https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 17:36:35 +0000 https://cve.radiocsirt.org/vuln/bdu:2021-01205 bdu:2021-01205 https://cve.radiocsirt.org/vuln/bdu:2021-01205 https://cve.radiocsirt.org/vuln/cnvd-2020-24445 cnvd-2020-24445 https://cve.radiocsirt.org/vuln/cnvd-2020-24445 https://cve.radiocsirt.org/vuln/euvd-2026-40171 EUVD-2026-40171 https://cve.radiocsirt.org/vuln/euvd-2026-40171 https://cve.radiocsirt.org/vuln/fkie_cve-2020-10910 <p>This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.0.29478. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the RotatePage command of the communication API. The issue results from the lack of proper validation of user-supplied data, which can result in a type confusion condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-9943.</p> <p>This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.0.29478. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the RotatePage command of the communication API. The issue results from the lack of proper validation of user-supplied data, which can result in a type confusion condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-9943.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-10910 https://cve.radiocsirt.org/vuln/ghsa-8c76-p8h5-3vfv <p>This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.0.29478. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the RotatePage command of the communication API. The issue results from the lack of proper validation of user-supplied data, which can result in a type confusion condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-9943.</p> <p>This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.0.29478. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the RotatePage command of the communication API. The issue results from the lack of proper validation of user-supplied data, which can result in a type confusion condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-9943.</p> https://cve.radiocsirt.org/vuln/ghsa-8c76-p8h5-3vfv https://cve.radiocsirt.org/vuln/gsd-2020-10910 gsd-2020-10910 https://cve.radiocsirt.org/vuln/gsd-2020-10910