Priority LOW 31
Office Server Document Converter V7.2MR4 and earlier and V7.1MR7 and earlier allows a remote unauthenticated attacker to conduct an XML External Entity (XXE) attack to cause a denial of service (DoS) condition to the oth…
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.01138 · Published 2021-11-01 · No fix listed CWE-611
Priority LOW 36
Office Server Document Converter V7.2MR4 and earlier and V7.1MR7 and earlier allows a remote unauthenticated attacker to conduct an XML External Entity (XXE) attack to cause a denial of service (DoS) condition by process…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0152 · Published 2021-11-01 · No fix listed CWE-611
Priority MEDIUM 43
A buffer overflow vulnerability exists in the PowerPoint document conversion function of Rainbow PDF Office Server Document Converter V7.0 Pro MR1 (7,0,2019,0220).
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.02866 · Published 2019-10-31 · No fix listed CWE-122
Priority MEDIUM 40
An exploitable heap corruption vulnerability exists in the Txo functionality of Antenna House DMC HTMLFilter as used by MarkLogic 8.0-6.
CVSS 3.0HIGH 8.6· Local · No auth · User interaction · EPSS 0.01335 · Published 2018-09-07 · No fix listed CWE-119
Priority MEDIUM 44
An exploitable heap corruption vulnerability exists in the iBldDirInfo functionality of Antenna House DMC HTMLFilter used by MarkLogic 8.0-6.
CVSS 3.0CRITICAL 9.6· Network · No auth · User interaction · EPSS 0.01457 · Published 2018-09-07 · No fix listed CWE-119
Priority MEDIUM 42
In Antenna House Office Server Document Converter version V6.1 Pro MR2 for Linux64 (6,1,2018,0312), a crafted Microsoft Word (DOC) document can lead to an out-of-bounds write, resulting in remote code execution.
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.02035 · Published 2018-07-11 · No fix listed CWE-787
Priority MEDIUM 42
An exploitable out-of-bounds write exists in the Microsoft Word document conversion functionality of the Antenna House Office Server Document Converter version V6.1 Pro MR2 for Linux64 (6,1,2018,0312).
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.02052 · Published 2018-07-11 · No fix listed CWE-787
Priority MEDIUM 43
An exploitable stack-based buffer overflow exists in the Microsoft Word document conversion functionality of the Antenna House Office Server Document Converter version V6.1 Pro MR2 for Linux64 (6,1,2018,0312).
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.02525 · Published 2018-07-11 · No fix listed CWE-787
Priority LOW 39
In Antenna House Office Server Document Converter version V6.1 Pro MR2 for Linux64 (6,1,2018,0312), a crafted Microsoft Word (DOC) document can lead to an out-of-bounds write, resulting in remote code execution.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.02489 · Published 2018-07-11 · No fix listed CWE-787
Priority LOW 37
In Antenna House Office Server Document Converter version V6.1 Pro MR2 for Linux64 (6,1,2018,0312), a crafted Microsoft Word (DOC) document can lead to an out-of-bounds write, resulting in remote code execution.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.01639 · Published 2018-07-11 · No fix listed CWE-787
Priority LOW 39
An exploitable heap corruption exists in the PowerPoint document conversion functionality of the Antenna House Office Server Document Converter version V6.1 Pro MR2 for Linux64 (6,1,2018,0312).
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.02489 · Published 2018-07-11 · No fix listed CWE-787
Priority MEDIUM 41
An exploitable heap corruption vulnerability exists in the DHFSummary functionality of AntennaHouse DMC HTMLFilter.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.01385 · Published 2018-04-24 · No fix listed CWE-119
Priority MEDIUM 42
An exploitable heap corruption vulnerability exists in the Doc_GetFontTable functionality of AntennaHouse DMC HTMLFilter.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.01996 · Published 2018-04-24 · No fix listed CWE-119
Priority MEDIUM 42
An exploitable heap corruption vulnerability exists in the Doc_SetSummary functionality of AntennaHouse DMC HTMLFilter.
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.01917 · Published 2018-04-24 · No fix listed CWE-119
Priority LOW 39
An exploitable heap corruption vulnerability exists in the AddSst functionality of Antenna House DMC HTMLFilter as used by MarkLogic 8.0-6.
CVSS 3.0HIGH 8.3· Network · No auth · User interaction · EPSS 0.01328 · Published 2017-05-24 · No fix listed CWE-119
Priority LOW 39
An exploitable heap corruption vulnerability exists in the GetIndexArray functionality of Antenna House DMC HTMLFilter as used by MarkLogic 8.0-6.
CVSS 3.0HIGH 8.3· Network · No auth · User interaction · EPSS 0.01328 · Published 2017-05-24 · No fix listed CWE-119
Priority LOW 38
An exploitable heap overflow vulnerability exists in the ParseEnvironment functionality of AntennaHouse DMC HTMLFilter as used by MarkLogic 8.0-6.
CVSS 3.0HIGH 8.3· Network · No auth · User interaction · EPSS 0.00917 · Published 2017-05-23 · No fix listed CWE-119
Priority LOW 39
An exploitable stack-based buffer overflow vulnerability exists in the DHFSummary functionality of AntennaHouse DMC HTMLFilter as used by MarkLogic 8.0-6.
CVSS 3.0HIGH 8.3· Network · No auth · User interaction · EPSS 0.01299 · Published 2017-05-23 · No fix listed CWE-119
Priority LOW 39
An exploitable heap corruption vulnerability exists in the UnCompressUnicode functionality of Antenna House DMC HTMLFilter used by MarkLogic 8.0-6.
CVSS 3.0HIGH 8.3· Network · No auth · User interaction · EPSS 0.01432 · Published 2017-05-23 · No fix listed CWE-119
Priority LOW 39
An exploitable heap corruption vulnerability exists in the FillRowFormat functionality of Antenna House DMC HTMLFilter that is shipped with MarkLogic 8.0-6.
CVSS 3.0HIGH 8.3· Network · No auth · User interaction · EPSS 0.01328 · Published 2017-05-23 · No fix listed CWE-119