Vulnerabilities

TI-2021-15481 CVE-2021-37599 · GHSA-qv8c-8mv2-x97w

The exporter/Login.aspx login form in the Exporter in Nuance Winscribe Dictation 4.1.0.99…

MEDIUM 48

The exporter/Login.aspx login form in the Exporter in Nuance Winscribe Dictation 4.1.0.99 is vulnerable to SQL injection that allows a remote, unauthenticated attacker to read the database (and execute code in some situa…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03104 Published 2021-08-12 No fix listed CWE-89

TI-2018-13211 CVE-2018-18688 · GHSA-q966-hp9v-pw89

The Portable Document Format (PDF) specification does not provide any information…

LOW 26

The Portable Document Format (PDF) specification does not provide any information regarding the concrete procedure of how to validate signatures.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01146 Published 2021-01-07 No fix listed CWE-347

TI-2013-00617 CVE-2013-0732 · GHSA-xgw3-xv34-g29w

Heap-based buffer overflow in PDFCore8.dll in Nuance PDF Reader before 8.1 allows remote…

MEDIUM 48

Heap-based buffer overflow in PDFCore8.dll in Nuance PDF Reader before 8.1 allows remote attackers to execute arbitrary code via crafted font table directory values in a TTF file, related to naming table entries.

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.05161 Published 2014-03-27 No fix listed CWE-119

TI-2013-00056 CVE-2013-0113 · GHSA-g25p-fx9h-6rrq

Nuance PDF Reader 7.0 and PDF Viewer Plus 7.1 allow remote attackers to execute arbitrary…

MEDIUM 46

Nuance PDF Reader 7.0 and PDF Viewer Plus 7.1 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted PDF document.

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.0322 Published 2013-02-24 No fix listed CWE-119

TI-2010-04907 CVE-2010-5209 · GHSA-v9h6-gj8j-4c4v

Multiple untrusted search path vulnerabilities in Nuance PDF Reader 6.0 allow local users…

LOW 30

Multiple untrusted search path vulnerabilities in Nuance PDF Reader 6.0 allow local users to gain privileges via a Trojan horse (1) dwmapi.dll or (2) exceptiondumpdll.dll file in the current working directory, as demonst…

CVSS 2.0MEDIUM 6.9 Local No auth Interaction — EPSS 0.00347 Published 2012-09-06 No fix listed