SUSE CVE-2013-0897

Off-by-one error in the PDF functionality in Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, allows remote attackers to cause a denial of service via a crafted document...

SUSE CVE-2022-0105

Use after free in PDF Accessibility in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

SUSE CVE-2022-1875

Inappropriate implementation in PDF in Google Chrome prior to 102.0.5005.61 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

SUSE CVE-2022-3197

Use after free in PDF in Google Chrome prior to 105.0.5195.125 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. Chromium security severity: High...

CVE-2022-1875

Inappropriate implementation in PDF in Google Chrome prior to 102.0.5005.61 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

DEBIAN-CVE-2022-0105

Use after free in PDF Accessibility in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

@dfeidao/server (>=5.0.0, <=5.0.1), @mm-works/p000005 (>=1.0.202004231823, <=1.0.202004272011) +6 more potentially affected by CVE-2020-7762 via jsreport-chrome-pdf (>=1.0.0, <=1.9.0)

jsreport-chrome-pdf NPM version =1.0.0, =5.0.0, =1.0.202004231823, =1.0.202003051337, =1.6.2-patch.1, =2.0.0, =0.0.1, =0.0.2 - jsreport-worker 0.3.1 Source cves: CVE-2020-7762 Source advisory: OSV:GHSA-934W-HVJ4-7FR6...

GHSA-934W-HVJ4-7FR6 Path Traversal in jsreport-chrome-pdf

This affects the package jsreport-chrome-pdf before 1.10.0...

Path Traversal in jsreport-chrome-pdf

This affects the package jsreport-chrome-pdf before 1.10.0...

Arbitrary File Read

jsreport-chrome-pdf is vulnerable to arbitrary file read. An attacker can send malicious requests via lib/conversion.js to read arbitrary local files...

CVE-2020-7762

This affects the package jsreport-chrome-pdf before 1.10.0...

CVE-2020-7762

This affects the package jsreport-chrome-pdf before 1.10.0...

Code injection

This affects the package jsreport-chrome-pdf before 1.10.0...

CVE-2020-7762

CVE-2020-7762 affects the package jsreport-chrome-pdf prior to version 1.10.0. The vulnerability enables an arbitrary file read via the vulnerability in the code path tied to lib/conversion.js, as documented by multiple sources (Snyk entry and GitHub advisory). Impact is: attacker can read local ...

CVE-2020-7762 Arbitrary File Read

This affects the package jsreport-chrome-pdf before 1.10.0...

CVE-2020-7762

This affects the package jsreport-chrome-pdf before 1.10.0...

@dfeidao/server (>=5.0.0, <=5.0.1), @mm-works/p000005 (>=1.0.202004231823, <=1.0.202004272011) +6 more potentially affected by CVE-2020-7762 via jsreport-chrome-pdf (>=1.0.0, <=1.9.0)

jsreport-chrome-pdf NPM version =1.0.0, =5.0.0, =1.0.202004231823, =1.0.202003051337, =1.6.2-patch.1, =2.0.0, =0.0.1, =0.0.2 - jsreport-worker 0.3.1 Source cves: CVE-2020-7762 Source advisory: SNYK:JS-JSREPORTCHROMEPDF-1037310...

Arbitrary File Read

Overview jsreport-chrome-pdf is a Affected versions of this package are vulnerable to Arbitrary File Read. An Arbitrary File Read vulnerability exists in lib/conversion.js. PoC document.writewindow.location='../../../../../etc/passwd' Remediation Upgrade jsreport-chrome-pdf to version 1.10.0 or...

The vulnerability of the PDFium web browser’s PDF-content handler allows attackers to compromise data integrity, gain unauthorized access to protected information, and cause service failures.

The vulnerability of the PDFium browser for processing PDF content in Google Chrome relates to the use of memory after deallocation. Exploiting this vulnerability allows an attacker to compromise data integrity, gain unauthorized access to protected information, and cause service failures through...

CVE-2016-5206

The PDF plugin in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android incorrectly followed redirects, which allowed a remote attacker to bypass the Same Origin Policy via a crafted HTML page...