Lucene search
+L

21 matches found

OSV
OSV
•added 2023/03/29 7:15 p.m.•11 views

CVE-2022-37349

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the submitForm...

7.8CVSS6.1AI score0.00777EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/03/29 12:00 a.m.•3 views

CVE-2022-37349: Out-of-bounds Read

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the submitForm...

7.8CVSS6.6AI score0.00777EPSS
SaveExploits0References2
Mend
Mend
•added 2022/12/30 11:38 a.m.•5 views

CVE-2022-4859

A vulnerability, which was classified as problematic, has been found in Joget up to 7.0.33. This issue affects the function submitForm of the file wflow-core/src/main/java/org/joget/plugin/enterprise/UserProfileMenu.java of the component User Profile Menu. The manipulation of the argument...

6.1CVSS0.00499EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/30 12:00 a.m.•3 views

CVE-2022-4859: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, has been found in Joget up to 7.0.33. This issue affects the function submitForm of the file wflow-core/src/main/java/org/joget/plugin/enterprise/UserProfileMenu.java of the component User Profile Menu. The manipulation of the argument...

6.1CVSS3.7AI score0.00499EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2022/08/29 12:00 a.m.•17 views

The vulnerability of the submitForm method in the PDF document viewing and editing program PDF-XChange allows a perpetrator to execute arbitrary code.

The vulnerability of the submitForm method in the PDF document viewing and editing software PDF-XChange arises from the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created malware file...

10CVSS8AI score0.00777EPSS
SaveExploits0References4Affected Software1
Positive Technologies
Positive Technologies
•added 2022/08/15 12:00 a.m.•20 views

PT-2022-4469 · Pdf Xchange · Pdf-Xchange Editor

Name of the Vulnerable Software and Affected Versions: PDF-XChange Editor affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a...

10CVSS7.8AI score0.00777EPSS
SaveExploits0References6
attackerkb
attackerkb
•added 2021/08/11 10:15 p.m.•12 views

CVE-2021-38565

An issue was discovered in Foxit PDF Reader before 11.0.1 and PDF Editor before 11.0.1. It allows writing to arbitrary files via submitForm...

7.5CVSS7.2AI score0.00848EPSS
SaveExploits0References2
Prion
Prion
•added 2021/08/11 10:15 p.m.•28 views

Design/Logic Flaw

An issue was discovered in Foxit PDF Reader before 11.0.1 and PDF Editor before 11.0.1. It allows writing to arbitrary files via submitForm...

5CVSS7.5AI score0.00848EPSS
SaveExploits0References1Affected Software2
Cvelist
Cvelist
•added 2021/08/11 9:15 p.m.•40 views

CVE-2021-38565

An issue was discovered in Foxit PDF Reader before 11.0.1 and PDF Editor before 11.0.1. It allows writing to arbitrary files via submitForm...

7.7AI score0.00848EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/08/11 12:00 a.m.•5 views

CVE-2021-38565: Undefined Security Weakness

An issue was discovered in Foxit PDF Reader before 11.0.1 and PDF Editor before 11.0.1. It allows writing to arbitrary files via submitForm...

7.5CVSS5.9AI score0.00848EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/08/11 12:00 a.m.•6 views

PT-2021-22214

Name of the Vulnerable Software and Affected Versions Foxit PDF Reader versions prior to 11.0.1 Foxit PDF Editor versions prior to 11.0.1 Description The issue allows writing to arbitrary files via the submitForm function. This can potentially lead to unauthorized modifications of files on the...

7.5CVSS0.00848EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2021/08/11 12:00 a.m.•15 views

Foxit PDF Reader和Foxit PDF Editor 安全漏洞

Foxit PDF Reader and Foxit PDF Editor are both products of Foxit China. Foxit PDF Reader is a PDF reader and Foxit PDF Editor is a PDF editor. A security vulnerability exists in versions prior to 11.0.1, which can be exploited to allow an attacker to write arbitrary files via submitForm...

7.5CVSS5.8AI score0.00848EPSS
SaveExploits0References2
OSV
OSV
•added 2020/11/05 8:15 p.m.•8 views

CVE-2020-24435

Acrobat Reader DC versions 2020.012.20048 and earlier, 2020.001.30005 and earlier and 2017.011.30175 and earlier are affected by a heap-based buffer overflow vulnerability in the submitForm function, potentially resulting in arbitrary code execution in the context of the current user. Exploitatio...

7.8CVSS7.8AI score0.52718EPSS
SaveExploits0References2
Prion
Prion
•added 2020/11/05 8:15 p.m.•30 views

Heap overflow

Acrobat Reader DC versions 2020.012.20048 and earlier, 2020.001.30005 and earlier and 2017.011.30175 and earlier are affected by a heap-based buffer overflow vulnerability in the submitForm function, potentially resulting in arbitrary code execution in the context of the current user. Exploitatio...

6.8CVSS7.8AI score0.52718EPSS
SaveExploits0References2Affected Software4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/11/05 12:00 a.m.•6 views

CVE-2020-24435: Heap-based Buffer Overflow

Acrobat Reader DC versions 2020.012.20048 and earlier, 2020.001.30005 and earlier and 2017.011.30175 and earlier are affected by a heap-based buffer overflow vulnerability in the submitForm function, potentially resulting in arbitrary code execution in the context of the current user. Exploitatio...

7.8CVSS6.5AI score0.52718EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2020/11/03 11:00 p.m.•6 views

CVE-2020-24435

Acrobat Reader DC versions 2020.012.20048 and earlier, 2020.001.30005 and earlier and 2017.011.30175 and earlier are affected by a heap-based buffer overflow vulnerability in the submitForm function, potentially resulting in arbitrary code execution in the context of the current user. Exploitatio...

7.8CVSS8.3AI score0.52718EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2020/11/03 12:00 a.m.•2 views

PT-2020-5016

Name of the Vulnerable Software and Affected Versions Adobe Acrobat Reader DC versions 2020.012.20048 and earlier Adobe Acrobat Reader DC versions 2020.001.30005 and earlier Adobe Acrobat Reader DC versions 2017.011.30175 and earlier Description A heap-based buffer overflow vulnerability exists i...

9.3CVSS0.52718EPSS
SaveExploits0References8
CNVD
CNVD
•added 2018/08/01 12:00 a.m.•14 views

Foxit Reader Type Obfuscation Remote Code Execution Vulnerability (CNVD-2018-15079)

Foxit Reader old name: Foxit PDF Reader is a set of software used to read PDF format files, by Fujian Foxit Software developed by Foxit Reader is a set of free to use the software, the operating system is mainly based on Microsoft Windows, and as long as there is a Win32 implementation of the...

8.8CVSS8.8AI score0.02737EPSS
SaveExploits0References1
OSV
OSV
•added 2018/07/31 8:29 p.m.•13 views

CVE-2018-14276

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

8.8CVSS6.2AI score0.02737EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/07/31 12:00 a.m.•6 views

CVE-2018-14276: Access of Resource Using Incompatible Type

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

8.8CVSS8.3AI score0.02737EPSS
SaveExploits0References3
Rows per page
Query Builder