Записи flowpaper
23 опубликованных записей вендора flowpaper.
Профиль для исследователя
- Попали в KEV
- 0 · 0 %
- С эксплойтом
- 0 · 0 %
- Pre-auth RCE
- 1
- С записью об исправлении
- 4,3 %
- Медиана: публикация → KEV
- Ни одна запись не попала в KEV
Повторяющиеся классы
- CWE-125 Out-of-bounds Read4
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3
- CWE-476 NULL Pointer Dereference3
- CWE-787 Out-of-bounds Write3
- CWE-416 Use After Free2
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer2
Классы уязвимостей, которые чаще всего встречаются у этого вендора: куда смотреть.
CWEВсе записи
23 записей| Срочность | CVE | Уязвимость | Критичность | KEV | EPSS | Опубликовано |
|---|---|---|---|---|---|---|
55В плане | CVE-2018-11686Proof of concept | The Publish Service in FlexPaper (later renamed FlowPaper) 2.3.6 allows remote code execution via setup.php and change_config.php.flowpaper · flexpaper · CWE-20 | Критическая9,8 | — | 52,5 % | 3 июл. 2019 г. |
40В плане | CVE-2020-23878Эксплойта нет | pdf2json v0.71 was discovered to contain a stack buffer overflow in the component XRef::fetch.flowpaper · pdf2json · CWE-787 | Критическая9,8 | — | 1,8 % | 10 нояб. 2021 г. |
35Наблюдать | CVE-2018-14947Эксплойта нет | An issue has been found in PDF2JSON 0.69.flowpaper · pdf2json · CWE-119 | Высокая8,8 | — | 1,6 % | 5 авг. 2018 г. |
35Наблюдать | CVE-2018-14946Эксплойта нет | An issue has been found in PDF2JSON 0.69.flowpaper · pdf2json · CWE-119 | Высокая8,8 | — | 1,6 % | 5 авг. 2018 г. |
31Наблюдать | CVE-2020-18750Эксплойта нет | Buffer overflow in pdf2json 0.69 allows local users to execute arbitrary code by converting a crafted PDF file.flowpaper · pdf2json · CWE-120 | Высокая7,8 | — | 0,5 % | 5 февр. 2021 г. |
30Наблюдать | CVE-2020-23879Эксплойта нет | pdf2json v0.71 was discovered to contain a NULL pointer dereference in the component ObjectStream::getObject.flowpaper · pdf2json · CWE-476 | Высокая7,5 | — | 1,4 % | 10 нояб. 2021 г. |
24Наблюдать | CVE-2014-9677Эксплойта нет | Cross-site scripting (XSS) vulnerability in FlexPaperViewer.swf in Flexpaper before 2.3.1 allows remote attackers to inject arbitrary web scflowpaper · flexpaper · CWE-79 | Средняя6,1 | — | 1,2 % | 17 окт. 2017 г. |
24Наблюдать | CVE-2014-9678Эксплойта нет | FlexPaperViewer.swf in Flexpaper before 2.3.1 allows remote attackers to conduct content-spoofing attacks via the Swfile parameter.flowpaper · flexpaper · CWE-20 | Средняя6,1 | — | 1,0 % | 17 окт. 2017 г. |
22Наблюдать | CVE-2020-19463Эксплойта нет | An issue has been found in function vfprintf in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to a stack overflow.flowpaper · pdf2json · CWE-770 | Средняя5,5 | — | 0,7 % | 21 июл. 2021 г. |
22Наблюдать | CVE-2020-19464Эксплойта нет | An issue has been found in function XRef::fetch in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to a stack overflow flowpaper · pdf2json · CWE-770 | Средняя5,5 | — | 0,7 % | 21 июл. 2021 г. |
22Наблюдать | CVE-2020-19474Эксплойта нет | An issue has been found in function Gfx::doShowText in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an Use After flowpaper · pdf2json · CWE-416 | Средняя5,5 | — | 0,7 % | 21 июл. 2021 г. |
22Наблюдать | CVE-2020-19467Эксплойта нет | An issue has been found in function DCTStream::transformDataUnit in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to flowpaper · pdf2json · CWE-416 | Средняя5,5 | — | 0,7 % | 21 июл. 2021 г. |
22Наблюдать | CVE-2020-19469Эксплойта нет | An issue has been found in function DCTStream::reset in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an invalid wflowpaper · pdf2json · CWE-787 | Средняя5,5 | — | 0,6 % | 21 июл. 2021 г. |
22Наблюдать | CVE-2020-19470Эксплойта нет | An issue has been found in function DCTStream::getChar in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to a NULL poiflowpaper · pdf2json · CWE-476 | Средняя5,5 | — | 0,6 % | 21 июл. 2021 г. |
22Наблюдать | CVE-2020-19471Эксплойта нет | An issue has been found in function DCTStream::decodeImage in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an invflowpaper · pdf2json · CWE-125 | Средняя5,5 | — | 0,6 % | 21 июл. 2021 г. |
22Наблюдать | CVE-2020-19472Эксплойта нет | An issue has been found in function DCTStream::readHuffSym in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an invflowpaper · pdf2json · CWE-125 | Средняя5,5 | — | 0,6 % | 21 июл. 2021 г. |
22Наблюдать | CVE-2020-19473Эксплойта нет | An issue has been found in function DCTStream::decodeImage in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an uncflowpaper · pdf2json · CWE-755 | Средняя5,5 | — | 0,6 % | 21 июл. 2021 г. |
22Наблюдать | CVE-2020-19475Эксплойта нет | An issue has been found in function CCITTFaxStream::lookChar in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an iflowpaper · pdf2json · CWE-787 | Средняя5,5 | — | 0,6 % | 21 июл. 2021 г. |
22Наблюдать | CVE-2020-19468Эксплойта нет | An issue has been found in function EmbedStream::getChar in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to a null pflowpaper · pdf2json · CWE-476 | Средняя5,5 | — | 0,6 % | 21 июл. 2021 г. |
22Наблюдать | CVE-2020-19465Эксплойта нет | An issue has been found in function ObjectStream::getObject in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an inflowpaper · pdf2json · CWE-125 | Средняя5,5 | — | 0,6 % | 21 июл. 2021 г. |
22Наблюдать | CVE-2020-19466Эксплойта нет | An issue has been found in function DCTStream::transformDataUnit in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to flowpaper · pdf2json · CWE-125 | Средняя5,5 | — | 0,6 % | 21 июл. 2021 г. |
21Наблюдать | CVE-2023-5200Эксплойта нет | flowpaper <= 2.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodeflowpaper · flowpaper · CWE-79 | Средняя5,4 | — | 0,5 % | 20 окт. 2023 г. |
21Наблюдать | CVE-2023-40197Эксплойта нет | WordPress flowpaper Plugin <= 1.9.9 is vulnerable to Cross Site Scripting (XSS)flowpaper · flowpaper · CWE-79 | Средняя5,4 | — | 0,4 % | 4 сент. 2023 г. |
- CVE-2018-1168655В плане
The Publish Service in FlexPaper (later renamed FlowPaper) 2.3.6 allows remote code execution via setup.php and change_config.php.
КритическаяCVSS 9,8Proof of conceptEPSS 53 %flowpaper · flexpaper3 июл. 2019 г.
- CVE-2020-2387840В плане
pdf2json v0.71 was discovered to contain a stack buffer overflow in the component XRef::fetch.
КритическаяCVSS 9,8Эксплойта нетEPSS 2 %flowpaper · pdf2json10 нояб. 2021 г.
- CVE-2018-1494735Наблюдать
An issue has been found in PDF2JSON 0.69.
ВысокаяCVSS 8,8Эксплойта нетEPSS 2 %flowpaper · pdf2json5 авг. 2018 г.
- CVE-2018-1494635Наблюдать
An issue has been found in PDF2JSON 0.69.
ВысокаяCVSS 8,8Эксплойта нетEPSS 2 %flowpaper · pdf2json5 авг. 2018 г.
- CVE-2020-1875031Наблюдать
Buffer overflow in pdf2json 0.69 allows local users to execute arbitrary code by converting a crafted PDF file.
ВысокаяCVSS 7,8Эксплойта нетEPSS 1 %flowpaper · pdf2json5 февр. 2021 г.
- CVE-2020-2387930Наблюдать
pdf2json v0.71 was discovered to contain a NULL pointer dereference in the component ObjectStream::getObject.
ВысокаяCVSS 7,5Эксплойта нетEPSS 1 %flowpaper · pdf2json10 нояб. 2021 г.
- CVE-2014-967724Наблюдать
Cross-site scripting (XSS) vulnerability in FlexPaperViewer.swf in Flexpaper before 2.3.1 allows remote attackers to inject arbitrary web sc
СредняяCVSS 6,1Эксплойта нетEPSS 1 %flowpaper · flexpaper17 окт. 2017 г.
- CVE-2014-967824Наблюдать
FlexPaperViewer.swf in Flexpaper before 2.3.1 allows remote attackers to conduct content-spoofing attacks via the Swfile parameter.
СредняяCVSS 6,1Эксплойта нетEPSS 1 %flowpaper · flexpaper17 окт. 2017 г.
- CVE-2020-1946322Наблюдать
An issue has been found in function vfprintf in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to a stack overflow.
СредняяCVSS 5,5Эксплойта нетEPSS 1 %flowpaper · pdf2json21 июл. 2021 г.
- CVE-2020-1946422Наблюдать
An issue has been found in function XRef::fetch in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to a stack overflow
СредняяCVSS 5,5Эксплойта нетEPSS 1 %flowpaper · pdf2json21 июл. 2021 г.
- CVE-2020-1947422Наблюдать
An issue has been found in function Gfx::doShowText in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an Use After
СредняяCVSS 5,5Эксплойта нетEPSS 1 %flowpaper · pdf2json21 июл. 2021 г.
- CVE-2020-1946722Наблюдать
An issue has been found in function DCTStream::transformDataUnit in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to
СредняяCVSS 5,5Эксплойта нетEPSS 1 %flowpaper · pdf2json21 июл. 2021 г.
- CVE-2020-1946922Наблюдать
An issue has been found in function DCTStream::reset in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an invalid w
СредняяCVSS 5,5Эксплойта нетEPSS 1 %flowpaper · pdf2json21 июл. 2021 г.
- CVE-2020-1947022Наблюдать
An issue has been found in function DCTStream::getChar in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to a NULL poi
СредняяCVSS 5,5Эксплойта нетEPSS 1 %flowpaper · pdf2json21 июл. 2021 г.
- CVE-2020-1947122Наблюдать
An issue has been found in function DCTStream::decodeImage in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an inv
СредняяCVSS 5,5Эксплойта нетEPSS 1 %flowpaper · pdf2json21 июл. 2021 г.
- CVE-2020-1947222Наблюдать
An issue has been found in function DCTStream::readHuffSym in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an inv
СредняяCVSS 5,5Эксплойта нетEPSS 1 %flowpaper · pdf2json21 июл. 2021 г.
- CVE-2020-1947322Наблюдать
An issue has been found in function DCTStream::decodeImage in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an unc
СредняяCVSS 5,5Эксплойта нетEPSS 1 %flowpaper · pdf2json21 июл. 2021 г.
- CVE-2020-1947522Наблюдать
An issue has been found in function CCITTFaxStream::lookChar in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an i
СредняяCVSS 5,5Эксплойта нетEPSS 1 %flowpaper · pdf2json21 июл. 2021 г.
- CVE-2020-1946822Наблюдать
An issue has been found in function EmbedStream::getChar in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to a null p
СредняяCVSS 5,5Эксплойта нетEPSS 1 %flowpaper · pdf2json21 июл. 2021 г.
- CVE-2020-1946522Наблюдать
An issue has been found in function ObjectStream::getObject in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an in
СредняяCVSS 5,5Эксплойта нетEPSS 1 %flowpaper · pdf2json21 июл. 2021 г.
- CVE-2020-1946622Наблюдать
An issue has been found in function DCTStream::transformDataUnit in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to
СредняяCVSS 5,5Эксплойта нетEPSS 1 %flowpaper · pdf2json21 июл. 2021 г.
- CVE-2023-520021Наблюдать
flowpaper <= 2.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
СредняяCVSS 5,4Эксплойта нетEPSS 1 %flowpaper · flowpaper20 окт. 2023 г.
- CVE-2023-4019721Наблюдать
WordPress flowpaper Plugin <= 1.9.9 is vulnerable to Cross Site Scripting (XSS)
СредняяCVSS 5,4Эксплойта нетEPSS 0 %flowpaper · flowpaper4 сент. 2023 г.