EUVD-2010-4001

Malware in sbrugna...

EUVD-2016-8120

Malware in sbrugna...

USN-7803-1 poppler vulnerability

It was discovered that poppler incorrectly handled certain PDF files. If a user or automated system were tricked into opening a specially crafted document, a remote attacker could use this issue to cause poppler to crash, leading to a denial of service...

EUVD-2021-29578

Malicious code in bioql PyPI...

EUVD-2021-29577

Malicious code in bioql PyPI...

EUVD-2021-32564

Malicious code in bioql PyPI...

EUVD-2025-25292

Malicious code in bioql PyPI...

EUVD-2021-32114

Malicious code in bioql PyPI...

EUVD-2023-45074

Malicious code in bioql PyPI...

EUVD-2022-5522

Malicious code in bioql PyPI...

EUVD-2025-29614

Malicious code in bioql PyPI...

EUVD-2021-29576

Malicious code in bioql PyPI...

CVE-2025-46205

A heap-use-after free in the PdfTokenizer::ReadDictionary function of podofo v0.10.0 to v0.10.5 allows attackers to cause a Denial of Service DoS by supplying a crafted PDF file. NOTE: this is disputed by the Supplier because there is no available file to reproduce the issue...

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the Publisher portal. An attacker can execute arbitrary JavaScript in the context of another user's browser by uploading a crafted API document containing malicious scripts. This can lead to unauthorized UI...

CVE-2025-8893

A maliciously crafted PDF file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process...

Linux Distros Unpatched Vulnerability : CVE-2018-1000840

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Processing Foundation Processing version 3.4 and earlier contains a XML External Entity XXE vulnerability in loadXML function that can result in An attacker can...

Linux Distros Unpatched Vulnerability : CVE-2011-1204

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Google Chrome before 10.0.648.127 does not properly handle attributes, which allows remote attackers to cause a denial of service DOM tree corruption or possibl...

CVE-2025-51966

CVE-2025-51966 describes an XSS in uTools up to version 7.1.1, specifically in the PDF preview feature. The vulnerability arises when previews of specially crafted PDF files cause embedded JavaScript to execute within the application's privileged context, potentially enabling data theft or unauth...

Linux Distros Unpatched Vulnerability : CVE-2020-24999

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - There is an invalid memory access in the function fprintf located in Error.cc in Xpdf 4.0.2. It can be triggered by sending a crafted PDF file to the pdftohtml...

Linux Distros Unpatched Vulnerability : CVE-2019-19450

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - paraparser in ReportLab before 3.5.31 allows remote code execution because startunichar in paraparser.py evaluates untrusted user input in a unichar element in ...