Lucene search
+L

699 matches found

OSV
OSV
added 2022/02/18 8:15 p.m.10 views

CVE-2022-24370

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader Foxit reader 11.0.1.0719 macOS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specif...

6.5CVSS4.9AI score0.01889EPSS
SaveExploits0References2
NVD
NVD
added 2022/02/18 8:15 p.m.33 views

CVE-2022-24370

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader Foxit reader 11.0.1.0719 macOS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specif...

6.5CVSS0.01889EPSS
SaveExploits0References2
Prion
Prion
added 2022/02/18 8:15 p.m.26 views

Design/Logic Flaw

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader Foxit reader 11.0.1.0719 macOS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specif...

4.3CVSS6.1AI score0.01889EPSS
SaveExploits0References2Affected Software2
CVE
CVE
added 2022/02/18 7:52 p.m.162 views

CVE-2022-24370

CVE-2022-24370 affects Foxit PDF Reader for macOS (e.g., Foxit Reader 11.0.1.0719 and older). The root cause is improper validation of user-supplied data in XFA forms, leading to an out-of-bounds read (read past the end of an allocated object). This can disclose sensitive information and, in comb...

6.5CVSS6.7AI score0.01889EPSS
SaveExploits0References2Affected Software2
Cvelist
Cvelist
added 2022/02/18 7:52 p.m.45 views

CVE-2022-24370

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader Foxit reader 11.0.1.0719 macOS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specif...

3.3CVSS7.4AI score0.01889EPSS
SaveExploits0References2
CNVD
CNVD
added 2022/02/15 12:00 a.m.29 views

Foxit PDF Reader and Foxit PDF Editor Stack Buffer Overflow Vulnerability

Foxit PDF Reader and Foxit PDF Editor are both products of Foxit China, a PDF reader and a PDF editor. A security vulnerability exists in Foxit PDF Reader and Foxit PDF Editor due to a failure to effectively restrict memory boundaries when handling XFA. An attacker could exploit this vulnerabilit...

9.8CVSS2.6AI score0.11926EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2022/02/11 2:15 a.m.13 views

CVE-2022-24954

Foxit PDF Reader before 11.2.1 and Foxit PDF Editor before 11.2.1 have a Stack-Based Buffer Overflow related to XFA, for the 'subform colSpan="-2"' and 'draw colSpan="1"' substrings...

9.8CVSS5.8AI score0.11926EPSS
SaveExploits1References3
NVD
NVD
added 2022/02/11 2:15 a.m.29 views

CVE-2022-24954

Foxit PDF Reader before 11.2.1 and Foxit PDF Editor before 11.2.1 have a Stack-Based Buffer Overflow related to XFA, for the 'subform colSpan="-2"' and 'draw colSpan="1"' substrings...

9.8CVSS0.11926EPSS
SaveExploits1References2
Prion
Prion
added 2022/02/11 2:15 a.m.20 views

Stack overflow

Foxit PDF Reader before 11.2.1 and Foxit PDF Editor before 11.2.1 have a Stack-Based Buffer Overflow related to XFA, for the 'subform colSpan="-2"' and 'draw colSpan="1"' substrings...

7.5CVSS9.4AI score0.11926EPSS
SaveExploits1References2Affected Software2
Cvelist
Cvelist
added 2022/02/11 1:40 a.m.42 views

CVE-2022-24954

Foxit PDF Reader before 11.2.1 and Foxit PDF Editor before 11.2.1 have a Stack-Based Buffer Overflow related to XFA, for the 'subform colSpan="-2"' and 'draw colSpan="1"' substrings...

9.7AI score0.11926EPSS
SaveExploits1References2
Zero Day Initiative
Zero Day Initiative
added 2022/02/10 12:00 a.m.31 views

Foxit PDF Reader XFA Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS1.2AI score0.01889EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/01/04 3:15 p.m.16 views

CVE-2021-45978

Foxit PDF Reader and PDF Editor before 11.1 on macOS allow remote attackers to execute arbitrary code via xfa.host.gotoURL in the XFA API...

7.8CVSS7.8AI score0.015EPSS
SaveExploits0References4
OSV
OSV
added 2022/01/04 3:15 p.m.12 views

CVE-2021-45978

Foxit PDF Reader and PDF Editor before 11.1 on macOS allow remote attackers to execute arbitrary code via xfa.host.gotoURL in the XFA API...

7.8CVSS7.4AI score0.015EPSS
SaveExploits0References3
Prion
Prion
added 2022/01/04 3:15 p.m.20 views

Code injection

Foxit PDF Reader and PDF Editor before 11.1 on macOS allow remote attackers to execute arbitrary code via xfa.host.gotoURL in the XFA API...

6.8CVSS7.8AI score0.015EPSS
SaveExploits0References3Affected Software2
Cvelist
Cvelist
added 2022/01/04 2:30 p.m.43 views

CVE-2021-45978

Foxit PDF Reader and PDF Editor before 11.1 on macOS allow remote attackers to execute arbitrary code via xfa.host.gotoURL in the XFA API...

8.1AI score0.015EPSS
SaveExploits0References3
CNVD
CNVD
added 2021/08/12 12:00 a.m.62 views

Foxit Reader and Foxit PhantomPDF Denial of Service Vulnerability

Foxit Reader and Foxit PhantomPDF are both PDF document readers from Foxit, a Chinese company. Foxit Reader and PhantomPDF versions prior to 10.1.4 contain a security vulnerability that could be exploited by an attacker to invoke the stack via a recursive function during the processing of XFA for...

5CVSS4.2AI score0.00961EPSS
SaveExploits0Affected Software2
NVD
NVD
added 2021/08/11 10:15 p.m.38 views

CVE-2021-38569

An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows stack consumption via recursive function calls during the handling of XFA forms or link objects...

7.5CVSS0.00961EPSS
SaveExploits0References1
Prion
Prion
added 2021/08/11 10:15 p.m.27 views

Design/Logic Flaw

An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows stack consumption via recursive function calls during the handling of XFA forms or link objects...

5CVSS7.5AI score0.00961EPSS
SaveExploits0References1Affected Software2
ATTACKERKB
ATTACKERKB
added 2021/08/11 10:15 p.m.9 views

CVE-2021-38569

An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows stack consumption via recursive function calls during the handling of XFA forms or link objects...

7.5CVSS7.1AI score0.00961EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2021/08/11 9:14 p.m.41 views

CVE-2021-38569

An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows stack consumption via recursive function calls during the handling of XFA forms or link objects...

7.8AI score0.00961EPSS
SaveExploits0References1
Rows per page
Query Builder