libvips 安全漏洞

libvips is a fast image processing library with low memory requirements from the libvips open source. A security vulnerability exists in libvips version 8.17.1 and earlier, which stems from a buffer read overflow when parsing specially crafted PDF file headers...

Arbitrary File Upload

xml2rfc is vulnerable to Arbitrary File Upload. The vulnerability is due to improper input sanitization because an attacker can inject a malicious element into the XML used to generate the PDF, causing the generator to read and include arbitrary filesystem files...

Vulnerability of software for modeling, designing, and drawing in AutoCAD, related to data writing beyond the buffer memory of the system, allowing a hacker to cause a service failure

The vulnerability of software for modeling, designing, and drawing in AutoCAD is related to the writing of data beyond the buffer memory. Exploiting this vulnerability can allow a hacker to cause a service failure using a specially created malicious PDF file...

CVE-2025-8894

A maliciously crafted PDF file, when parsed through certain Autodesk products, can force a Heap-Based Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...

CVE-2025-8893

A maliciously crafted PDF file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process...

CVE-2025-8894

CVE-2025-8894 describes a heap-based overflow when parsing specially crafted PDF files in Autodesk products. The vulnerability affects Autodesk software that handles PDF parsing (e.g., Autodesk Revit and related components) and can lead to a crash, disclosure of sensitive data, or execution of ar...

Autodesk Revit 安全漏洞

Autodesk Revit is a suite of building information modeling software from the American company Autodesk. A security vulnerability exists in Autodesk Revit that originates from a heap buffer overflow when parsing specially crafted PDF files, which could lead to a crash, read sensitive data, or...

Autodesk Revit 安全漏洞

Autodesk Revit is a suite of building information modeling software from the American company Autodesk. A security vulnerability exists in Autodesk Revit that originates from an out-of-bounds write when parsing a specially crafted PDF file, which could result in a crash, data corruption, or the...

The vulnerabilities of PDF viewing and editing programs such as Acrobat DC, Acrobat Reader DC, Acrobat 2024, Acrobat 2020, and Acrobat Reader 2020 are related to violations of secure design principles. These vulnerabilities allow attackers to circumvent existing security restrictions.

The vulnerabilities of PDF viewing and editing programs such as Acrobat DC, Acrobat Reader DC, Acrobat 2024, Acrobat 2020, and Acrobat Reader 2020 are related to violations of secure design principles. Exploiting these vulnerabilities can allow attackers to circumvent existing security restrictio...

xml2rfc is vulnerable to arbitrary file reads through prepped files

Impact When generating PDF files, this vulnerability allows an attacker to read arbitrary files from the filesystem by injecting malicious link element into the prepped RFCXML. Workarounds Test untrusted input with link elements with rel="attachment" before processing. References This is related ...

ROS-20250910-04

AV3DVirtAnnot vulnerability in Adobe Acrobat Document Cloud PDF viewers and editors. Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2020, Adobe Acrobat 2024, Adobe Acrobat Reader 2020 is related to the ability to use memory after it has been freed. Exploitation of the vulnerability cou...

Linux Distros Unpatched Vulnerability : CVE-2024-39126

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Roundup before 2.4.0 allows XSS via JavaScript in PDF, XML, and SVG documents. CVE-2024-39126 Note that Nessus relies on the presence of the package as reported...

The vulnerability of the PHP library TCPDF, related to improper handling of input data during web page generation, allows attackers to execute arbitrary code.

The vulnerability of the PHP library TCPDF is related to insufficient cleaning of data provided by the user when displaying error messages. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

PT-2025-35753

Name of the Vulnerable Software and Affected Versions: PDF for WPForms versions through 6.2.1 Description: The software contains a cross-site scripting XSS vulnerability due to improper neutralization of input during web page generation. This allows for stored XSS attacks. Recommendations: Update...

The vulnerability of the pdfseparate library, which is used to display PDF files in Poppler, allows a hacker to cause a service failure.

The vulnerability of the pdfseparate library used by Poppler for displaying PDF files is related to unmanaged recursion. Exploiting this vulnerability could allow an attacker to cause a service failure by sending a specially crafted PDF file...

Linux Distros Unpatched Vulnerability : CVE-2022-43071

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A stack overflow in the Catalog::readPageLabelTree2Object function of XPDF v4.04 allows attackers to cause a Denial of Service DoS via a crafted PDF file...

Linux Distros Unpatched Vulnerability : CVE-2022-24107

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Xpdf prior to 4.04 lacked an integer overflow check in JPXStream.cc. CVE-2022-24107 Note that Nessus relies on the presence of the package as reported by the...

Linux Distros Unpatched Vulnerability : CVE-2022-38237

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - XPDF commit ffaf11c was discovered to contain a heap-buffer overflow via DCTStream::readScan at /xpdf/Stream.cc. CVE-2022-38237 Note that Nessus relies on the...

Linux Distros Unpatched Vulnerability : CVE-2021-27807

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A carefully crafted PDF file can trigger an infinite loop while loading the file. This issue affects Apache PDFBox version 2.0.22 and prior 2.0.x versions...

Badaso CMS file upload vulnerability

An arbitrary code execution vulnerability in Badaso CMS 2.9.11. The Media Manager allows authenticated users to upload files containing embedded PHP code via the file-upload endpoint, bypassing content-type validation. When such a file is accessed via its URL, the server executes the PHP payload,...