33 matches found
UBUNTU-CVE-2022-2400
External Control of File Name or Path in GitHub repository dompdf/dompdf prior to 2.0.0...
PT-2022-16401
Name of the Vulnerable Software and Affected Versions dompdf versions prior to 2.0.0 Description The issue concerns a chroot check bypass that could lead to the disclosure of png and jpeg files. It allows for external control of file name or path in the GitHub repository dompdf/dompdf...
DRUPAL-CONTRIB-2022-048
This module enables you to generate print versions of content. Some installations of the module make use of the dompdf/dompdf third-party dependency. Security vulnerabilities exist for versions of dompdf/dompdf Note on 3rd party vulnerabilities This security advisory corresponds to a 3rd party...
The vulnerability of the PHP library for generating PDF documents from HTML markup and CSS styles, Dompdf, allows a hacker to execute arbitrary code.
The vulnerability of the PHP library for generating PDF documents from HTML markup and CSS styles, Dompdf, is related to the lack of protective measures for the structure of web pages. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
CVE-2014-5011
DOMPDF before 0.6.2 allows Information Disclosure...
DEBIAN-CVE-2014-5012
DOMPDF before 0.6.2 allows denial of service...
CVE-2014-5013
DOMPDF before 0.6.2 allows remote code execution, a related issue to CVE-2014-2383...
DEBIAN-CVE-2014-5013
DOMPDF before 0.6.2 allows remote code execution, a related issue to CVE-2014-2383...
Denial of service
DOMPDF before 0.6.2 allows denial of service...
Remote code execution
DOMPDF before 0.6.2 allows remote code execution, a related issue to CVE-2014-2383...
UBUNTU-CVE-2014-5012
DOMPDF before 0.6.2 allows denial of service...
PT-2020-7696 · Dompdf +2 · Dompdf +2
Name of the Vulnerable Software and Affected Versions: DOMPDF versions prior to 0.6.2 Description: The issue allows for a denial of service. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited...
