1407 matches found
The vulnerability of the btrfs_convert_extent_bit() function in the btrfs component of the Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the btrfsconvertextentbit function in the btrfs component of the Linux kernel lies in the handling of zero pointers. Exploiting this vulnerability could allow an attacker to trigger a system failure...
Linux Distros Unpatched Vulnerability : CVE-2024-31047
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in Academy Software Foundation openexr v.3.2.3 and before allows a local attacker to cause a denial of service DoS via the convert function of...
Linux Distros Unpatched Vulnerability : CVE-2017-17555
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The swriaudioconvert function in audioconvert.c in FFmpeg libswresample through 3.0.101, as used in FFmpeg 3.4.1, aubio 0.4.6, and other products, allows remote...
Linux Distros Unpatched Vulnerability : CVE-2016-9117
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NULL Pointer Access in function imagetopnm of convert.cjp2:1289 in OpenJPEG 2.1.2. Impact is Denial of Service. Someone must open a crafted j2k file...
Medium: openexr
Issue Overview: An issue in Academy Software Foundation openexr v.3.2.3 and before allows a local attacker to cause a denial of service DoS via the convert function of exrmultipart.cpp. CVE-2024-31047 Affected Packages: openexr Issue Correction: Run dnf update openexr --releasever 2023.8.20250818...
Malicious code in yyf-convert (npm)
The package yyf-convert was found to contain malicious code...
Malicious code in color-convert-conversions (npm)
The package color-convert-conversions was found to contain malicious code...
MAL-2025-18956 Malicious code in ducanh1368-gas-convert (npm)
The package ducanh1368-gas-convert was found to contain malicious code...
MAL-2025-17287 Malicious code in color-convert-conversions (npm)
The package color-convert-conversions was found to contain malicious code...
MAL-2025-40689 Malicious code in yyf-convert (npm)
The package yyf-convert was found to contain malicious code...
Malicious code in ducanh1368-gas-convert (npm)
The package ducanh1368-gas-convert was found to contain malicious code...
CVE-2025-55161
Stirling-PDF is a locally hosted web application that performs various operations on PDF files. Prior to version 1.1.0, when using the /api/v1/convert/markdown/pdf endpoint to convert Markdown to PDF, the backend calls a third-party tool to process it and includes a sanitizer for security...
CVE-2025-55161
Stirling-PDF is a locally hosted web application that performs various operations on PDF files. Prior to version 1.1.0, when using the /api/v1/convert/markdown/pdf endpoint to convert Markdown to PDF, the backend calls a third-party tool to process it and includes a sanitizer for security...
CVE-2025-55161 Stirling-PDF SSRF vulnerability on /api/v1/convert/markdown/pdf
Stirling-PDF is a locally hosted web application that performs various operations on PDF files. Prior to version 1.1.0, when using the /api/v1/convert/markdown/pdf endpoint to convert Markdown to PDF, the backend calls a third-party tool to process it and includes a sanitizer for security...
CVE-2025-55161
Stirling-PDF is a locally hosted web application that performs various operations on PDF files. Prior to version 1.1.0, when using the /api/v1/convert/markdown/pdf endpoint to convert Markdown to PDF, the backend calls a third-party tool to process it and includes a sanitizer for security...
CVE-2025-55161
Stirling-PDF prior to v1.1.0 exposes a Server-Side Request Forgery (SSRF) flaw in /api/v1/convert/markdown/pdf. The Markdown-to-PDF conversion uses a sanitizer that can be bypassed, allowing unauthenticated attackers to force the server to request arbitrary URLs (potentially internal). The issue ...
CVE-2025-55150 Stirling-PDF SSRF vulnerability on /api/v1/convert/html/pdf
Stirling-PDF is a locally hosted web application that performs various operations on PDF files. Prior to version 1.1.0, when using the /api/v1/convert/html/pdf endpoint to convert HTML to PDF, the backend calls a third-party tool to process it and includes a sanitizer for security sanitization...
CVE-2025-55150
Stirling-PDF is a locally hosted web application that performs various operations on PDF files. Prior to version 1.1.0, when using the /api/v1/convert/html/pdf endpoint to convert HTML to PDF, the backend calls a third-party tool to process it and includes a sanitizer for security sanitization...
CVE-2025-55151
Stirling-PDF prior to version 1.1.0 is affected by a Server-Side Request Forgery (SSRF) in the /api/v1/convert/file/pdf path, where LibreOffice’s unoconvert tool is used during file-to-PDF conversion. The vulnerability arises in the conversion process and has been patched in version 1.1.0. Affect...
CVE-2025-55151 Stirling-PDF SSRF vulnerability on /api/v1/convert/file/pdf
Stirling-PDF is a locally hosted web application that performs various operations on PDF files. Prior to version 1.1.0, the "convert file to pdf" functionality /api/v1/convert/file/pdf uses LibreOffice's unoconvert tool for conversion, and SSRF vulnerabilities exist during the conversion process...