The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 are related to the use of a null pointer pointer, which allows attackers to execute arbitrary code.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 are related to the use of a null pointer. Exploiting these vulnerabilities can allow an attacker...

The vulnerability of the Foxit PhantomPDF PDF editing program and the Foxit PDF viewer program, related to data conversion errors, allows a perpetrator to execute arbitrary code.

The vulnerability of the Foxit PhantomPDF PDF editing program and the Foxit PDF viewer program is related to data type conversion errors. Exploiting this vulnerability could allow an attacker to execute arbitrary code using the DuplicatePages command...

The vulnerability of the Foxit PhantomPDF PDF editing program and the Foxit PDF viewer program, related to data conversion errors, allows a perpetrator to execute arbitrary code.

The vulnerability of the Foxit PhantomPDF PDF editing program and the Foxit PDF viewer program is related to data type conversion errors. Exploiting this vulnerability can allow an attacker to execute arbitrary code using the “Save” command...

PT-2020-4391 · Microsoft · 3D Viewer

Name of the Vulnerable Software and Affected Versions: 3D Viewer affected versions not specified Description: A remote code execution issue exists due to improper memory handling by the Base3D rendering engine. An attacker who successfully exploits this issue could gain execution on a victim...

KLA11974 ACE vulnerabilities in Microsoft Apps

ACE vulnerabilities were found in Microsoft Apps. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2020-17003 CVE-2020-16918 Related products Yammer-Desktop-App CVE list CVE-2020-17003 critical CVE-2020-16918 critical KB list Solution Install...

Microsoft 3D Viewer Base3D Code Execution (October 2020)

The Microsoft 3D Viewer app installed on the remote host is affected by a code execution vulnerability when the Base3D rendering engine improperly handles memory. An attacker who successfully exploited the vulnerability would gain execution on a victim system. C Tenable Network Security, Inc...

Django Cross-Site Scripting Vulnerability (CNVD-2021-29486)

Django is the Django Foundation's set of open source Web application framework based on the Python language . The framework includes object-oriented mapper , view system , template system and so on. A cross-site scripting vulnerability exists in Django versions prior to 3.12.0 and prior to 3.11.2...

Best practices for defending Azure Virtual Machines

One of the things that our Detection and Response Team DART and Customer Service and Support CSS security teams see frequently during investigation of customer incidents are attacks on virtual machines from the internet. This is one area in the cloud security shared responsibility model where...

Foxit Reader < 10.1 Multiple Vulnerabilities

According to its version, the Foxit Reader application installed on the remote Windows host is prior to 10.1. It is, therefore affected by multiple vulnerabilities. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. C...

Krpano Panorama Viewer 1.20.8 Cross Site Scripting

Exploit Title: XSS in krpano Panorama Viewer Google Dork: inurl:krpano.html Date: 10/05/2020 Exploit Author: Adriano Marcio Monteiro @adrianomarcmont Exploit Author Site: https://www.brztec.com Exploit Author E-mail: [email protected] Exploit Author Packetstorm Bio:...

PYSEC-2020-263

A flaw was found in Django REST Framework versions before 3.12.0 and before 3.11.2. When using the browseable API viewer, Django REST Framework fails to properly escape certain strings that can come from user input. This allows a user who can control those strings to inject malicious tags, leadin...

PYSEC-2020-263

A flaw was found in Django REST Framework versions before 3.12.0 and before 3.11.2. When using the browseable API viewer, Django REST Framework fails to properly escape certain strings that can come from user input. This allows a user who can control those strings to inject malicious...

CVE-2020-25626

A flaw was found in Django REST Framework versions before 3.12.0 and before 3.11.2. When using the browseable API viewer, Django REST Framework fails to properly escape certain strings that can come from user input. This allows a user who can control those strings to inject malicious tags, leadin...

CVE-2020-25626

CVE-2020-25626 affects Django REST Framework (DRF) with versions prior to 3.12.0 and prior to 3.11.2. The flaw is an improper escape of certain user-controlled strings in the browseable API viewer, allowing injection of script tags (XSS). Impact is limited to cases where attackers can influence t...

Desktop Viewer toolbar does not show up in session using Web Interface

The black Desktop Viewer toolbar does not show up in the XenApp or XenDesktop ICA session of the user...

PT-2020-16135

Name of the Vulnerable Software and Affected Versions Django REST Framework versions prior to 3.12.0 Django REST Framework versions prior to 3.11.2 Description A flaw in Django REST Framework allows for a cross-site-scripting XSS issue when using the browseable API viewer. The framework fails to...

Moderate: Red Hat Security Advisory: okular security update

An update for okular is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

Low: Red Hat Security Advisory: evince and poppler security and bug fix update

An update for evince and poppler is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

Heap Overflow Vulnerability in Shenzhen Xunlei.com Culture Co.

Light Viewer is a professional image viewing software. Shenzhen Xunlei.com Culture Co., Ltd. Light Shadow Viewer has a heap overflow vulnerability that allows an attacker to construct a special picture that causes the software to crash, and can also lead to arbitrary code execution after successf...

Heap Overflow Vulnerability (CNVD-2020-58815) in Shenzhen Xunlei.com Culture Co.'s Light and Shadow Viewer

Light Viewer is a professional image viewing software. Shenzhen Xunlei.com Culture Co., Ltd. Light Shadow Viewer has a heap overflow vulnerability that allows an attacker to construct a special picture that causes the software to crash, and can also lead to arbitrary code execution after successf...