Lucene search
K

44 matches found

OSV
OSV
added 2024/05/03 2:15 a.m.4 views

CVE-2023-38093

Kofax Power PDF saveAs Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kofax Power PDF. User interaction is required to exploit this vulnerability in that the target must visit a...

7.8CVSS6.3AI score0.00343EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2024/05/03 2:15 a.m.4 views

CVE-2023-38093

Kofax Power PDF saveAs Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kofax Power PDF. User interaction is required to exploit this vulnerability in that the target must visit a...

7.8CVSS7.7AI score0.00343EPSS
Exploits0References2Affected Software1
OSV
OSV
added 2023/11/27 4:15 p.m.4 views

CVE-2023-39542

A code execution vulnerability exists in the Javascript saveAs API of Foxit Reader 12.1.3.15356. A specially crafted malformed file can create arbitrary files, which can lead to remote code execution. An attacker needs to trick the user into opening the malicious file to trigger this vulnerabilit...

8.8CVSS6.5AI score0.03346EPSS
Exploits1References2
NVD
NVD
added 2023/11/27 4:15 p.m.15 views

CVE-2023-39542

A code execution vulnerability exists in the Javascript saveAs API of Foxit Reader 12.1.3.15356. A specially crafted malformed file can create arbitrary files, which can lead to remote code execution. An attacker needs to trick the user into opening the malicious file to trigger this vulnerabilit...

8.8CVSS0.03346EPSS
Exploits1References2
Cvelist
Cvelist
added 2023/11/27 3:25 p.m.27 views

CVE-2023-39542

A code execution vulnerability exists in the Javascript saveAs API of Foxit Reader 12.1.3.15356. A specially crafted malformed file can create arbitrary files, which can lead to remote code execution. An attacker needs to trick the user into opening the malicious file to trigger this vulnerabilit...

8.8CVSS9.2AI score0.03346EPSS
Exploits1References1
CNNVD
CNNVD
added 2023/11/27 12:0 a.m.3 views

Foxit Reader 安全漏洞

Foxit Reader is a Chinese Foxit Foxit company's a PDF document reader. A code execution vulnerability exists in Foxit Reader prior to version 12.1.3.15356 due to a flaw in the Javascript saveAs API. An attacker could exploit this vulnerability to execute arbitrary code on the system...

8.8CVSS7.9AI score0.03346EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2023/11/27 12:0 a.m.2 views

PT-2023-7349 · Foxit · Foxit Reader

Name of the Vulnerable Software and Affected Versions: Foxit Reader version 12.1.3.15356 Description: A code execution issue exists in the Javascript saveAs API of Foxit Reader. This is due to the improper handling of specially crafted malformed files, which can lead to the creation of arbitrary...

10CVSS8AI score0.03346EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2023/07/13 12:0 a.m.5 views

PT-2023-26301 · Kofax · Kofax Power Pdf

Name of the Vulnerable Software and Affected Versions: Kofax Power PDF affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of Kofax Power PDF. User interaction is required, where the target must visit a malicious page...

7.8CVSS7.2AI score0.00343EPSS
Exploits0References3
OSV
OSV
added 2023/03/29 7:15 p.m.1 views

CVE-2022-37365

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the saveAs...

7.8CVSS6.2AI score0.00728EPSS
Exploits0References2
SUSE CVE
SUSE CVE
added 2023/02/15 5:13 a.m.3 views

SUSE CVE-2015-7615

Use-after-free vulnerability in a SaveAs feature in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to execute...

6.8CVSS7.9AI score0.06365EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2022/08/29 12:0 a.m.6 views

The vulnerability of the saveAs method in the PDF-XChange PDF document viewing and editing program allows a perpetrator to execute arbitrary code.

The vulnerability of the saveAs method in the PDF-XChange PDF viewing and editing software is related to the use of dangerous methods or functions. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using a specially created malicious file...

10CVSS7.6AI score0.00728EPSS
Exploits0References4Affected Software1
Positive Technologies
Positive Technologies
added 2022/08/15 12:0 a.m.2 views

PT-2022-4468 · Pdf Xchange · Pdf-Xchange Editor

Name of the Vulnerable Software and Affected Versions: PDF-XChange Editor affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a...

10CVSS7.3AI score0.00728EPSS
Exploits0References6
OSV
OSV
added 2017/08/29 1:29 p.m.3 views

CVE-2017-10952

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.2.0.2051. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the save...

8.8CVSS6.2AI score0.07152EPSS
Exploits2References4
NVD
NVD
added 2017/08/29 1:29 p.m.47 views

CVE-2017-10952

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.2.0.2051. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the save...

8.8CVSS8.7AI score0.07152EPSS
Exploits2References4
OSV
OSV
added 2017/08/03 8:29 a.m.2 views

CVE-2017-7442

Nitro Pro 11.0.3.173 allows remote attackers to execute arbitrary code via saveAs and launchURL calls with directory traversal sequences...

8.8CVSS6.1AI score0.40692EPSS
Exploits6References2
Cvelist
Cvelist
added 2017/08/03 8:0 a.m.38 views

CVE-2017-7442

Nitro Pro 11.0.3.173 allows remote attackers to execute arbitrary code via saveAs and launchURL calls with directory traversal sequences...

9.1AI score0.40692EPSS
Exploits6References2
Exploit DB
Exploit DB
added 2017/08/02 12:0 a.m.104 views

Nitro Pro PDF Reader 11.0.3.173 - Javascript API Code Execution (Metasploit)

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Nitro Pro PDF Reader 11.0.3.173 Javascript API Remote Code Execution', 'Description' = %q This module exploits an unsafe Javascript API implemente...

8.8CVSS7.4AI score0.40692EPSS
Exploits6
Zero Day Initiative
Zero Day Initiative
added 2016/10/11 12:0 a.m.29 views

Adobe Acrobat Pro DC SaveAs Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the SaveAs...

6.8CVSS2.7AI score0.05813EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2015/10/29 12:0 a.m.6 views

The vulnerabilities of PDF editing programs like Adobe Acrobat and Adobe Acrobat Document Cloud, as well as PDF viewing programs like Adobe Reader and Adobe Reader Document Cloud, allow attackers to execute arbitrary code.

The vulnerability of the SaveAs component in PDF editing programs like Adobe Acrobat and Adobe Acrobat Document Cloud, as well as PDF viewing programs like Adobe Reader and Adobe Reader Document Cloud, is related to the use of memory after it is freed. Exploiting this vulnerability could allow a...

9.3CVSS5.9AI score0.06365EPSS
Exploits0References3Affected Software2
Packet Storm
Packet Storm
added 2015/08/05 12:0 a.m.35 views

WordPress Filedownload 1.4 Open Proxy

Title: Open Proxy in filedownload v1.4 wordpress plugin Author: Larry W. Cashdollar, @larry0 Date: 2015-07-11 Download Site: https://wordpress.org/plugins/filedownload/ Vendor: Peter Gross Vendor Notified: 2015-07-11 Vendor Contact: [email protected] Description: Creates a downloadlink with t...

7.4AI score
Exploits0
Rows per page
Query Builder