Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
user-supplied data, which can result in a read past the end of an allocated object. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the current process. Was ZDI-CAN-4982. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php - https://zerodayinitiative.com/advisories/ZDI-17-862
CVE ID: CVE-2017-14819 State: PUBLISHED Published: 2017-12-20T14:00:00 Last Updated: 2024-08-05T19:34:40.146Z Vendors: Foxit Products: Foxit Reader Problem Types: CWE-125 Description: This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 8.3.1.21155. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the channel number member of the cdef box. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated object. An attacker can leverage this in co
user-supplied data, which can result in a read past the end of an allocated object. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the current process. Was ZDI-CAN-5011. Additional Analyst Notes: - CVE Program Container: References: - https://zerodayinitiative.com/advisories/ZDI-17-863 - https://www.foxitsoftware.com/support/security-bulletins.php
CVE ID: CVE-2017-14820 State: PUBLISHED Published: 2017-12-20T14:00:00 Last Updated: 2024-08-05T19:34:39.938Z Vendors: Foxit Products: Foxit Reader Problem Types: CWE-125 Description: This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 8.3.1.21155. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the tile index of the SOT marker in JPEG2000 images. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated object. An attacker can leverage
idation of user-supplied data, which can result in a read past the end of an allocated object. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the current process. Was ZDI-CAN-5012. Additional Analyst Notes: - CVE Program Container: References: - https://zerodayinitiative.com/advisories/ZDI-17-864 - https://www.foxitsoftware.com/support/security-bulletins.php
CVE ID: CVE-2017-14821 State: PUBLISHED Published: 2017-12-20T14:00:00 Last Updated: 2024-08-05T19:34:39.995Z Vendors: Foxit Products: Foxit Reader Problem Types: CWE-125 Description: This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 8.3.1.21155. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of the xTsiz member of SIZ markers. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated object. An attacker can leverage this
on of user-supplied data, which can result in a read past the end of an allocated object. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the current process. Was ZDI-CAN-5013. Additional Analyst Notes: - CVE Program Container: References: - https://zerodayinitiative.com/advisories/ZDI-17-865 - https://www.foxitsoftware.com/support/security-bulletins.php
CVE ID: CVE-2017-14822 State: PUBLISHED Published: 2017-12-20T14:00:00 Last Updated: 2024-08-05T19:34:39.988Z Vendors: Foxit Products: Foxit Reader Problem Types: CWE-125 Description: This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 8.3.1.21155. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of the xOsiz member of SIZ markers. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated object. An attacker can leverage this
on of user-supplied data, which can result in a read past the end of an allocated object. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the current process. Was ZDI-CAN-5014. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php - https://zerodayinitiative.com/advisories/ZDI-17-866
CVE ID: CVE-2017-14823 State: PUBLISHED Published: 2017-12-20T14:00:00 Last Updated: 2024-08-05T19:34:39.996Z Vendors: Foxit Products: Foxit Reader Problem Types: CWE-843 Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.1.21155. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the signer method of XFA's Signature objects. The issue results from the lack of proper validation of user-supplied data, which can result in a type confusion condition. An attacker can leverage this vulnerability to execute c
-supplied data, which can result in a type confusion condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-5015. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php - https://zerodayinitiative.com/advisories/ZDI-17-867
CVE ID: CVE-2017-14824 State: PUBLISHED Published: 2017-12-20T14:00:00 Last Updated: 2024-08-05T19:34:40.116Z Vendors: Foxit Products: Foxit Reader Problem Types: CWE-843 Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.1.21155. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the insert method of XFAScriptObject objects. The issue results from the lack of proper validation of user-supplied data, which can result in a type confusion condition. An attacker can leverage this vulnerability to execute c
-supplied data, which can result in a type confusion condition. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-5016. Additional Analyst Notes: - CVE Program Container: References: - https://zerodayinitiative.com/advisories/ZDI-17-868 - https://www.foxitsoftware.com/support/security-bulletins.php
CVE ID: CVE-2017-14825 State: PUBLISHED Published: 2017-12-20T14:00:00 Last Updated: 2024-08-05T19:34:39.996Z Vendors: Foxit Products: Foxit Reader Problem Types: CWE-843 Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.1.21155. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the remove method of XFAScriptObject objects. The issue results from the lack of proper validation of user-supplied data, which can result in a type confusion condition. An attacker can leverage this vulnerability to execute c
-supplied data, which can result in a type confusion condition. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-5017. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php - https://zerodayinitiative.com/advisories/ZDI-17-869
CVE ID: CVE-2017-14826 State: PUBLISHED Published: 2017-12-20T14:00:00 Last Updated: 2024-08-05T19:34:40.417Z Vendors: Foxit Products: Foxit Reader Problem Types: CWE-843 Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.1.21155. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the formNodes method of XFA Node objects. The issue results from the lack of proper validation of user-supplied data, which can result in a type confusion condition. An attacker can leverage this vulnerability to execute code
plied data, which can result in a type confusion condition. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-5018. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php - https://zerodayinitiative.com/advisories/ZDI-17-870
CVE ID: CVE-2017-14827 State: PUBLISHED Published: 2017-12-20T14:00:00 Last Updated: 2024-08-05T19:34:39.924Z Vendors: Foxit Products: Foxit Reader Problem Types: CWE-843 Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.1.21155. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the append method of XFA Node objects. The issue results from the lack of proper validation of user-supplied data, which can result in a type confusion condition. An attacker can leverage this vulnerability to execute code und
ed data, which can result in a type confusion condition. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-5019. Additional Analyst Notes: - CVE Program Container: References: - https://zerodayinitiative.com/advisories/ZDI-17-871 - https://www.foxitsoftware.com/support/security-bulletins.php
CVE ID: CVE-2017-14828 State: PUBLISHED Published: 2017-12-20T14:00:00 Last Updated: 2024-08-05T19:34:40.068Z Vendors: Foxit Products: Foxit Reader Problem Types: CWE-843 Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.1.21155. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the w method of XFA Layout objects. The issue results from the lack of proper validation of user-supplied data, which can result in a type confusion condition. An attacker can leverage this vulnerability to execute code under
data, which can result in a type confusion condition. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-5020. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php - https://zerodayinitiative.com/advisories/ZDI-17-872
CVE ID: CVE-2017-14829 State: PUBLISHED Published: 2017-12-20T14:00:00 Last Updated: 2024-08-05T19:34:40.371Z Vendors: Foxit Products: Foxit Reader Problem Types: CWE-843 Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.1.21155. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the openList method of XFAScriptObject objects. The issue results from the lack of proper validation of user-supplied data, which can result in a type confusion condition. An attacker can leverage this to execute code in the c
er-supplied data, which can result in a type confusion condition. An attacker can leverage this to execute code in the context of the current process. Was ZDI-CAN-5021. Additional Analyst Notes: - CVE Program Container: References: - https://zerodayinitiative.com/advisories/ZDI-17-873 - https://www.foxitsoftware.com/support/security-bulletins.php
CVE ID: CVE-2017-14830 State: PUBLISHED Published: 2017-12-20T14:00:00 Last Updated: 2024-08-05T19:34:40.329Z Vendors: Foxit Products: Foxit Reader Problem Types: CWE-843 Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.1.21155. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the setFocus method of XFAScriptObject objects. The issue results from the lack of proper validation of user-supplied data, which can result in a type confusion condition. An attacker can leverage this to execute code in the c
er-supplied data, which can result in a type confusion condition. An attacker can leverage this to execute code in the context of the current process. Was ZDI-CAN-5022. Additional Analyst Notes: - CVE Program Container: References: - https://zerodayinitiative.com/advisories/ZDI-17-874 - https://www.foxitsoftware.com/support/security-bulletins.php
CVE ID: CVE-2017-14831 State: PUBLISHED Published: 2017-12-20T14:00:00 Last Updated: 2024-08-05T19:34:39.987Z Vendors: Foxit Products: Foxit Reader Problem Types: CWE-416 Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.1.21155. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the author attribute of Circle Annotation objects. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute c
ence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-5023. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php - https://zerodayinitiative.com/advisories/ZDI-17-875
CVE ID: CVE-2017-14832 State: PUBLISHED Published: 2017-12-20T14:00:00 Last Updated: 2024-08-05T19:34:39.951Z Vendors: Foxit Products: Foxit Reader Problem Types: CWE-416 Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.1.21155. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the style attribute of Caret Annotation objects. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute cod
ce of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-5024. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php - https://zerodayinitiative.com/advisories/ZDI-17-876
CVE ID: CVE-2017-14833 State: PUBLISHED Published: 2017-12-20T14:00:00 Last Updated: 2024-08-05T19:34:39.927Z Vendors: Foxit Products: Foxit Reader Problem Types: CWE-416 Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.1.21155. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the style attribute of Text Annotation objects. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code
e of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-5025. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php - https://zerodayinitiative.com/advisories/ZDI-17-877
CVE ID: CVE-2017-14834 State: PUBLISHED Published: 2017-12-20T14:00:00 Last Updated: 2024-08-05T19:34:40.328Z Vendors: Foxit Products: Foxit Reader Problem Types: CWE-416 Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.1.21155. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the style attribute of FileAttachment annotation objects. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to ex
e existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-5026. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php - https://zerodayinitiative.com/advisories/ZDI-17-878
CVE ID: CVE-2017-14835 State: PUBLISHED Published: 2017-12-20T14:00:00 Last Updated: 2024-08-05T19:42:20.584Z Vendors: Foxit Products: Foxit Reader Problem Types: CWE-843 Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.1.21155. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the page method of XFA Layout objects. The issue results from the lack of proper validation of user-supplied data, which can result in a type confusion condition. An attacker can leverage this to execute code in the context of
ed data, which can result in a type confusion condition. An attacker can leverage this to execute code in the context of the current process. Was ZDI-CAN-5027. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php - https://zerodayinitiative.com/advisories/ZDI-17-879
CVE ID: CVE-2017-14836 State: PUBLISHED Published: 2017-12-20T14:00:00 Last Updated: 2024-08-05T19:42:20.605Z Vendors: Foxit Products: Foxit Reader Problem Types: CWE-416 Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the modDate attribute of Annotation objects. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code under th
bject prior to performing operations on the object. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-5028. Additional Analyst Notes: - CVE Program Container: References: - https://zerodayinitiative.com/advisories/ZDI-17-880 - https://www.foxitsoftware.com/support/security-bulletins.php
CVE ID: CVE-2017-14837 State: PUBLISHED Published: 2017-12-20T14:00:00 Last Updated: 2024-08-05T19:42:22.359Z Vendors: Foxit Products: Foxit Reader Problem Types: CWE-843 Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.1.21155. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the pageSpan method of XFA Layout objects. The issue results from the lack of proper validation of user-supplied data, which can result in a type confusion condition. An attacker can leverage this to execute code in the contex
pplied data, which can result in a type confusion condition. An attacker can leverage this to execute code in the context of the current process. Was ZDI-CAN-5029. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php - https://zerodayinitiative.com/advisories/ZDI-17-881
CVE ID: CVE-2017-14838 State: PUBLISHED Published: 2017-09-27T20:00:00 Last Updated: 2024-08-05T19:42:20.594Z Vendors: n/a Products: n/a Problem Types: n/a Description: TeamWork Job Links allows Arbitrary File Upload in profileChange and coverChange. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/42795/
CVE ID: CVE-2017-14839 State: PUBLISHED Published: 2017-09-27T20:00:00 Last Updated: 2024-08-05T19:42:20.601Z Vendors: n/a Products: n/a Problem Types: n/a Description: TeamWork Photo Fusion allows Arbitrary File Upload in changeAvatar and changeCover. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/42797/
CVE ID: CVE-2017-14840 State: PUBLISHED Published: 2017-09-27T20:00:00 Last Updated: 2024-08-05T19:42:20.608Z Vendors: n/a Products: n/a Problem Types: n/a Description: TeamWork TicketPlus allows Arbitrary File Upload in updateProfile. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/42796/
CVE ID: CVE-2017-14841 State: PUBLISHED Published: 2017-09-27T20:00:00 Last Updated: 2024-08-05T19:42:20.591Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mojoomla Annual Maintenance Contract (AMC) Management System allows Arbitrary File Upload in profilesetting image handling. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/42799/
CVE ID: CVE-2017-14842 State: PUBLISHED Published: 2017-09-27T20:00:00 Last Updated: 2024-08-05T19:42:20.595Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mojoomla SMSmaster Multipurpose SMS Gateway for WordPress allows SQL Injection via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/42798/
CVE ID: CVE-2017-14843 State: PUBLISHED Published: 2017-09-27T20:00:00 Last Updated: 2024-08-05T19:42:21.366Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mojoomla School Management System for WordPress allows SQL Injection via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/42804/
CVE ID: CVE-2017-14844 State: PUBLISHED Published: 2017-09-27T20:00:00 Last Updated: 2024-08-05T19:42:21.423Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mojoomla WPGYM WordPress Gym Management System allows SQL Injection via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/42801/
CVE ID: CVE-2017-14845 State: PUBLISHED Published: 2017-09-27T20:00:00 Last Updated: 2024-08-05T19:42:22.152Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mojoomla WPCHURCH Church Management System for WordPress allows SQL Injection via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/42800/
CVE ID: CVE-2017-14846 State: PUBLISHED Published: 2017-09-27T20:00:00 Last Updated: 2024-08-05T19:42:22.192Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mojoomla Hospital Management System for WordPress allows SQL Injection via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/42802/
CVE ID: CVE-2017-14847 State: PUBLISHED Published: 2017-09-27T20:00:00 Last Updated: 2024-08-05T19:42:21.430Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mojoomla WPAMS Apartment Management System for WordPress allows SQL Injection via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/42805/