Lucene search
K

20 matches found

SUSE CVE
SUSE CVE
added 2026/04/24 1:28 a.m.2 views

SUSE CVE-2026-41313

pypdf is a free and open-source pure-python PDF library. An attacker who uses a vulnerability present in versions prior to 6.10.2 can craft a PDF which leads to long runtimes. This requires loading a PDF with a large trailer /Size value in incremental mode. This has been fixed in pypdf 6.10.2. As...

4.8CVSS5.6AI score0.00214EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2026/04/23 12:0 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2026-41314

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pypdf is a free and open-source pure-python PDF library. An attacker who uses a vulnerability present in versions prior to 6.10.2 can craft a PDF which leads to...

6.5CVSS5.7AI score0.00226EPSS
Exploits0References3
NVD
NVD
added 2026/04/22 10:16 p.m.2 views

CVE-2026-41314

pypdf is a free and open-source pure-python PDF library. An attacker who uses a vulnerability present in versions prior to 6.10.2 can craft a PDF which leads to the RAM being exhausted. This requires accessing an image using /FlateDecode with large size values. This has been fixed in pypdf 6.10.2...

6.5CVSS0.00226EPSS
Exploits0References4
CVE
CVE
added 2026/04/22 9:4 p.m.19 views

CVE-2026-41313

CVE-2026-41313 affects the open-source Python PDF library pypdf (prior to 6.10.2). An attacker can craft a PDF with a large trailer /Size value loaded in incremental mode, causing long runtimes. The issue is fixed in pypdf 6.10.2; as a workaround, patches can be applied manually. The CVSS-derived...

6.5CVSS5.6AI score0.00214EPSS
Exploits0References4Affected Software1
EUVD
EUVD
added 2026/04/22 9:4 p.m.3 views

EUVD-2026-25114

pypdf is a free and open-source pure-python PDF library. An attacker who uses a vulnerability present in versions prior to 6.10.2 can craft a PDF which leads to long runtimes. This requires loading a PDF with a large trailer /Size value in incremental mode. This has been fixed in pypdf 6.10.2. As...

4.8CVSS5.6AI score0.00214EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2026/04/22 9:4 p.m.2 views

CVE-2026-41313 pypdf: Possible long runtimes for wrong size values in incremental mode

pypdf is a free and open-source pure-python PDF library. An attacker who uses a vulnerability present in versions prior to 6.10.2 can craft a PDF which leads to long runtimes. This requires loading a PDF with a large trailer /Size value in incremental mode. This has been fixed in pypdf 6.10.2. As...

4.8CVSS5.6AI score0.00214EPSS
Exploits0References4
CNNVD
CNNVD
added 2026/04/22 12:0 a.m.6 views

pypdf 安全漏洞

pypdf is an open-source, free, and pure Python PDF library developed by py-pdf. It allows for splitting, merging, cropping, and converting pages of PDF files. Prior to version 6.10.2, pypdf had a security vulnerability. This vulnerability occurred when processing streams that used FlateDecode...

6.5CVSS5.8AI score0.00226EPSS
Exploits0References1
Snyk
Snyk
added 2026/04/16 9:30 p.m.1 views

Excessive Iteration

Overview pypdf is an A pure-python PDF library capable of splitting, merging, cropping, and transforming PDF files Affected versions of this package are vulnerable to Excessive Iteration in the incremental mode for PDF processing. An attacker can cause excessive resource consumption and...

6.5CVSS5.7AI score0.00214EPSS
Exploits0References2
OSV
OSV
added 2026/04/16 9:30 p.m.1 views

GHSA-4PXV-J86V-MHCW pypdf: Possible long runtimes for wrong size values in incremental mode

Impact An attacker who uses this vulnerability can craft a PDF which leads to long runtimes. This requires loading a PDF with a large trailer /Size value in incremental mode. Patches This has been fixed in pypdf==6.10.2. Workarounds If you cannot upgrade yet, consider applying the changes from PR...

6.8CVSS5.7AI score0.00214EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2026/04/16 12:0 a.m.2 views

PT-2026-34567

Name of the Vulnerable Software and Affected Versions pypdf versions prior to 6.10.2 Description A flaw in the pure-python PDF library allows an attacker to craft a PDF that leads to RAM exhaustion. This occurs when accessing an image using the '/FlateDecode' filter with large size values...

6.5CVSS5.2AI score0.00226EPSS
Exploits0References14
RedhatCVE
RedhatCVE
added 2026/01/14 7:25 p.m.8 views

CVE-2025-68271

OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. From 5.0.0 to 6.10.1, OpenC3 COSMOS contains a critical remote code execution vulnerability reachable through the JSON-RPC API. When a JSON-RPC request uses the string form of...

10CVSS8.5AI score0.00536EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/01/13 6:32 p.m.2 views

CVE-2025-68271 Unauthenticated Remote Code Execution in openc3-api

OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. From 5.0.0 to 6.10.1, OpenC3 COSMOS contains a critical remote code execution vulnerability reachable through the JSON-RPC API. When a JSON-RPC request uses the string form of...

10CVSS8.1AI score0.00536EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2019-11187

Malware in sbrugna...

4.6CVSS4.8AI score0.00359EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/05/22 4:57 a.m.4 views

CVE-2019-20648

NETGEAR RN42400 devices before 6.10.2 are affected by incorrect configuration of security settings...

4.6CVSS7.1AI score0.00359EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/12/09 12:0 a.m.1 views

WordPress plugin Site Reviews 安全漏洞

WordPress and WordPress plugin are products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A security vulnerability exists in WordPress...

5.3CVSS6.5AI score0.00476EPSS
Exploits0References1
OSV
OSV
added 2024/09/13 10:47 p.m.24 views

RHSA-2022:0190 Red Hat Security Advisory: Satellite 6.10.2 Async Bug Fix Update

Bulletin has no description...

6.2CVSS7AI score0.01777EPSS
Exploits1References14
Tibco
Tibco
added 2024/03/12 4:45 p.m.27 views

TIBCO Security Advisory: March 12, 2024 - TIBCO FTL - CVE-2024-1138

TIBCO FTL Privilege Escalation Original release date: March 12, 2024 Last revised: --- Source: TIBCO Software Inc. Products Affected TIBCO FTL - Enterprise Edition versions 6.10.1 and below The following component is affected: FTL Server Description The component listed above contains a...

8.8CVSS8.8AI score0.00459EPSS
Exploits0Affected Software1
vulnersOsv
vulnersOsv
added 2022/05/28 12:0 a.m.1 views

@agconnect/database (>=1.1.0 <=1.3.2), @ardenthq/sdk-egld (>=1.0.0 <=1.3.1) +124 more potentially affected by CVE-2022-25878 via protobufjs (>=6.10.0 <=6.10.2)

protobufjs NPM version =6.10.0, =1.1.0, =1.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =0.0.0, =0.0.0-beta.20200917165907, =0.0.0-beta.20200724145337, =0.0.0-beta.20200724123546, =0.0.0-beta.20200724123546, =0.0.0-beta.20210111150545 and more Source cves: CVE-2022-25878 Source advisory:...

8.2CVSS7.1AI score0.02071EPSS
Exploits1
NVD
NVD
added 2020/04/15 6:15 p.m.11 views

CVE-2019-20648

NETGEAR RN42400 devices before 6.10.2 are affected by incorrect configuration of security settings...

4.6CVSS4.3AI score0.00359EPSS
Exploits0References1
Prion
Prion
added 2020/04/15 6:15 p.m.12 views

Design/Logic Flaw

NETGEAR RN42400 devices before 6.10.2 are affected by incorrect configuration of security settings...

2.7CVSS4.3AI score0.00359EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder