CVE
Vendors
Products
Updated
CVSS v2
CVSS v3
An issue was discovered in the svg-vector-icon-plugin (aka WP SVG Icons) plugin through 3.2.1 for WordPress. wp-admin/admin.php?page=wp-svg-icons-custom-set mishandles Custom Icon uploads. CSRF leads to upload of a ZIP archive containing a .php file.
Foxit_reader, Reader, Phantompdf, Foxit_studio_photo, 3d, E-mail_advertising_system, Enterprise_reader, Foxit_advanced_pdf_editor, Foxit_mobilepdf_-_pdf_reader, Foxit_pdf, 20007_office_system, 27mhz_wireless_keyboard, 365_apps, 3d_builder, 3d_viewer, Access, Accessibility_insights_for_android, Accessibility_insights_for_web, Access_multilingual_user_interface_pack, Active_directory
2020-08-24
N/A
7.5 HIGH
An issue was discovered in Foxit PhantomPDF before 8.3.11. The application could crash when calling xfa.event.rest XFA JavaScript due to accessing a wild pointer.
Foxit_reader, Reader, Phantompdf, Foxit_studio_photo, 3d, E-mail_advertising_system, Enterprise_reader, Foxit_advanced_pdf_editor, Foxit_mobilepdf_-_pdf_reader, Foxit_pdf, 20007_office_system, 27mhz_wireless_keyboard, 365_apps, 3d_builder, 3d_viewer, Access, Accessibility_insights_for_android, Accessibility_insights_for_web, Access_multilingual_user_interface_pack, Active_directory
2020-08-24
N/A
7.5 HIGH
An issue was discovered in Foxit PhantomPDF before 8.3.10. The application could be exposed to a JavaScript Denial of Service when deleting pages in a document that contains only one page by calling a "t.hidden = true" function.
Foxit_reader, Reader, Phantompdf, Foxit_studio_photo, 3d, E-mail_advertising_system, Enterprise_reader, Foxit_advanced_pdf_editor, Foxit_mobilepdf_-_pdf_reader, Foxit_pdf, 20007_office_system, 27mhz_wireless_keyboard, 365_apps, 3d_builder, 3d_viewer, Access, Accessibility_insights_for_android, Accessibility_insights_for_web, Access_multilingual_user_interface_pack, Active_directory
2020-08-24
N/A
7.5 HIGH
An issue was discovered in Foxit PhantomPDF before 8.3.11. The application could crash due to the repeated release of the signature dictionary during CSG_SignatureF and CPDF_Document destruction.
Foxit_reader, Reader, Phantompdf, Foxit_studio_photo, 3d, E-mail_advertising_system, Enterprise_reader, Foxit_advanced_pdf_editor, Foxit_mobilepdf_-_pdf_reader, Foxit_pdf, 20007_office_system, 27mhz_wireless_keyboard, 365_apps, 3d_builder, 3d_viewer, Access, Accessibility_insights_for_android, Accessibility_insights_for_web, Access_multilingual_user_interface_pack, Active_directory
2019-07-22
N/A
7.5 HIGH
An issue was discovered in Foxit PhantomPDF before 8.3.11. The application could crash when calling certain XFA JavaScript due to the use of, or access to, a NULL pointer without proper validation on the object.
20007_office_system, 27mhz_wireless_keyboard, 365_apps, 3d_builder, 3d_viewer, Access, Accessibility_insights_for_android, Accessibility_insights_for_web, Access_multilingual_user_interface_pack, Active_directory
2019-07-25
N/A
7.5 HIGH
An issue was discovered in Foxit PhantomPDF before 8.3.11. The application could crash due to the lack of proper validation of the existence of an object prior to performing operations on that object when executing JavaScript.
Foxit_reader, Reader, Phantompdf, Foxit_studio_photo, 3d, E-mail_advertising_system, Enterprise_reader, Foxit_advanced_pdf_editor, Foxit_mobilepdf_-_pdf_reader, Foxit_pdf, 20007_office_system, 27mhz_wireless_keyboard, 365_apps, 3d_builder, 3d_viewer, Access, Accessibility_insights_for_android, Accessibility_insights_for_web, Access_multilingual_user_interface_pack, Active_directory
2020-08-24
N/A
7.5 HIGH
An issue was discovered in Foxit PhantomPDF before 8.3.10. The application could be exposed to Memory Corruption due to the use of an invalid pointer copy, resulting from a destructed string object.
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2019. Notes: none.
Foxit_reader, Reader, Phantompdf, Foxit_studio_photo, 3d, E-mail_advertising_system, Enterprise_reader, Foxit_advanced_pdf_editor, Foxit_mobilepdf_-_pdf_reader, Foxit_pdf, 20007_office_system, 27mhz_wireless_keyboard, 365_apps, 3d_builder, 3d_viewer, Access, Accessibility_insights_for_android, Accessibility_insights_for_web, Access_multilingual_user_interface_pack, Active_directory
2020-08-24
N/A
9.8 CRITICAL
An issue was discovered in Foxit PhantomPDF before 8.3.10. The application could be exposed to Heap Corruption due to data desynchrony when adding AcroForm.
Foxit_reader, Reader, Phantompdf, Foxit_studio_photo, 3d, E-mail_advertising_system, Enterprise_reader, Foxit_advanced_pdf_editor, Foxit_mobilepdf_-_pdf_reader, Foxit_pdf, 20007_office_system, 27mhz_wireless_keyboard, 365_apps, 3d_builder, 3d_viewer, Access, Accessibility_insights_for_android, Accessibility_insights_for_web, Access_multilingual_user_interface_pack, Active_directory
2019-07-22
N/A
7.5 HIGH
An issue was discovered in Foxit PhantomPDF before 8.3.10. The application could be exposed to a NULL pointer dereference and crash when getting a PDF object from a document, or parsing a certain portfolio that contains a null dictionary.