Extreme View has a UAF vulnerability

Extreme Viewer is the current ultra-fast and ultra-high-definition viewing software, compatible with all mainstream image formats and professional image formats. A heap overflow vulnerability exists, which can be exploited by an attacker to cause the software to crash...

PDF viewing and editing Code Execution

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 is related to the use of memory after it is freed. Exploiting this vulnerability can allow an...

PDF viewing and editing Code Execution

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 is related to the use of memory after it is freed. Exploiting this vulnerability can allow an...

CVE-2020-9410

The report generator component of TIBCO Software Inc.'s TIBCO JasperReports Library, TIBCO JasperReports Library for ActiveMatrix BPM, TIBCO JasperReports Server, TIBCO JasperReports Server for AWS Marketplace, and TIBCO JasperReports Server for ActiveMatrix BPM contains a vulnerability that...

CVE-2020-9410

The report generator component of TIBCO Software Inc.'s TIBCO JasperReports Library, TIBCO JasperReports Library for ActiveMatrix BPM, TIBCO JasperReports Server, TIBCO JasperReports Server for AWS Marketplace, and TIBCO JasperReports Server for ActiveMatrix BPM contains a vulnerability that...

Buffer Overflow Vulnerability in ABC Watchdog

ABC Viewing is a commonly used viewing software under Shanghai Zhanmeng Network Technology Co., Ltd, which supports more than 60 kinds of image formats. A buffer overflow vulnerability exists in ABC Viewer, which can be exploited by an attacker to cause a program failure, system shutdown, restart...

PDF Viewer Null Pointer Execution

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 are related to the use of a null pointer. Exploiting these vulnerabilities can allow an attacker...

Using Real-Time Events in Investigations

To understand what a threat actor did on a Windows system, analysts often turn to the tried and true sources of historical endpoint artifacts such as the Master File Table MFT, registry hives, and Application Compatibility Cache AppCompat. However, these evidence sources were not designed with...

Nextcloud Server 18.x < 18.0.3 XSS Vulnerability (NC-SA-2020-019)

Nextcloud Server is prone to a cross-site scripting vulnerability in the Files PDF viewer. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE ...

CVE-2020-8155

An outdated 3rd party library in the Files PDF viewer for Nextcloud Server 18.0.2 caused a Cross-site scripting vulnerability when opening a malicious PDF...

Cross site scripting

An outdated 3rd party library in the Files PDF viewer for Nextcloud Server 18.0.2 caused a Cross-site scripting vulnerability when opening a malicious PDF...

CVE-2020-8155

CVE-2020-8155 is addressed in Nextcloud security updates across multiple distributions. OpenSUSE and Fedora advisories show Nextcloud updates (e.g., openSUSE-2020-670, openSUSE-2020-0670-1, FEDORA_2020-C9863904DE/NASLs) that fix CVE-2020-8155. The openSUSE entries describe CVE-2020-8155 as a dire...

CVE-2020-8155

An outdated 3rd party library in the Files PDF viewer for Nextcloud Server 18.0.2 caused a Cross-site scripting vulnerability when opening a malicious PDF...

PT-2020-19990

Name of the Vulnerable Software and Affected Versions Nextcloud Server version 18.0.2 Description The issue is caused by an outdated 3rd party library in the Files PDF viewer, leading to a Cross-site scripting vulnerability when opening a malicious PDF. Recommendations For Nextcloud Server versio...

CVE-2020-8155: Improper Neutralization of Input During Web Page Generation

An outdated 3rd party library in the Files PDF viewer for Nextcloud Server 18.0.2 caused a Cross-site scripting vulnerability when opening a malicious PDF...

Description of the PowerPoint Viewer 2010 update: September 10, 2013

Description of the PowerPoint Viewer 2010 update: September 10, 2013 Notice This update is no longer available. To fix the issues that are described in this article, install the latest Microsoft Office update from the following Microsoft Learn article:Latest updates for versions of Office that us...

A heap overflow vulnerability exists in the PC version of Beijing Aqiyi Technology Co.'s Aqiyi Watch PC version (CNVD-2020-31414)

Aiki Viewer for PC is a viewer tool from Aiki. Ltd. Aqiyi Viewer for PC suffers from a heap overflow vulnerability that can be exploited by an attacker to cause a software crash, and further exploitation can lead to arbitrary code execution...

UAF vulnerability exists in the PC version of Beijing Aqiyi Technology Co. Ltd.'s Aqiyi Watch (CNVD-2020-31412)

Aiki View for PC is a faster, lighter and more convenient tool for viewing images from Aiki. Ltd. There is a UAF vulnerability in Aqiyi Viewer for PC, which can be exploited by an attacker to cause the software to crash, and further exploitation can lead to arbitrary code execution...

Ltd. UAF Vulnerability Exists in Aiki Watch PC Version

Aiki Viewer for PC is a viewer tool from Aiki. Ltd. Aqiyi Viewing PC Version suffers from a UAF vulnerability, which can be exploited by an attacker to cause the software to crash, and further exploitation can lead to arbitrary code execution...

Ltd. Heap Overflow Vulnerability Exists in Aiki Watch PC Version

Aiki Viewer for PC is a viewer tool from Aiki. Ltd. Aqiyi Viewer for PC suffers from a heap overflow vulnerability that can be exploited by an attacker to cause a software crash, and further exploitation can lead to arbitrary code execution...