Lucene search
+L

11 matches found

Kitploit
Kitploit
•added 2026/10/04 9:49 a.m.•15 views

EasyOCR

EasyOCR 80以上の対応言語と、ラテン文字、中国語、アラビア文字、デーヴァナーガリー文字、キリル文字など、すべての主要な書記体系をサポートする、すぐに使えるOCRです。 当社ウェブサイトでデモを試す Gradioを使用してHuggingface Spaces 🤗に統合されています。Webデモをお試しください: 新着情報 2024年9月24日 - バージョン1.7.2 いくつかの互換性の問題を修正 すべてのリリースノートを読む 今後の予定 手書き文字のサポート 使用例 インストール pipを使用してインストール 最新の安定版リリースの場合: pip install easyocr...

6.2AI score
SaveExploits0References22
NVD
NVD
•added 2026/06/24 6:17 p.m.•25 views

CVE-2026-44017

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. Prior to 2.91.0, the EasyOCR model download functionality extracted ZIP archives without validating member paths, enabling Zip Slip attacks. If an attacker could compromi...

8.3CVSS0.00706EPSS
SaveExploits0References6
attackerkb
attackerkb
•added 2026/06/24 5:48 p.m.•12 views

CVE-2026-44017

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. Prior to 2.91.0, the EasyOCR model download functionality extracted ZIP archives without validating member paths, enabling Zip Slip attacks. If an attacker could compromi...

7.5CVSS6.7AI score0.00706EPSS
SaveExploits0References3Affected Software1
CVE
CVE
•added 2026/06/24 5:48 p.m.•130 views

CVE-2026-44017

CVE-2026-44017 concerns Docling’s EasyOCR model download: prior to 2.91.0, ZIP archives were extracted without validating member paths, enabling Zip Slip path traversal. An attacker who could supply or intercept the model source could overwrite files anywhere writable by the process, potentially ...

8.3CVSS8.6AI score0.00706EPSS
SaveExploits0References6Affected Software1
Vulnrichment
Vulnrichment
•added 2026/06/24 5:48 p.m.•13 views

CVE-2026-44017 Docling: Unsafe Zip Extraction in EasyOCR Model Download

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. Prior to 2.91.0, the EasyOCR model download functionality extracted ZIP archives without validating member paths, enabling Zip Slip attacks. If an attacker could compromi...

7.5CVSS8.6AI score0.00706EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/06/24 5:48 p.m.•51 views

CVE-2026-44017 Docling: Unsafe Zip Extraction in EasyOCR Model Download

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. Prior to 2.91.0, the EasyOCR model download functionality extracted ZIP archives without validating member paths, enabling Zip Slip attacks. If an attacker could compromi...

7.5CVSS0.00706EPSS
SaveExploits0References2
OSV
OSV
•added 2026/06/24 5:48 p.m.•16 views

CVE-2026-44017 Docling: Unsafe Zip Extraction in EasyOCR Model Download

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. Prior to 2.91.0, the EasyOCR model download functionality extracted ZIP archives without validating member paths, enabling Zip Slip attacks. If an attacker could compromi...

7.5CVSS6.8AI score
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/24 12:00 a.m.•2 views

CVE-2026-44017: Improper Limitation of a Pathname to a Restricted Directory

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. Prior to 2.91.0, the EasyOCR model download functionality extracted ZIP archives without validating member paths, enabling Zip Slip attacks. If an attacker could compromi...

8.3CVSS6.5AI score0.00706EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2026/06/03 8:02 p.m.•30 views

Docling: Unsafe Zip Extraction in EasyOCR Model Download

Impact In versions 2.91.0, The EasyOCR model download functionality extracted ZIP archives without validating member paths, enabling Zip Slip attacks. If an attacker could compromise the model download source via supply chain attack, DNS spoofing, or MITM, they could write arbitrary files to any...

8.3CVSS8.4AI score0.00706EPSS
SaveExploits0References9Affected Software1
Positive Technologies
Positive Technologies
•added 2026/06/03 12:00 a.m.•27 views

PT-2026-46094

Impact In versions 2.91.0, The EasyOCR model download functionality extracted ZIP archives without validating member paths, enabling Zip Slip attacks. If an attacker could compromise the model download source via supply chain attack, DNS spoofing, or MITM, they could write arbitrary files to any...

7.5CVSS6.3AI score
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/06/03 12:00 a.m.•37 views

PT-2026-46119

Name of the Vulnerable Software and Affected Versions EasyOCR versions prior to 2.91.0 Description The model download functionality extracts ZIP archives without validating member paths, which allows for Zip Slip attacks. Zip Slip is a form of path traversal that occurs when an application extrac...

7.5CVSS6.6AI score0.00706EPSS
SaveExploits0References10
Rows per page
Query Builder