NP
Product
Nitro Pro
18
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 14Medium 4Low 0
Watch
Add Nitro Pro to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-6146 | 8.8 | Sep 16 | An exploitable code execution vulnerability exists in the rendering functionality of Nitro Pro 13.13.2.242 and 13.16.2.300 Affected: 13.13.2.242; 13.16.2.300 |
| CVE-2020-6074 | 8.8 | May 18 | An exploitable code execution vulnerability exists in the PDF parser of Nitro Pro 13.9.1.155 Affected: 13.9.1.155 |
| CVE-2017-7442 | 8.8 | Aug 3 | Nitro Pro 11.0.3.173 allows remote attackers to execute arbitrary code via saveAs and launchURL calls with directory traversal sequences Affected: 11.0.3.173 |
| CVE-2020-10223 | 8.1 | Mar 8 | npdf.dll in Nitro Pro before 13.13.2.242 is vulnerable to JBIG2Decode CNxJBIG2DecodeStream Heap Corruption at npdf!CAPPDAnnotHandlerUtils::create_popup_for_markup+0x12fbe via a… Affected: before 13.13.2.242 |
| CVE-2020-10222 | 8.1 | Mar 8 | npdf.dll in Nitro Pro before 13.13.2.242 is vulnerable to Heap Corruption at npdf!nitro::get_property+2381 via a crafted PDF document Affected: before 13.13.2.242 |
| CVE-2021-21797 | 7.8 | Oct 18 | An exploitable double-free vulnerability exists in the JavaScript implementation of Nitro Pro PDF Affected: 13.31.0.605; 13.33.2.645 |
| CVE-2021-21796 | 7.8 | Oct 18 | An exploitable use-after-free vulnerability exists in the JavaScript implementation of Nitro Pro PDF Affected: 13.31.0.605; 13.33.2.645 |
| CVE-2021-21798 | 7.8 | Sep 15 | An exploitable return of stack variable address vulnerability exists in the JavaScript implementation of Nitro Pro PDF Affected: 13.31.0.605; 13.33.2.645 |
| CVE-2020-6116 | 7.8 | Sep 17 | An arbitrary code execution vulnerability exists in the rendering functionality of Nitro Software, Inc.’s Nitro Pro 13.13.2.242 Affected: 13.13.2.242; 13.16.2.300 |
| CVE-2020-6115 | 7.8 | Sep 17 | An exploitable vulnerability exists in the cross-reference table repairing functionality of Nitro Software, Inc.’s Nitro Pro 13.13.2.242 Affected: 13.13.2.242; 13.16.2.300 |
| CVE-2020-6113 | 7.8 | Sep 17 | An exploitable vulnerability exists in the object stream parsing functionality of Nitro Software, Inc.’s Nitro Pro 13.13.2.242 when updating its cross-reference table Affected: 13.13.2.242; 13.16.2.300 |
| CVE-2020-6112 | 7.8 | Sep 17 | An exploitable code execution vulnerability exists in the JPEG2000 Stripe Decoding functionality of Nitro Software, Inc.’s Nitro Pro 13.13.2.242 when decoding sub-samples Affected: 13.13.2.242; 13.16.2.300 |
| CVE-2020-6092 | 7.8 | May 18 | An exploitable code execution vulnerability exists in the way Nitro Pro 13.9.1.155 parses Pattern objects Affected: 13.9.1.155 |
| CVE-2019-18958 | 7.8 | Nov 21 | Nitro Pro before 13.2 creates a debug.log file in the directory where a .pdf file is located, if the .pdf document was produced by an OCR operation on the JPEG output of a scanner Affected: before 13.2 |
| CVE-2020-6093 | 5.5 | May 18 | An exploitable information disclosure vulnerability exists in the way Nitro Pro 13.9.1.155 does XML error handling Affected: 13.9.1.155 |
| CVE-2017-7950 | 5.5 | Jul 7 | Nitro Pro 11.0.3 and earlier allows remote attackers to cause a denial of service (application crash) via a crafted PCX file Affected: through 11.0.3 |
| CVE-2018-18689 | 5.3 | Jan 7 | The Portable Document Format (PDF) specification does not provide any information regarding the concrete procedure of how to validate signatures Affected: 11.0.3.173 |
| CVE-2018-18688 | 5.3 | Jan 7 | The Portable Document Format (PDF) specification does not provide any information regarding the concrete procedure of how to validate signatures Affected: 11.0.3.173 |
Showing 18