Lucene search
+L

225 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/06/12 12:00 a.m.•6 views

CVE-2021-31811: Memory Allocation with Excessive Size Value

In Apache PDFBox, a carefully crafted PDF file can trigger an OutOfMemory-Exception while loading the file. This issue affects Apache PDFBox version 2.0.23 and prior 2.0.x versions...

5.5CVSS5.8AI score0.03572EPSS
SaveExploits0References3
OpenVAS
OpenVAS
•added 2021/06/09 12:00 a.m.•22 views

SUSE: Security Advisory (SUSE-SU-2018:3755-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS6.7AI score0.03505EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2021/06/09 12:00 a.m.•26 views

SUSE: Security Advisory (SUSE-SU-2018:2630-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS8.1AI score0.04812EPSS
SaveExploits1References2
Github Security Blog
Github Security Blog
•added 2021/05/13 10:30 p.m.•88 views

Uncontrolled Memory Allocation in Apache PDFBox

A carefully crafted PDF file can trigger an OutOfMemory-Exception while loading the file. This issue affects Apache PDFBox version 2.0.22 and prior 2.0.x versions...

5.5CVSS4.1AI score0.03337EPSS
SaveExploits0References26Affected Software1
BDU FSTEC
BDU FSTEC
•added 2021/05/12 12:00 a.m.•15 views

The vulnerability of the XML syntax analyzer in the Apache PDFBox Java library allows attackers to perform XXE attacks.

The vulnerability of the XML syntax analyzer in the Apache PDFBox Java library is related to incorrect restrictions on XML links to external objects. Exploiting this vulnerability allows a malicious actor to perform XXE attacks using a specially created XFDF file...

10CVSS7AI score0.09451EPSS
SaveExploits0References11Affected Software4
IBM Security Bulletins
IBM Security Bulletins
•added 2021/04/28 6:35 p.m.•46 views

Security Bulletin: Security vulnerabilities affect multiple IBM Rational products based on IBM Jazz technology

Summary Multiple security vulnerabilities affect components used by the following products that may affect those products: Collaborative Lifecycle Management CLM, Rational DOORS Next Generation RDNG, Rational Engineering Lifecycle Manager RELM, Rational Team Concert RTC, Rational Quality Manager...

9.8CVSS6.4AI score0.1876EPSS
SaveExploits1Affected Software8
IBM Security Bulletins
IBM Security Bulletins
•added 2021/04/19 6:00 a.m.•36 views

Security Bulletin: Vulnerability in Apache PDFBox affect Apache Solr shipped with IBM Operations Analytics - Log Analysis (CVE-2019-0228)

Summary Apache Solr susceptible to XXE vulnerability in Apache PDFBox. This has been fixed. Vulnerability Details CVEID: CVE-2019-0228 DESCRIPTION: Apache PDFBox could allow a remote attacker to obtain sensitive information, caused by improper handling of XML External Entity XXE by the XML parser...

9.8CVSS0.9AI score0.09451EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2021/04/15 1:18 p.m.•41 views

Security Bulletin: Vulnerability in Apache PDFBox affect Apache Solr shipped IBM Operations Analytics - Log Analysis Analysis (CVE-2018-11797)

Summary There is a potential Input Validation vulnerability in Apache PDFBox that affects Apache Solr. Vulnerability Details CVEID: CVE-2018-11797 DESCRIPTION: Apache PDFBox is vulnerable to a denial of service, caused by a flaw when parsing the page tree. By persuading a victim to open a...

5.5CVSS1.3AI score0.03505EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2021/04/15 11:00 a.m.•32 views

Security Bulletin: Vulnerability in Apache PDFBox affects Apache Solr shipped with IBM Operations Analytics - Log Analysis (CVE-2018-8036)

Summary There is a potential Resource Exhaustion vulnerability in Apache PDFBox that affects Apache Solr. Vulnerability Details CVEID: CVE-2018-8036 DESCRIPTION: Apache PDFBox is vulnerable to a denial of service, caused by an out of memory exception in AFMParser. By persuading a victim to open a...

6.5CVSS0.5AI score0.04812EPSS
SaveExploits1Affected Software1
Mageia
Mageia
•added 2021/04/12 7:59 p.m.•71 views

Updated pdfbox packages fix security vulnerabilities

A carefully crafted PDF file can trigger an infinite loop while loading the file. This issue affects Apache PDFBox Apache PDFBox version 2.0.22 and prior 2.0.x versions CVE-2021-27807. A carefully crafted PDF file can trigger an OutOfMemory-Exception while loading the file. This issue affects...

5.5CVSS3.8AI score0.03337EPSS
SaveExploits0References3
Fedora
Fedora
•added 2021/03/30 2:31 p.m.•61 views

[SECURITY] Fedora 33 Update: pdfbox-2.0.23-1.fc33

Apache PDFBox is an open source Java PDF library for working with PDF documents. This project allows creation of new PDF documents, manipulation of existing documents and the ability to extract content from documents. Apache PDFBox also includes several command line utilities. Apache PDFBox is...

5.5CVSS2.4AI score0.03337EPSS
SaveExploits0
Fedora
Fedora
•added 2021/03/30 2:30 p.m.•60 views

[SECURITY] Fedora 32 Update: pdfbox-2.0.23-1.fc32

Apache PDFBox is an open source Java PDF library for working with PDF documents. This project allows creation of new PDF documents, manipulation of existing documents and the ability to extract content from documents. Apache PDFBox also includes several command line utilities. Apache PDFBox is...

5.5CVSS2.4AI score0.03337EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2021/03/30 12:00 a.m.•43 views

Fedora 33 : pdfbox (2021-8b17a2725e)

The remote Fedora 33 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-8b17a2725e advisory. - A carefully crafted PDF file can trigger an infinite loop while loading the file. This issue affects Apache PDFBox version 2.0.22 and prior 2.0.x...

5.5CVSS6.9AI score0.03337EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2021/03/30 12:00 a.m.•43 views

Fedora 32 : pdfbox (2021-dc83ae690a)

The remote Fedora 32 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-dc83ae690a advisory. - A carefully crafted PDF file can trigger an infinite loop while loading the file. This issue affects Apache PDFBox version 2.0.22 and prior 2.0.x...

5.5CVSS6.9AI score0.03337EPSS
SaveExploits0References3
Fedora
Fedora
•added 2021/03/26 12:18 a.m.•58 views

[SECURITY] Fedora 34 Update: pdfbox-2.0.23-1.fc34

Apache PDFBox is an open source Java PDF library for working with PDF documents. This project allows creation of new PDF documents, manipulation of existing documents and the ability to extract content from documents. Apache PDFBox also includes several command line utilities. Apache PDFBox is...

5.5CVSS2.4AI score0.03337EPSS
SaveExploits0
CNVD
CNVD
•added 2021/03/25 12:00 a.m.•21 views

Unspecified Vulnerability in Apache PDFBox

Apache PDFBox is the United States Apache Apache Foundation of a Java-based open source language tool library . The product provides PDF document creation and editing and other functions. Apache PDFBox has a security vulnerability that stems from the fact that a well-crafted PDF file can trigger ...

5.5CVSS6.6AI score0.02993EPSS
SaveExploits0References1
Veracode
Veracode
•added 2021/03/24 8:27 a.m.•37 views

Denial Of Service (DoS)

Apache PDFBox is vulnerable to denial of service. An attacker can cause the application to go into an infinite loop by submitting a malicious PDF file...

5.5CVSS3AI score0.03337EPSS
SaveExploits0References39Affected Software2
Veracode
Veracode
•added 2021/03/22 1:39 a.m.•38 views

Denial Of Service (DoS)

Apache PDFBox is vulnerable to denial of service. An attacker can cause the application to go into an infinite loop by submitting a malicious PDF file...

5.5CVSS3AI score0.02993EPSS
SaveExploits0References38Affected Software2
CNVD
CNVD
•added 2021/03/22 12:00 a.m.•19 views

Apache PDFBox Memory Overflow Vulnerability

Apache PDFBox is the United States Apache Apache Foundation of a Java-based open source language tool library . The product provides PDF document creation and editing and other functions. Apache PDFBox has a security vulnerability that stems from the fact that a carefully crafted PDF file can...

5.5CVSS6.6AI score0.03337EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2021/03/19 9:49 p.m.•36 views

CVE-2021-27807

A carefully crafted PDF file can trigger an infinite loop while loading the file. This issue affects Apache PDFBox version 2.0.22 and prior 2.0.x versions...

5.5CVSS3.7AI score0.02993EPSS
SaveExploits0References3
Rows per page
Query Builder