Lucene search
+L

3168 matches found

Prion
Prion
added 2021/04/26 5:15 p.m.26 views

Design/Logic Flaw

Uninitialized data in PDFium in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted PDF file...

4.3CVSS5.8AI score0.01336EPSS
SaveExploits0References7Affected Software3
Debian CVE
Debian CVE
added 2021/04/26 4:26 p.m.32 views

CVE-2021-21219

Uninitialized data in PDFium in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted PDF file...

5.5CVSS6.6AI score0.01208EPSS
SaveExploits0
Cvelist
Cvelist
added 2021/04/26 4:26 p.m.36 views

CVE-2021-21219

Uninitialized data in PDFium in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted PDF file...

6.3AI score0.01208EPSS
SaveExploits0References7
AlpineLinux
AlpineLinux
added 2021/04/26 4:26 p.m.79 views

CVE-2021-21219

Uninitialized data in PDFium in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted PDF file...

5.5CVSS6.2AI score0.01208EPSS
SaveExploits0
Cvelist
Cvelist
added 2021/04/26 4:26 p.m.29 views

CVE-2021-21217

Uninitialized data in PDFium in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted PDF file...

6.3AI score0.01637EPSS
SaveExploits0References7
Debian CVE
Debian CVE
added 2021/04/26 4:26 p.m.48 views

CVE-2021-21217

Uninitialized data in PDFium in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted PDF file...

5.5CVSS6.6AI score0.01637EPSS
SaveExploits0
AlpineLinux
AlpineLinux
added 2021/04/26 4:26 p.m.69 views

CVE-2021-21217

Uninitialized data in PDFium in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted PDF file...

5.5CVSS6.2AI score0.01637EPSS
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2021/04/08 12:08 p.m.7 views

CVE-2021-1404

A vulnerability in the PDF parsing module in Clam AntiVirus ClamAV Software versions 0.103.0 and 0.103.1 could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to improper buffer size tracking that may result in a hea...

7.5CVSS7.6AI score0.02132EPSS
SaveExploits0References2Affected Software1
UbuntuCve
UbuntuCve
added 2021/04/08 5:15 a.m.31 views

CVE-2021-1404

A vulnerability in the PDF parsing module in Clam AntiVirus ClamAV Software versions 0.103.0 and 0.103.1 could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to improper buffer size tracking that may result in a hea...

7.5CVSS7.2AI score0.02132EPSS
SaveExploits0References5
OSV
OSV
added 2021/04/08 5:15 a.m.10 views

UBUNTU-CVE-2021-1404

A vulnerability in the PDF parsing module in Clam AntiVirus ClamAV Software versions 0.103.0 and 0.103.1 could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to improper buffer size tracking that may result in a hea...

7.5CVSS7.3AI score0.02132EPSS
SaveExploits0References6
Debian CVE
Debian CVE
added 2021/04/08 4:30 a.m.40 views

CVE-2021-1404

A vulnerability in the PDF parsing module in Clam AntiVirus ClamAV Software versions 0.103.0 and 0.103.1 could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to improper buffer size tracking that may result in a hea...

7.5CVSS7.6AI score0.02132EPSS
SaveExploits0
AlpineLinux
AlpineLinux
added 2021/04/08 4:30 a.m.128 views

CVE-2021-1404

A vulnerability in the PDF parsing module in Clam AntiVirus ClamAV Software versions 0.103.0 and 0.103.1 could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to improper buffer size tracking that may result in a hea...

7.5CVSS7.6AI score0.02132EPSS
SaveExploits0
Github Security Blog
Github Security Blog
added 2021/03/29 4:35 p.m.57 views

Regular Expression Denial of Service (ReDoS) in Pillow

An issue was discovered in Pillow before 8.1.1. The PDF parser allows a regular expression DoS ReDoS attack via a crafted PDF file because of a catastrophic backtracking regex...

6.5CVSS5.2AI score0.01635EPSS
SaveExploits0References8Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/03/25 12:00 a.m.11 views

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to the issue of executing code outside of the buffer memory. This allows attackers to execute arbitrary code.

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to the issue of code execution outside the buffer. Exploiting these vulnerabilities can allow a malicious actor to...

9.3CVSS8.2AI score0.02617EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2021/03/25 12:00 a.m.11 views

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to memory usage after it is freed. This allows attackers to execute arbitrary code.

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat and Document Cloud, are related to the use of memory after it is freed. Arbitrary code can be executed in the context of the current user using a specially crafte...

8.8CVSS7.4AI score0.03977EPSS
SaveExploits0References3
CNVD
CNVD
added 2021/03/22 12:00 a.m.12 views

Apache PDFBox Memory Overflow Vulnerability

Apache PDFBox is the United States Apache Apache Foundation of a Java-based open source language tool library . The product provides PDF document creation and editing and other functions. Apache PDFBox has a security vulnerability that stems from the fact that a carefully crafted PDF file can...

5.5CVSS6.6AI score0.03337EPSS
SaveExploits0References1
OSV
OSV
added 2021/03/19 4:15 p.m.18 views

CVE-2021-27807

A carefully crafted PDF file can trigger an infinite loop while loading the file. This issue affects Apache PDFBox version 2.0.22 and prior 2.0.x versions...

5.5CVSS5.3AI score
SaveExploits0References21
OSV
OSV
added 2021/03/19 4:15 p.m.8 views

UBUNTU-CVE-2021-27807

A carefully crafted PDF file can trigger an infinite loop while loading the file. This issue affects Apache PDFBox version 2.0.22 and prior 2.0.x versions...

5.5CVSS5.8AI score0.02979EPSS
SaveExploits0References4
OSV
OSV
added 2021/03/19 4:15 p.m.7 views

UBUNTU-CVE-2021-27906

A carefully crafted PDF file can trigger an OutOfMemory-Exception while loading the file. This issue affects Apache PDFBox version 2.0.22 and prior 2.0.x versions...

5.5CVSS7.2AI score0.03337EPSS
SaveExploits0References4
OSV
OSV
added 2021/03/19 4:15 a.m.1 views

DEBIAN-CVE-2021-25292

An issue was discovered in Pillow before 8.1.1. The PDF parser allows a regular expression DoS ReDoS attack via a crafted PDF file because of a catastrophic backtracking regex...

6.5CVSS6.9AI score0.01635EPSS
SaveExploits0References1
Rows per page
Query Builder