Priority HIGH 81
Kofax Capture, now referred to as Tungsten Capture, version 6.0.0.0 (other versions may be affected) exposes a deprecated .NET Remoting HTTP channel on port 2424 via the Ascent Capture Service that is accessible without…
CVSS 4.0CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.00883 · Published 2026-04-23 · No fix listed CWE-306
Priority MEDIUM 42
Tungsten Automation Power PDF JPF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.0085 · Published 2025-02-11 · No fix listed CWE-787
Priority LOW 16
Tungsten Automation Power PDF JP2 File Parsing Use-After-Free Information Disclosure Vulnerability.
CVSS 3.1LOW 3.3· Local · No auth · User interaction · EPSS 0.00349 · Published 2025-02-11 · No fix listed CWE-416
Priority LOW 36
Tungsten Automation Power PDF JP2 File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00355 · Published 2025-02-11 · No fix listed CWE-125
Priority LOW 34
Tungsten Automation Power PDF JP2 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00348 · Published 2025-02-11 · No fix listed CWE-125
Priority LOW 36
Tungsten Automation Power PDF JP2 File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.0041 · Published 2025-02-11 · No fix listed CWE-125
Priority LOW 31
Tungsten Automation (Kofax) TotalAgility in versions all through 7.9.0.25.0.954 is vulnerable to a Reflected XSS attacks through mfpScreenResolutionWidth parameter manipulation in a form sent to an endpoint /TotalAgility…
CVSS 4.0MEDIUM 5.3· Network · No auth · User interaction · EPSS 0.00525 · Published 2024-12-06 · No fix listed CWE-79
Priority LOW 31
Tungsten Automation (Kofax) TotalAgility in versions all through 7.9.0.25.0.954 is vulnerable to a Reflected XSS attacks through mfpConnectionId parameter manipulation in a form sent to endpoints "/TotalAgility/Kofax/Bro…
CVSS 4.0MEDIUM 5.3· Network · No auth · User interaction · EPSS 0.00525 · Published 2024-12-06 · No fix listed CWE-79
Priority LOW 36
Tungsten Automation Power PDF JP2 File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00284 · Published 2024-11-22 · No fix listed CWE-125
Priority LOW 18
Tungsten Automation Power PDF JP2 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability.
CVSS 3.1LOW 3.3· Local · No auth · User interaction · EPSS 0.00254 · Published 2024-11-22 · No fix listed CWE-125
Priority LOW 18
Tungsten Automation Power PDF PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability.
CVSS 3.1LOW 3.3· Local · No auth · User interaction · EPSS 0.00254 · Published 2024-11-22 · No fix listed CWE-125
Priority LOW 36
Tungsten Automation Power PDF JPF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00311 · Published 2024-11-22 · No fix listed CWE-787
Priority LOW 36
Tungsten Automation Power PDF JP2 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00272 · Published 2024-11-22 · No fix listed CWE-787
Priority LOW 36
Tungsten Automation Power PDF JP2 File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00284 · Published 2024-11-22 · No fix listed CWE-125
Priority LOW 36
Tungsten Automation Power PDF PDF File Parsing Use-After-Free Remote Code Execution Vulnerability.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00317 · Published 2024-11-22 · No fix listed CWE-416
Priority LOW 21
Tungsten Automation Power PDF AcroForm Annotation Out-Of-Bounds Read Information Disclosure Vulnerability.
CVSS 3.1MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.00559 · Published 2024-11-22 · No fix listed CWE-125
Priority LOW 16
Tungsten Automation Power PDF PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability.
CVSS 3.1LOW 3.3· Local · No auth · User interaction · EPSS 0.00254 · Published 2024-11-22 · No fix listed CWE-125
Priority LOW 16
Tungsten Automation Power PDF PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability.
CVSS 3.1LOW 3.3· Local · No auth · User interaction · EPSS 0.00254 · Published 2024-11-22 · No fix listed CWE-125
Priority LOW 16
Tungsten Automation Power PDF OXPS File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability.
CVSS 3.1LOW 3.3· Local · No auth · User interaction · EPSS 0.00254 · Published 2024-11-22 · No fix listed CWE-125
Priority LOW 16
Tungsten Automation Power PDF PNG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability.
CVSS 3.1LOW 3.3· Local · No auth · User interaction · EPSS 0.00254 · Published 2024-11-22 · No fix listed CWE-125
Priority LOW 16
Tungsten Automation Power PDF GIF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability.
CVSS 3.1LOW 3.3· Local · No auth · User interaction · EPSS 0.00254 · Published 2024-11-22 · No fix listed CWE-125
Priority LOW 16
Tungsten Automation Power PDF PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability.
CVSS 3.1LOW 3.3· Local · No auth · User interaction · EPSS 0.00255 · Published 2024-11-22 · No fix listed CWE-125
Priority LOW 16
Tungsten Automation Power PDF JPG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability.
CVSS 3.1LOW 3.3· Local · No auth · User interaction · EPSS 0.00255 · Published 2024-11-22 · No fix listed CWE-125
Priority LOW 36
Tungsten Automation Power PDF PDF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00274 · Published 2024-11-22 · No fix listed CWE-122
Priority LOW 36
Tungsten Automation Power PDF PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00269 · Published 2024-11-22 · No fix listed CWE-787
Load more
THREATIST.IORead the docs