Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CVE-2019-17497

EPSS 2.91% · P86
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2019-17497

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Tracker PDF-XChange Editor before 8.0.330.0 has an NTLM SSO hash theft vulnerability using crafted FDF or XFDF files (a related issue to CVE-2018-4993). For example, an NTLM hash is sent for a link to \\192.168.0.2\C$\file.pdf without user interaction.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Tracker Software PDF-XChange Editor 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Tracker Software PDF-XChange Editor是加拿大Tracker Software公司的一套用于查看、编辑PDF格式文件的软件。 Tracker Software PDF-XChange Editor 8.0.330.0之前版本中存在安全漏洞。攻击者可利用该漏洞窃取NTLM哈希值,进而获取密码。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2019-17497

#POC DescriptionSource LinkShenlong Link
1POC Files for CVE-2019-17497https://github.com/JM-Lemmi/cve-2019-17497POC Details
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2019-17497

登录查看更多情报信息。

Same Patch Batch · n/a · 2019-10-10 · 59 CVEs total

CVE-2015-9464WordPress s3bubble-amazon-s3-html-5-video-with-adverts插件路径遍历漏洞
CVE-2019-17072WordPress new-contact-form-widget插件SQL注入漏洞
CVE-2019-17429Adhouma CMS SQL注入漏洞
CVE-2019-17070WordPress liquid-speech-balloon插件跨站脚本漏洞
CVE-2019-17071WordPress client-dash插件跨站脚本漏洞
CVE-2019-17430赞赞网络科技 EyouCms 跨站脚本漏洞
CVE-2015-9460WordPress booking-system插件SQL注入漏洞
CVE-2015-9461WordPress awesome-filterable-portfolio插件SQL注入漏洞
CVE-2015-9462WordPress awesome-filterable-portfolio插件SQL注入漏洞
CVE-2019-17449Avira Operations Avira Software Updater 代码问题漏洞
CVE-2015-9459WordPress searchterms-tagging-2插件跨站脚本漏洞
CVE-2015-9465WordPress yet-another-stars-rating插件SQL注入漏洞
CVE-2015-9466WordPress wti-like-post插件SQL注入漏洞
CVE-2015-9467WordPress broken-link-manager插件SQL注入漏洞
CVE-2015-9468WordPress broken-link-manager插件跨站脚本漏洞
CVE-2015-9469WordPress content-grabber插件跨站脚本漏洞
CVE-2015-9470WordPress history-collection插件路径遍历漏洞
CVE-2015-9463WordPress s3bubble-amazon-s3-audio-streaming插件路径遍历漏洞
CVE-2015-9471WordPress dzs-zoomsounds插件代码问题漏洞
CVE-2015-9472WordPress incoming-links插件跨站脚本漏洞

Showing top 20 of 59 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

V. Comments for CVE-2019-17497

No comments yet


Leave a comment