|
211251
|
7.7 |
HIGH
Network
|
indutny
|
elliptic
|
The Elliptic package 6.5.2 for Node.js allows ECDSA signature malleability via variations in encoding, leading '\0' bytes, or integer overflows. This could conceivably have a security-relevant impact…
|
CWE-190
Integer Overflow or Wraparound
|
CVE-2020-13822
|
2024-11-21 14:01 |
2020-06-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211252
|
7.5 |
HIGH
Network
|
foxitsoftware
|
reader phantompdf
|
An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It allows signature validation bypass via a modified file or a file with non-standard signatures.
|
CWE-347
Improper Verification of Cryptographic Signature
|
CVE-2020-13810
|
2024-11-21 14:01 |
2020-06-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211253
|
7.5 |
HIGH
Network
|
foxitsoftware
|
reader phantompdf
|
An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It allows resource consumption via long strings in the content stream.
|
CWE-400
Uncontrolled Resource Consumption
|
CVE-2020-13809
|
2024-11-21 14:01 |
2020-06-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211254
|
7.5 |
HIGH
Network
|
foxitsoftware
|
reader phantompdf
|
An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It allows resource consumption via crafted cross-reference stream data.
|
CWE-835
Loop with Unreachable Exit Condition ('Infinite Loop')
|
CVE-2020-13808
|
2024-11-21 14:01 |
2020-06-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211255
|
7.5 |
HIGH
Network
|
foxitsoftware
|
reader phantompdf
|
An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It has circular reference mishandling that causes a loop.
|
CWE-835
Loop with Unreachable Exit Condition ('Infinite Loop')
|
CVE-2020-13807
|
2024-11-21 14:01 |
2020-06-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211256
|
7.5 |
HIGH
Network
|
foxitsoftware
|
reader phantompdf
|
An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It has a use-after-free because of JavaScript execution after a deletion or close operation.
|
CWE-416
Use After Free
|
CVE-2020-13806
|
2024-11-21 14:01 |
2020-06-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211257
|
9.8 |
CRITICAL
Network
|
foxitsoftware
|
reader phantompdf
|
An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It has brute-force attack mishandling because the CAS service lacks a limit on login failures.
|
CWE-307
mproper Restriction of Excessive Authentication Attempts
|
CVE-2020-13805
|
2024-11-21 14:01 |
2020-06-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211258
|
9.8 |
CRITICAL
Network
|
foxitsoftware
|
reader phantompdf
|
An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It allows information disclosure of a hardcoded username and password in the DocuSign plugin.
|
CWE-798
Use of Hard-coded Credentials
|
CVE-2020-13804
|
2024-11-21 14:01 |
2020-06-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211259
|
7.5 |
HIGH
Network
|
foxitsoftware
|
phantompdf reader
|
An issue was discovered in Foxit PhantomPDF Mac and Foxit Reader for Mac before 4.0. It allows signature validation bypass via a modified file or a file with non-standard signatures.
|
CWE-347
Improper Verification of Cryptographic Signature
|
CVE-2020-13803
|
2024-11-21 14:01 |
2020-06-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211260
|
7.5 |
HIGH
Network
|
zohocorp
|
manageengine_opmanager
|
In Zoho ManageEngine OpManager before 125144, when <cachestart> is used, directory traversal validation can be bypassed.
|
CWE-22
Path Traversal
|
CVE-2020-13818
|
2024-11-21 14:01 |
2020-06-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|