views

Microsoft Office Word RTF File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Office Word. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing ...

7.8CVSS6.9AI score0.80769EPSS
Exploits6References1
OSV
OSV
added 2024/11/22 9:15 p.m.4 views

CVE-2024-8842

PDF-XChange Editor RTF File Parsing Uninitialized Variable Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must...

7.8CVSS7.6AI score0.00382EPSS
Exploits0References1
NVD
NVD
added 2024/11/22 9:15 p.m.10 views

CVE-2024-8842

PDF-XChange Editor RTF File Parsing Uninitialized Variable Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must...

7.8CVSS0.00382EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/11/22 9:5 p.m.12 views

CVE-2024-8842 PDF-XChange Editor RTF File Parsing Uninitialized Variable Remote Code Execution Vulnerability

PDF-XChange Editor RTF File Parsing Uninitialized Variable Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must...

7.8CVSS8AI score0.00382EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/11/22 9:5 p.m.13 views

CVE-2024-8842 PDF-XChange Editor RTF File Parsing Uninitialized Variable Remote Code Execution Vulnerability

PDF-XChange Editor RTF File Parsing Uninitialized Variable Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must...

7.8CVSS0.00382EPSS
Exploits0References1
CVE
CVE
added 2024/11/22 9:5 p.m.46 views

CVE-2024-8842

PDF-XChange Editor is affected by CVE-2024-8842 due to an uninitialized memory access in the RTF file parsing path, enabling potential remote code execution. The flaw is triggered when a user opens a malicious RTF file or visits a page hosting exploit code, with the attacker gaining code executio...

7.8CVSS8AI score0.00382EPSS
Exploits0References1Affected Software2
CNNVD
CNNVD
added 2024/11/22 12:0 a.m.3 views

PDF-XChange Editor 安全漏洞

PDF-XChange Editor is a PDF editor software and PDF reader. PDF-XChange Editor RTF file parsing has an uninitialized variable remote code execution vulnerability that can be exploited by an attacker to execute arbitrary code on the system...

7.8CVSS8.6AI score0.00382EPSS
Exploits0References1
The Hacker News
The Hacker News
added 2024/10/17 10:15 a.m.62 views

SideWinder APT Strikes Middle East and Africa With Stealthy Multi-Stage Attack

An advanced persistent threat APT actor with suspected ties to India has sprung forth with a flurry of attacks against high-profile entities and strategic infrastructures in the Middle East and Africa. The activity has been attributed to a group tracked as SideWinder, which is also known as...

9.3CVSS8.8AI score0.99945EPSS
Exploits33
Positive Technologies
Positive Technologies
added 2024/10/01 12:0 a.m.4 views

PT-2025-4091 · Pdf Xchange · Pdf-Xchange Editor

Name of the Vulnerable Software and Affected Versions: PDF-XChange Editor affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this issue, where the target...

8.8CVSS7.2AI score0.0071EPSS
Exploits0References7
BDU FSTEC
BDU FSTEC
added 2024/09/26 12:0 a.m.3 views

The vulnerability of the PDF-XChange PDF document viewing and editing program, related to the use of uninitialized variables, allows a hacker to execute arbitrary code.

The vulnerability of the PDF document viewing and editing software PDF-XChange is related to the use of uninitialized variables. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using a specially created RTF file...

10CVSS7.6AI score0.00382EPSS
Exploits0References6Affected Software3
CNVD
CNVD
added 2024/09/23 12:0 a.m.7 views

PDF-XChange Editor RTF File Parsing Uninitialized Variable Remote Code Execution Vulnerability

PDF-XChange Editor is a PDF editor software and PDF reader. PDF-XChange Editor RTF file parsing has an uninitialized variable remote code execution vulnerability that can be exploited by an attacker to execute arbitrary code on the system...

7.8CVSS8.3AI score0.00382EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2024/09/20 12:0 a.m.16 views

PDF-XChange Editor < 10.4.0.388 Multiple Vulnerabilities

The version of PDF-XChange Editor installed on the remote Windows host is prior to 10.4.0.388. It is, therefore, affected by multiple vulnerabilities: - A specific flaw exists within the handling of Doc objects. The issue results from the lack of proper validation of user-supplied data, which can...

7.8CVSS5.7AI score0.00382EPSS
Exploits0References9
Zero Day Initiative
Zero Day Initiative
added 2024/09/17 12:0 a.m.8 views

PDF-XChange Editor RTF File Parsing Uninitialized Variable Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS6.9AI score0.00382EPSS
Exploits0References1
The Hacker News
The Hacker News
added 2024/08/27 4:8 p.m.89 views

macOS Version of HZ RAT Backdoor Targets Chinese Messaging App Users

Users of Chinese instant messaging apps like DingTalk and WeChat are the target of an Apple macOS version of a backdoor named HZ RAT. The artifacts "almost exactly replicate the functionality of the Windows version of the backdoor and differ only in the payload, which is received in the form of...

9.3CVSS8.6AI score0.99945EPSS
Exploits33
GithubExploit
GithubExploit
added 2024/07/20 5:50 p.m.516 views

Exploit for CVE-2022-30190

Follina-CVE-2022-...

9.3CVSS8.7AI score0.99374EPSS
Exploits62
Positive Technologies
Positive Technologies
added 2024/06/26 12:0 a.m.2 views

PT-2024-6430 · Unknown · Pdf-Xchange Editor

Name of the Vulnerable Software and Affected Versions: PDF-XChange Editor affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this issue, where the target...

10CVSS7.2AI score0.00382EPSS
Exploits0References6
Tenable Nessus
Tenable Nessus
added 2024/06/03 12:0 a.m.20 views

RHEL 7 : libreoffice (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libreoffice: heap-based buffer overflow related to the ReadJPEG function CVE-2017-8358 - LibreOffice befo...

5CVSS8.6AI score0.7436EPSS
Exploits0References5
Fedora
Fedora
added 2024/03/28 1:44 a.m.36 views

[SECURITY] Fedora 38 Update: python-pygments-2.14.0-2.fc38

Pygments is a generic syntax highlighter suitable for use in code hosting, forums, wikis or other applications that need to prettify source code. Highlights are: a wide range of over 500 languages and other text formats is supported special attention is paid to details that increase highlighting...

5.5CVSS7.1AI score0.00503EPSS
Exploits1
OpenVAS
OpenVAS
added 2024/03/08 12:0 a.m.25 views

Fedora: Security Advisory for xmlgraphics-commons (FEDORA-2024-129d8ca6fc)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS9.2AI score0.02557EPSS
Exploits3References2
Fedora
Fedora
added 2024/03/07 10:33 p.m.27 views

[SECURITY] Fedora 40 Update: xmlgraphics-commons-2.9-3.fc40

Apache XML Graphics Commons is a library that consists of several reusable components used by Apache Batik and Apache FOP. Many of these components can easily be used separately outside the domains of SVG and XSL-FO. You will find components such as a PDF library, an RTF library, Graphics2D...

8.8CVSS6.9AI score0.02557EPSS
Exploits3
Rows per page
Query Builder