Lucene search
K

1139 matches found

Positive Technologies
Positive Technologies
added 2024/05/06 12:0 a.m.2 views

PT-2024-31726

Name of the Vulnerable Software and Affected Versions: Xpdf versions 4.05 and earlier Description: A PDF object loop in the PDF resources leads to infinite recursion and a stack overflow. Recommendations: For Xpdf versions 4.05 and earlier, as a temporary workaround, consider disabling the...

8.2CVSS6.3AI score0.0024EPSS
Exploits2References26
Veracode
Veracode
added 2024/04/10 10:5 p.m.13 views

Stack Overflow

Xpdf is vulnerable to a stack overflow. The vulnerability is due to a PDF object loop in the page label tree, leading to infinite recursion...

5.5CVSS6.5AI score0.0005EPSS
Exploits1References3Affected Software1
OSV
OSV
added 2024/04/07 11:49 a.m.2 views

CLSA-2024-1712490592 squid: Fix of CVE-2024-25111

CVE-2024-25111: Fix infinite recursion when parsing HTTP chunks...

8.6CVSS7.3AI score0.03051EPSS
Exploits0References1
OSV
OSV
added 2024/04/07 11:35 a.m.3 views

CLSA-2024-1712261257 squid: Fix of CVE-2024-25111

CVE-2024-25111: Fix infinite recursion when parsing HTTP chunks...

8.6CVSS7.3AI score0.03051EPSS
Exploits0References1
OSV
OSV
added 2024/04/02 11:15 p.m.1 views

CVE-2024-3247

In Xpdf 4.05 and earlier, a PDF object loop in an object stream leads to infinite recursion and a stack overflow...

5.5CVSS5.8AI score
Exploits0References1
OSV
OSV
added 2024/04/02 11:15 p.m.0 views

UBUNTU-CVE-2024-3248

In Xpdf 4.05 and earlier, a PDF object loop in the attachments leads to infinite recursion and a stack overflow...

5.5CVSS5.8AI score0.00024EPSS
Exploits1References3
AlpineLinux
AlpineLinux
added 2024/04/02 11:4 p.m.2 views

CVE-2024-3248

In Xpdf 4.05 and earlier, a PDF object loop in the attachments leads to infinite recursion and a stack overflow...

5.5CVSS7.2AI score0.00024EPSS
Exploits1References1
Cvelist
Cvelist
added 2024/04/02 11:4 p.m.15 views

CVE-2024-3248 Stack overflow in Xpdf 4.05 due to object loop in attachments

In Xpdf 4.05 and earlier, a PDF object loop in the attachments leads to infinite recursion and a stack overflow...

2.9CVSS4.2AI score0.00024EPSS
Exploits1References1
Debian CVE
Debian CVE
added 2024/04/02 10:57 p.m.14 views

CVE-2024-3247

In Xpdf 4.05 and earlier, a PDF object loop in an object stream leads to infinite recursion and a stack overflow...

5.5CVSS7.2AI score0.00024EPSS
Exploits1
CVE
CVE
added 2024/04/02 10:57 p.m.60 views

CVE-2024-3247

CVE-2024-3247 affects Xpdf up to version 4.05 (and earlier). The issue is a PDF object loop in an object stream that can trigger infinite recursion and a stack overflow, enabling a local attack surface and potential denial-of-service when processing crafted PDFs. Fedora advisories indicate remedi...

5.5CVSS3.7AI score0.00024EPSS
Exploits1References1Affected Software1
AlpineLinux
AlpineLinux
added 2024/04/02 10:57 p.m.9 views

CVE-2024-3247

In Xpdf 4.05 and earlier, a PDF object loop in an object stream leads to infinite recursion and a stack overflow...

5.5CVSS6.9AI score0.00024EPSS
Exploits1References1
CNNVD
CNNVD
added 2024/04/02 12:0 a.m.1 views

Xpdf 安全漏洞

Xpdf is a free PDF viewer and toolkit from Xpdf, Inc. that includes a text extractor, image converter, HTML converter, and more. A security vulnerability exists in Xpdf version 4.05 and earlier versions, which stems from a PDF object loop that can lead to infinite recursion and stack overflow...

5.5CVSS6.3AI score0.00024EPSS
Exploits1References3
CNNVD
CNNVD
added 2024/04/02 12:0 a.m.2 views

Xpdf 安全漏洞

Xpdf is a free PDF viewer and toolkit from Xpdf, Inc. that includes a text extractor, image converter, HTML converter, and more. A security vulnerability exists in Xpdf version 4.05 and earlier versions, which stems from a PDF object loop that can lead to infinite recursion and stack overflow...

5.5CVSS6.3AI score0.00024EPSS
Exploits1References3
Tenable Nessus
Tenable Nessus
added 2024/03/20 12:0 a.m.29 views

Debian dsa-5642 : php-dompdf-svg-lib - security update

The remote Debian 12 host has a package installed that is affected by multiple vulnerabilities as referenced in the dsa-5642 advisory. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-5642-1...

9.8CVSS7.8AI score0.09628EPSS
Exploits2References8
NVD
NVD
added 2024/03/18 11:15 a.m.15 views

CVE-2024-26639

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

7.5AI score
Exploits0
UbuntuCve
UbuntuCve
added 2024/03/18 11:15 a.m.34 views

CVE-2024-26639

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

5.9AI score
Exploits0References5
Cvelist
Cvelist
added 2024/03/18 10:19 a.m.16 views

CVE-2024-26639

...

7.6AI score
Exploits0
CVE
CVE
added 2024/03/18 10:19 a.m.96 views

CVE-2024-26639

CVE-2024-26639 entry is rejected/not used and does not represent an active vulnerability entry.

7.8AI score
Exploits0
RedhatCVE
RedhatCVE
added 2024/03/16 9:9 p.m.10 views

CVE-2022-41404

An infinite recursion vulnerability was found in the org.ini4j package. This flaw allows triggering the fetch method to cause a denial of service...

7.5CVSS7.2AI score0.00786EPSS
Exploits1References5
OSV
OSV
added 2024/03/06 11:7 a.m.29 views

BIT-MEDIAWIKI-2022-28201

An issue was discovered in MediaWiki before 1.35.6, 1.36.x before 1.36.4, and 1.37.x before 1.37.2. Users with the editinterface permission can trigger infinite recursion, because a bare local interwiki is mishandled for the mainpage message...

4.4CVSS5.6AI score0.00067EPSS
Exploits1References5
Rows per page
Query Builder