20 matches found
SUSE CVE-2026-41313
pypdf is a free and open-source pure-python PDF library. An attacker who uses a vulnerability present in versions prior to 6.10.2 can craft a PDF which leads to long runtimes. This requires loading a PDF with a large trailer /Size value in incremental mode. This has been fixed in pypdf 6.10.2. As...
Linux Distros Unpatched Vulnerability : CVE-2026-41314
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pypdf is a free and open-source pure-python PDF library. An attacker who uses a vulnerability present in versions prior to 6.10.2 can craft a PDF which leads to...
CVE-2026-41314
pypdf is a free and open-source pure-python PDF library. An attacker who uses a vulnerability present in versions prior to 6.10.2 can craft a PDF which leads to the RAM being exhausted. This requires accessing an image using /FlateDecode with large size values. This has been fixed in pypdf 6.10.2...
CVE-2026-41313
CVE-2026-41313 affects the open-source Python PDF library pypdf (prior to 6.10.2). An attacker can craft a PDF with a large trailer /Size value loaded in incremental mode, causing long runtimes. The issue is fixed in pypdf 6.10.2; as a workaround, patches can be applied manually. The CVSS-derived...
EUVD-2026-25114
pypdf is a free and open-source pure-python PDF library. An attacker who uses a vulnerability present in versions prior to 6.10.2 can craft a PDF which leads to long runtimes. This requires loading a PDF with a large trailer /Size value in incremental mode. This has been fixed in pypdf 6.10.2. As...
CVE-2026-41313 pypdf: Possible long runtimes for wrong size values in incremental mode
pypdf is a free and open-source pure-python PDF library. An attacker who uses a vulnerability present in versions prior to 6.10.2 can craft a PDF which leads to long runtimes. This requires loading a PDF with a large trailer /Size value in incremental mode. This has been fixed in pypdf 6.10.2. As...
pypdf 安全漏洞
pypdf is an open-source, free, and pure Python PDF library developed by py-pdf. It allows for splitting, merging, cropping, and converting pages of PDF files. Prior to version 6.10.2, pypdf had a security vulnerability. This vulnerability occurred when processing streams that used FlateDecode...
Excessive Iteration
Overview pypdf is an A pure-python PDF library capable of splitting, merging, cropping, and transforming PDF files Affected versions of this package are vulnerable to Excessive Iteration in the incremental mode for PDF processing. An attacker can cause excessive resource consumption and...
GHSA-4PXV-J86V-MHCW pypdf: Possible long runtimes for wrong size values in incremental mode
Impact An attacker who uses this vulnerability can craft a PDF which leads to long runtimes. This requires loading a PDF with a large trailer /Size value in incremental mode. Patches This has been fixed in pypdf==6.10.2. Workarounds If you cannot upgrade yet, consider applying the changes from PR...
PT-2026-34567
Name of the Vulnerable Software and Affected Versions pypdf versions prior to 6.10.2 Description A flaw in the pure-python PDF library allows an attacker to craft a PDF that leads to RAM exhaustion. This occurs when accessing an image using the '/FlateDecode' filter with large size values...
CVE-2025-68271
OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. From 5.0.0 to 6.10.1, OpenC3 COSMOS contains a critical remote code execution vulnerability reachable through the JSON-RPC API. When a JSON-RPC request uses the string form of...
CVE-2025-68271 Unauthenticated Remote Code Execution in openc3-api
OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. From 5.0.0 to 6.10.1, OpenC3 COSMOS contains a critical remote code execution vulnerability reachable through the JSON-RPC API. When a JSON-RPC request uses the string form of...
EUVD-2019-11187
Malware in sbrugna...
CVE-2019-20648
NETGEAR RN42400 devices before 6.10.2 are affected by incorrect configuration of security settings...
WordPress plugin Site Reviews 安全漏洞
WordPress and WordPress plugin are products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A security vulnerability exists in WordPress...
RHSA-2022:0190 Red Hat Security Advisory: Satellite 6.10.2 Async Bug Fix Update
Bulletin has no description...
TIBCO Security Advisory: March 12, 2024 - TIBCO FTL - CVE-2024-1138
TIBCO FTL Privilege Escalation Original release date: March 12, 2024 Last revised: --- Source: TIBCO Software Inc. Products Affected TIBCO FTL - Enterprise Edition versions 6.10.1 and below The following component is affected: FTL Server Description The component listed above contains a...
@agconnect/database (>=1.1.0 <=1.3.2), @ardenthq/sdk-egld (>=1.0.0 <=1.3.1) +124 more potentially affected by CVE-2022-25878 via protobufjs (>=6.10.0 <=6.10.2)
protobufjs NPM version =6.10.0, =1.1.0, =1.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =0.0.0, =0.0.0-beta.20200917165907, =0.0.0-beta.20200724145337, =0.0.0-beta.20200724123546, =0.0.0-beta.20200724123546, =0.0.0-beta.20210111150545 and more Source cves: CVE-2022-25878 Source advisory:...
CVE-2019-20648
NETGEAR RN42400 devices before 6.10.2 are affected by incorrect configuration of security settings...
Design/Logic Flaw
NETGEAR RN42400 devices before 6.10.2 are affected by incorrect configuration of security settings...