https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 19:01:29 +0000 https://cve.radiocsirt.org/vuln/bdu:2020-04647 bdu:2020-04647 https://cve.radiocsirt.org/vuln/bdu:2020-04647 https://cve.radiocsirt.org/vuln/cnvd-2020-24466 cnvd-2020-24466 https://cve.radiocsirt.org/vuln/cnvd-2020-24466 https://cve.radiocsirt.org/vuln/euvd-2026-40126 EUVD-2026-40126 https://cve.radiocsirt.org/vuln/euvd-2026-40126 https://cve.radiocsirt.org/vuln/fkie_cve-2020-10889 <p>This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.0.29478. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the DuplicatePages command of the communication API. The issue results from the lack of proper validation of user-supplied data, which can result in a type confusion condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-9828.</p> <p>This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.0.29478. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the DuplicatePages command of the communication API. The issue results from the lack of proper validation of user-supplied data, which can result in a type confusion condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-9828.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-10889 https://cve.radiocsirt.org/vuln/ghsa-8mph-5rcv-88gw <p>This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.0.29478. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the DuplicatePages command of the communication API. The issue results from the lack of proper validation of user-supplied data, which can result in a type confusion condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-9828.</p> <p>This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.0.29478. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the DuplicatePages command of the communication API. The issue results from the lack of proper validation of user-supplied data, which can result in a type confusion condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-9828.</p> https://cve.radiocsirt.org/vuln/ghsa-8mph-5rcv-88gw https://cve.radiocsirt.org/vuln/gsd-2020-10889 gsd-2020-10889 https://cve.radiocsirt.org/vuln/gsd-2020-10889