Lucene search
+L

5530 matches found

OSV
OSV
added 2021/03/30 3:15 p.m.8 views

CVE-2021-27262

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PhantomPDF 10.1.0.37527. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

3.3CVSS6.3AI score0.02023EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2021/03/30 3:15 p.m.4 views

CVE-2021-27266

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PhantomPDF 10.1.0.37527. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

4.3CVSS3.9AI score0.02187EPSS
SaveExploits0References3Affected Software1
Prion
Prion
added 2021/03/30 3:15 p.m.17 views

Design/Logic Flaw

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.1.0.37527. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

6.8CVSS7.8AI score0.02692EPSS
SaveExploits0References2Affected Software2
ATTACKERKB
ATTACKERKB
added 2021/03/30 3:15 p.m.4 views

CVE-2021-27267

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.1.0.37527. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6AI score0.02491EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2021/03/30 2:35 p.m.37 views

CVE-2021-27262

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PhantomPDF 10.1.0.37527. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

3.3CVSS4.7AI score0.02023EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
added 2021/03/30 12:00 a.m.32 views

Esri ArcReader PMF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Esri ArcReader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PMF...

7.8CVSS5.7AI score0.02412EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2021/03/12 6:21 p.m.4 views

CVE-2021-21082 Adobe Photoshop Memory Corruption

Adobe Photoshop versions 21.2.5 and earlier and 22.2 and earlier are affected by a Memory Corruption vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user...

7.8CVSS7.7AI score0.04478EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2021/03/12 6:15 p.m.5 views

CVE-2021-21056 Adobe FrameMaker Out-of-Bounds Read Vulnerability Could Lead To Remote Code Execution

Adobe Framemaker version 2020.0.1 and earlier is affected by an Out-of-bounds Read vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue...

7.8CVSS7.9AI score0.21224EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2021/03/12 6:12 p.m.6 views

CVE-2021-21068 Adobe Creative Cloud installer arbitrary file overwrite vulnerability

Adobe Creative Cloud Desktop Application version 5.3 and earlier is affected by a file handling vulnerability that could allow an attacker to cause arbitrary file overwriting. Exploitation of this issue requires physical access and user interaction...

6.1CVSS6.3AI score0.00621EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2021/03/10 12:00 a.m.7 views

PT-2021-13048 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android version Android-11 Description: The issue is caused by a logic error in the code of CrossProfileAppsServiceImpl.java, which can lead to an application's INTERACT ACROSS PROFILES grant state not displaying properly in the setting UI...

7.8CVSS7.7AI score0.00143EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2021/03/10 12:00 a.m.5 views

PT-2021-13069 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-8.1 through Android-11 Description: The issue allows an attacker to learn the existence of an account without permissions due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User...

7.8CVSS7.5AI score0.00657EPSS
SaveExploits0References2
OSV
OSV
added 2021/02/11 8:15 p.m.4 views

CVE-2021-21038

Acrobat Reader DC versions versions 2020.013.20074 and earlier, 2020.001.30018 and earlier and 2017.011.30188 and earlier are affected by an Out-of-bounds Write vulnerability when parsing a crafted jpeg file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code...

7.8CVSS7.6AI score0.03284EPSS
SaveExploits0References1
OSV
OSV
added 2021/02/11 8:15 p.m.4 views

CVE-2021-21044

Acrobat Reader DC versions versions 2020.013.20074 and earlier, 2020.001.30018 and earlier and 2017.011.30188 and earlier are affected by an Out-of-bounds Write vulnerability when parsing a crafted jpeg file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code...

7.8CVSS6.3AI score0.03545EPSS
SaveExploits0References1
OSV
OSV
added 2021/02/11 8:15 p.m.3 views

CVE-2021-21033

Acrobat Reader DC versions versions 2020.013.20074 and earlier, 2020.001.30018 and earlier and 2017.011.30188 and earlier are affected by a Use After Free vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current...

8.8CVSS7.8AI score0.03977EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2021/02/11 8:11 p.m.13 views

CVE-2021-21052 Adobe Animate Out-of-Bounds Write Vulnerability Could Lead To Arbitrary Code Execution

Adobe Animate version 21.0.2 and earlier is affected by an Out-of-bounds Write vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim...

7.8CVSS7.9AI score0.03677EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/02/10 5:15 p.m.5 views

CVE-2021-0339

In loadAnimation of WindowContainer.java, there is a possible way to keep displaying a malicious app while a target app is brought to the foreground. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Produc...

9.3CVSS7.4AI score0.00732EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2021/02/09 11:00 p.m.5 views

CVE-2021-21061

Acrobat Pro DC versions versions 2020.013.20074 and earlier, 2020.001.30018 and earlier and 2017.011.30188 and earlier are affected by a Use-after-free vulnerability when parsing a specially crafted PDF file. An unauthenticated attacker could leverage this vulnerability to disclose sensitive...

4.3CVSS5.3AI score0.02006EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2021/02/09 11:00 p.m.5 views

CVE-2021-28545

Acrobat Reader DC versions versions 2020.013.20074 and earlier, 2020.001.30018 and earlier and 2017.011.30188 and earlier are missing support for an integrity check. An unauthenticated attacker would have the ability to completely manipulate data in a certified PDF without invalidating the origin...

8.1CVSS8AI score0.02267EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2021/02/09 11:00 p.m.4 views

CVE-2021-28546

Acrobat Reader DC versions versions 2020.013.20074 and earlier, 2020.001.30018 and earlier and 2017.011.30188 and earlier are missing support for an integrity check. An unauthenticated attacker could leverage this vulnerability to modify content in a certified PDF without invalidating the...

6.5CVSS7.3AI score0.01421EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2021/02/09 11:00 p.m.5 views

CVE-2021-21089

Acrobat Reader DC versions versions 2020.013.20074 and earlier, 2020.001.30018 and earlier and 2017.011.30188 and earlier are affected by an out-of-bounds Read vulnerability. An unauthenticated attacker could leverage this vulnerability to locally escalate privileges in the context of the current...

4.3CVSS6.6AI score0.01868EPSS
SaveExploits0References2
Rows per page
Query Builder