471 matches found
UBUNTU-CVE-2014-5011
DOMPDF before 0.6.2 allows Information Disclosure...
CVE-2014-5011
DOMPDF before 0.6.2 allows Information Disclosure...
CVE-2014-5011
CVE-2014-5011 affects Dompdf prior to 0.6.2. The vulnerability arises from improper handling/validation of untrusted input when processing HTML content, enabling information disclosure. Impact is limited to affected Dompdf versions; remediation is upgrading to Dompdf 0.6.2 or later as indicated b...
CVE-2014-5011
DOMPDF before 0.6.2 allows Information Disclosure...
CVE-2014-5012
DOMPDF before 0.6.2 allows denial of service...
CVE-2014-5012
CVE-2014-5012 affects Dompdf up to version 0.6.2; faulty input handling allows denial of service during HTML-to-PDF processing. The provided documents confirm the vulnerability and a fix in v0.6.2 (GitHub release tag). No exploitation context or in-the-wild details are provided in the connected d...
CVE-2014-5012
DOMPDF before 0.6.2 allows denial of service...
CVE-2014-5013
CVE-2014-5013 affects Dompdf prior to 0.6.2 and allows remote code execution; the issue is linked to CVE-2014-2383. The related advisories indicate a security-focused 0.6.2 release that addresses multiple vulnerabilities in dompdf (including RCE and information-disclosure issues) and recommends u...
CVE-2014-5013
DOMPDF before 0.6.2 allows remote code execution, a related issue to CVE-2014-2383...
CVE-2014-5013
DOMPDF before 0.6.2 allows remote code execution, a related issue to CVE-2014-2383...
PT-2020-7697 · Dompdf +2 · Dompdf +2
Name of the Vulnerable Software and Affected Versions: DOMPDF versions prior to 0.6.2 Description: The issue allows remote code execution. It is related to a previously identified problem. Recommendations: For versions prior to 0.6.2, update to version 0.6.2 or later to resolve the issue...
CVE-2014-5012: Undefined Security Weakness
DOMPDF before 0.6.2 allows denial of service...
CVE-2014-5011: Exposure of Sensitive Information to an Unauthorized Actor
DOMPDF before 0.6.2 allows Information Disclosure...
DOMPDF Remote Code Execution Vulnerability
DOMPDF is a converter to convert HTML to PDF. A remote code execution vulnerability exists in DOMPDF versions prior to 0.6.2. No details of the vulnerability are provided at this time...
DOMPDF Information Disclosure Vulnerability
DOMPDF is a converter to convert HTML to PDF. An information disclosure vulnerability exists in versions of DOMPDF prior to 0.6.2. The vulnerability stems from a configuration or other error in the operation of a networked system or product. An unauthorized attacker could exploit the vulnerabilit...
CVE-2014-5013: Undefined Security Weakness
DOMPDF before 0.6.2 allows remote code execution, a related issue to CVE-2014-2383...
PT-2020-7695 · Dompdf +2 · Dompdf +2
Name of the Vulnerable Software and Affected Versions: DOMPDF versions prior to 0.6.2 Description: The issue allows information disclosure. Recommendations: For versions prior to 0.6.2, update to version 0.6.2 or later to resolve the issue...
PT-2020-7696 · Dompdf +2 · Dompdf +2
Name of the Vulnerable Software and Affected Versions: DOMPDF versions prior to 0.6.2 Description: The issue allows for a denial of service. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited...
Cross-site Scripting (XSS)
dompdf is vulnerable to cross-site scripting XSS attacks. The library does not filter user-supplied strings through uploaded pdf files, allowing a malicious user to inject and execute arbitrary web script...