Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-13518 State: PUBLISHED Published: 2020-12-17T23:48:35 Last Updated: 2024-08-04T12:18:18.469Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N) Vendors: n/a Products: NZXT Problem Types: CWE-269 Description: An information disclosure vulnerability exists in the WinRing0x64 Driver IRP 0x9c402084 functionality of NZXT CAM 4.8.0. A specially crafted I/O request packet (IRP) can cause the disclosure of sensitive information. An attacker can send a malicious IRP to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1115
CVE ID: CVE-2020-13519 State: PUBLISHED Published: 2020-12-18T19:52:35 Last Updated: 2024-08-04T12:18:18.389Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: n/a Products: NZXT" Problem Types: CWE-269 Description: A privilege escalation vulnerability exists in the WinRing0x64 Driver IRP 0x9c402088 functionality of NZXT CAM 4.8.0. A specially crafted I/O request packet (IRP) can cause increased privileges. An attacker can send a malicious IRP to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1116
CVE ID: CVE-2020-13520 State: PUBLISHED Published: 2020-12-11T03:25:01 Last Updated: 2024-08-04T12:18:18.351Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Pixar Problem Types: CWE-119 Description: An out of bounds memory corruption vulnerability exists in the way Pixar OpenUSD 20.05 reconstructs paths from binary USD files. A specially crafted malformed file can trigger an out of bounds memory modification which can result in remote code execution. To trigger this vulnerability, victim needs to access an attacker-provided malformed file. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerabilit
formed file. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1120 - https://support.apple.com/kb/HT212011
CVE ID: CVE-2020-13521 State: REJECTED Published: 2020-09-24T14:13:34 Last Updated: 2020-09-29T20:09:31 Description: No description available.
CVE ID: CVE-2020-13522 State: PUBLISHED Published: 2020-08-04T19:03:46 Last Updated: 2024-08-04T12:18:18.379Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: n/a Products: SoftPerfect Problem Types: CWE-269 Description: An exploitable arbitrary file delete vulnerability exists in SoftPerfect RAM Disk 4.1 spvve.sys driver. A specially crafted I/O request packet (IRP) can allow an unprivileged user to delete any file on the filesystem. An attacker can send a malicious IRP to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1121
CVE ID: CVE-2020-13523 State: PUBLISHED Published: 2020-08-04T19:02:11 Last Updated: 2024-08-04T12:18:18.471Z Severity: LOW (CVSS 3.8 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N) Vendors: n/a Products: SoftPerfect Problem Types: CWE-200 Description: An exploitable information disclosure vulnerability exists in SoftPerfect’s RAM Disk 4.1 spvve.sys driver. A specially crafted I/O request packet (IRP) can cause the disclosure of sensitive information. An attacker can send a malicious IRP to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1122
CVE ID: CVE-2020-13524 State: PUBLISHED Published: 2020-12-03T17:03:20 Last Updated: 2024-08-04T12:18:18.293Z Severity: MEDIUM (CVSS 6.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L) Vendors: n/a Products: Pixar Problem Types: CWE-119 Description: An out-of-bounds memory corruption vulnerability exists in the way Pixar OpenUSD 20.05 uses SPECS data from binary USD files. A specially crafted malformed file can trigger an out-of-bounds memory access and modification which results in memory corruption. To trigger this vulnerability, the victim needs to access an attacker-provided malformed file. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulne
ded malformed file. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1125 - http://seclists.org/fulldisclosure/2020/Dec/32 - http://seclists.org/fulldisclosure/2020/Dec/26 - https://support.apple.com/kb/HT212011
CVE ID: CVE-2020-13525 State: PUBLISHED Published: 2020-12-03T17:04:06 Last Updated: 2024-08-04T12:18:18.509Z Severity: MEDIUM (CVSS 6.4 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: n/a Products: ProcessMaker Problem Types: CWE-89 Description: The sort parameter in the download page /sysworkflow/en/neoclassic/reportTables/reportTables_Ajax is vulnerable to SQL injection in ProcessMaker 3.4.11. A specially crafted HTTP request can cause an SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1126
CVE ID: CVE-2020-13526 State: PUBLISHED Published: 2020-12-10T21:15:32 Last Updated: 2024-08-04T12:18:18.379Z Severity: MEDIUM (CVSS 6.4 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: n/a Products: ProcessMaker Problem Types: CWE-89 Description: SQL injection vulnerability exists in the handling of sort parameters in ProcessMaker 3.4.11. A specially crafted HTTP request can cause an SQL injection. The reportTables_Ajax and clientSetupAjax pages are vulnerable to SQL injection in the sort parameter.An attacker can make an authenticated HTTP request to trigger these vulnerabilities. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerabi
ulnerabilities. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1126
CVE ID: CVE-2020-13527 State: PUBLISHED Published: 2020-12-17T23:38:47 Last Updated: 2024-08-04T12:18:18.454Z Severity: MEDIUM (CVSS 4.8 CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:H/A:N) Vendors: n/a Products: Lantronix Problem Types: CWE-352 Description: An authentication bypass vulnerability exists in the Web Manager functionality of Lantronix XPort EDGE 3.0.0.0R11, 3.1.0.0R9, 3.4.0.0R12 and 4.2.0.0R7. A specially crafted HTTP request can cause increased privileges. An attacker can send an HTTP request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1135
CVE ID: CVE-2020-13528 State: PUBLISHED Published: 2020-12-17T23:38:54 Last Updated: 2024-08-04T12:18:18.292Z Severity: LOW (CVSS 3.1 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: n/a Products: Lantronix Problem Types: CWE-319 Description: An information disclosure vulnerability exists in the Web Manager and telnet CLI functionality of Lantronix XPort EDGE 3.0.0.0R11, 3.1.0.0R9, 3.4.0.0R12 and 4.2.0.0R7. A specially crafted HTTP request can cause information disclosure. An attacker can sniff the network to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1136
CVE ID: CVE-2020-13529 State: PUBLISHED Published: 2021-05-10T15:08:34 Last Updated: 2024-08-04T12:18:18.443Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H) Vendors: n/a Products: Systemd Problem Types: CWE-290 Description: An exploitable denial-of-service vulnerability exists in Systemd 245. A specially crafted DHCP FORCERENEW packet can cause a server running the DHCP client to be vulnerable to a DHCP ACK spoofing attack. An attacker can forge a pair of FORCERENEW and DCHP ACK packets to reconfigure the server. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1142 - https://security.gen
gram Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1142 - https://security.gentoo.org/glsa/202107-48 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/42TMJVNYRY65B4QCJICBYOEIVZV3KUYI/ - http://www.openwall.com/lists/oss-security/2021/08/04/2 - http://www.openwall.com/lists/oss-security/2021/08/17/3 - http://www.openwall.com/lists/oss-security/2021/09/07/3 - https://security.netapp.com/advisory/ntap-20210625-0005/
CVE ID: CVE-2020-13530 State: PUBLISHED Published: 2020-12-11T03:21:01 Last Updated: 2024-08-04T12:18:18.440Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: n/a Products: EIP Stack Group Problem Types: CWE-910 Description: A denial-of-service vulnerability exists in the Ethernet/IP server functionality of the EIP Stack Group OpENer 2.3 and development commit 8c73bf3. A large number of network requests in a small span of time can cause the running program to stop. An attacker can send a sequence of requests to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2
tional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1143
CVE ID: CVE-2020-13531 State: PUBLISHED Published: 2020-12-03T16:23:59 Last Updated: 2024-08-04T12:18:18.315Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Pixar Problem Types: CWE-416 Description: A use-after-free vulnerability exists in a way Pixar OpenUSD 20.08 processes reference paths textual USD files. A specially crafted file can trigger the reuse of a freed memory which can result in further memory corruption and arbitrary code execution. To trigger this vulnerability, the victim needs to open an attacker-provided malformed file. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability
ormed file. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1145
CVE ID: CVE-2020-13532 State: PUBLISHED Published: 2021-04-09T17:50:13 Last Updated: 2024-08-04T12:18:18.282Z Severity: CRITICAL (CVSS 9.3 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: n/a Products: Dream Report Problem Types: CWE-276 Description: A privilege escalation vulnerability exists in Dream Report 5 R20-2. In the default configuration, the Syncfusion Dashboard Service service binary can be replaced by attackers to escalate privileges to NT SYSTEM. An attacker can provide a malicious file to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1146
CVE ID: CVE-2020-13533 State: PUBLISHED Published: 2021-04-09T17:50:10 Last Updated: 2024-08-04T12:18:18.431Z Severity: CRITICAL (CVSS 9.3 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: n/a Products: Dream Report Problem Types: CWE-276 Description: A privilege escalation vulnerability exists in Dream Report 5 R20-2. IIn the default configuration, the following registry keys, which reference binaries with weak permissions, can be abused by attackers to effectively ‘backdoor’ the installation files and escalate privileges when a new user logs in and uses the application. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports
on. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1146
CVE ID: CVE-2020-13534 State: PUBLISHED Published: 2021-04-09T17:50:07 Last Updated: 2024-08-04T12:18:18.453Z Severity: CRITICAL (CVSS 9.3 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: n/a Products: Dream Report Problem Types: CWE-276 Description: A privilege escalation vulnerability exists in Dream Report 5 R20-2. COM Class Identifiers (CLSID), installed by Dream Report 5 20-2, reference LocalServer32 and InprocServer32 with weak privileges which can lead to privilege escalation when used. An attacker can provide a malicious file to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-
itional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1146
CVE ID: CVE-2020-13535 State: PUBLISHED Published: 2020-12-18T20:39:31 Last Updated: 2024-08-04T12:18:18.441Z Severity: CRITICAL (CVSS 9.3 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: n/a Products: Kepware Problem Types: CWE-276 Description: A privilege escalation vulnerability exists in Kepware LinkMaster 3.0.94.0. In its default configuration, an attacker can globally overwrite service configuration to execute arbitrary code with NT SYSTEM privileges. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1147
CVE ID: CVE-2020-13536 State: PUBLISHED Published: 2020-11-05T20:09:45 Last Updated: 2024-08-04T12:18:18.442Z Severity: CRITICAL (CVSS 9.3 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: n/a Products: Moxa Problem Types: CWE-276 Description: An exploitable local privilege elevation vulnerability exists in the file system permissions of Moxa MXView series 3.1.8 installation. Depending on the vector chosen, an attacker can either add code to a script or replace a binary. By default MXViewService, which starts as a NT SYSTEM authority user executes a series of Node.Js scripts to start additional application functionality. Additional Analyst Notes: - CVE Program Container: References: - h
cripts to start additional application functionality. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1148
CVE ID: CVE-2020-13537 State: PUBLISHED Published: 2020-11-05T20:09:54 Last Updated: 2024-08-04T12:18:18.452Z Severity: CRITICAL (CVSS 9.3 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: n/a Products: Moxa Problem Types: CWE-276 Description: An exploitable local privilege elevation vulnerability exists in the file system permissions of Moxa MXView series 3.1.8 installation. Depending on the vector chosen, an attacker can either add code to a script or replace a binary.By default MXViewService, which starts as a NT SYSTEM authority user executes a series of Node.Js scripts to start additional application functionality and among them the mosquitto executable is also run. Additional Anal
ripts to start additional application functionality and among them the mosquitto executable is also run. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1148
CVE ID: CVE-2020-13539 State: PUBLISHED Published: 2021-01-05T15:42:47 Last Updated: 2024-08-04T12:18:18.530Z Severity: CRITICAL (CVSS 9.3 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: n/a Products: Win-911 Problem Types: CWE-276 Description: An exploitable local privilege elevation vulnerability exists in the file system permissions of the Win-911 Enterprise V4.20.13 install directory via “WIN-911 Mobile Runtime” service. Depending on the vector chosen, an attacker can overwrite various executables which could lead to escalation of the privileges when executed. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS
ditional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1150 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2020-1150
CVE ID: CVE-2020-13540 State: PUBLISHED Published: 2021-01-05T15:43:06 Last Updated: 2024-08-04T12:18:18.441Z Severity: CRITICAL (CVSS 9.3 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: n/a Products: Win-911 Problem Types: CWE-276 Description: An exploitable local privilege elevation vulnerability exists in the file system permissions of the Win-911 Enterprise V4.20.13 install directory via WIN-911 Account Change Utility. Depending on the vector chosen, an attacker can overwrite various executables which could lead to escalation of the privileges when executed. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2
tional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1150
CVE ID: CVE-2020-13541 State: PUBLISHED Published: 2021-01-05T15:44:48 Last Updated: 2024-08-04T12:18:18.423Z Severity: CRITICAL (CVSS 9.3 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: n/a Products: Win-911 Problem Types: CWE-276 Description: An exploitable local privilege elevation vulnerability exists in the file system permissions of the Mobile-911 Server V2.5 install directory. Depending on the vector chosen, an attacker can overwrite the service executable and execute arbitrary code with System privileges or replace other files within the installation folder that could lead to local privilege escalation. Additional Analyst Notes: - CVE Program Container: References: - https://t
hat could lead to local privilege escalation. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1151
CVE ID: CVE-2020-13542 State: PUBLISHED Published: 2020-12-03T16:24:27 Last Updated: 2024-08-04T12:18:18.409Z Severity: CRITICAL (CVSS 9.3 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: n/a Products: LogicalDoc Problem Types: local privilege escalation Description: A local privilege elevation vulnerability exists in the file system permissions of LogicalDoc 8.5.1 installation. Depending on the vector chosen, an attacker can either replace the service binary or replace DLL files loaded by the service, both which get executed by a service thus executing arbitrary commands with System privileges. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.
ands with System privileges. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1154
CVE ID: CVE-2020-13543 State: PUBLISHED Published: 2020-12-03T16:24:55 Last Updated: 2024-08-04T12:18:18.470Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Webkit Problem Types: use after free Description: A code execution vulnerability exists in the WebSocket functionality of Webkit WebKitGTK 2.30.0. A specially crafted web page can trigger a use-after-free vulnerability which can lead to remote code execution. An attacker can get a user to visit a webpage to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1155 - https://security.gentoo.
Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1155 - https://security.gentoo.org/glsa/202012-10 - https://www.oracle.com/security-alerts/cpuapr2022.html
CVE ID: CVE-2020-13544 State: PUBLISHED Published: 2021-01-06T14:48:45 Last Updated: 2024-08-04T12:18:18.442Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Softmaker Problem Types: CWE-194 Description: An exploitable sign extension vulnerability exists in the TextMaker document parsing functionality of SoftMaker Office 2021’s TextMaker application. A specially crafted document can cause the document parser to sign-extend a length used to terminate a loop, which can later result in the loop’s index being used to write outside the bounds of a heap buffer during the reading of file data. An attacker can entice the victim to open a document to trig
he bounds of a heap buffer during the reading of file data. An attacker can entice the victim to open a document to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1161
CVE ID: CVE-2020-13545 State: PUBLISHED Published: 2021-01-06T14:50:15 Last Updated: 2024-08-04T12:18:18.499Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Softmaker Problem Types: CWE-196 Description: An exploitable signed conversion vulnerability exists in the TextMaker document parsing functionality of SoftMaker Office 2021’s TextMaker application. A specially crafted document can cause the document parser to miscalculate a length used to allocate a buffer, later upon usage of this buffer the application will write outside its bounds resulting in a heap-based memory corruption. An attacker can entice the victim to open a document to trigger
its bounds resulting in a heap-based memory corruption. An attacker can entice the victim to open a document to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1162
CVE ID: CVE-2020-13546 State: PUBLISHED Published: 2021-02-10T16:56:08 Last Updated: 2024-08-04T12:18:18.312Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: SoftMaker Problem Types: CWE-190 Description: In SoftMaker Software GmbH SoftMaker Office TextMaker 2021 (revision 1014), a specially crafted document can cause the document parser to miscalculate a length used to allocate a buffer, later upon usage of this buffer the application will write outside its bounds resulting in a heap-based buffer overflow. An attacker can entice the victim to open a document to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: Referen
the victim to open a document to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1163
CVE ID: CVE-2020-13547 State: PUBLISHED Published: 2020-12-22T18:59:28 Last Updated: 2024-08-04T12:18:18.297Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Foxit Problem Types: CWE-843 Description: A type confusion vulnerability exists in the JavaScript engine of Foxit Software’s Foxit PDF Reader, version 10.1.0.37527. A specially crafted PDF document can trigger an improper use of an object, resulting in memory corruption and arbitrary code execution. An attacker needs to trick the user to open the malicious file to trigger this vulnerability. If the browser plugin extension is enabled, visiting a malicious site can also trigger the vulnerabil
his vulnerability. If the browser plugin extension is enabled, visiting a malicious site can also trigger the vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1165
CVE ID: CVE-2020-13548 State: PUBLISHED Published: 2021-02-10T19:45:05 Last Updated: 2024-08-04T12:18:18.447Z Severity: HIGH (CVSS 8 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Foxit Problem Types: CWE-416 Description: In Foxit Reader 10.1.0.37527, a specially crafted PDF document can trigger reuse of previously free memory which can lead to arbitrary code execution. An attacker needs to trick the user to open the malicious file to trigger this vulnerability. If the browser plugin extension is enabled, visiting a malicious site can also trigger the vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerabil
vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1166