16 matches found
org.bouncycastle:bcmail-jdk14 (>=1.71, <=1.85), org.xhtmlrenderer:flying-saucer-examples (>=9.2.0, <=9.3.2) +4 more potentially affected by CVE-2026-17508 via org.bouncycastle:bcpkix-jdk14 (>=1.71, <=1.85)
org.bouncycastle:bcpkix-jdk14 MAVEN version =1.71, =1.71, =9.2.0, =9.2.0, =9.2.0, =9.2.0, =9.2.0, =9.3.2 Source cves: CVE-2026-17508 Source advisory: MEND:CVE-2026-17508...
PT-2025-134: Local File Read in OpenPDF
The vulnerability was identified in OpenPDF, version 2.0.4. The discovered vulnerability allows an attacker to read arbitrary files on the server by inserting absolute paths or directory traversal sequences in the HTML‑tag attributes processed by OpenPDF. This enables the disclosure of confidenti...
PT-2025-133: Local File Read in OpenPDF
The vulnerability was identified in OpenPDF, version 2.0.4. The discovered vulnerability allows an attacker to read arbitrary files on the server by inserting absolute paths or directory traversal sequences in the HTML‑tag attributes processed by OpenPDF. This enables the disclosure of confidenti...
PT-2025-132: Server-side Request Forgery (SSRF) in OpenPDF
The vulnerability was identified in OpenPDF, versions 2.0.3. The discovered vulnerability allows an attacker craft arbitrary HTTP requests that the vulnerable server will send to both external services and internal network endpoints. By exploiting this, the attacker can exfiltrate sensitive data...
OpenPDF PDF Library Arbitrary File Read
The vulnerability of the OpenPDF library for creating and editing PDF documents is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to read arbitrary files...
OpenPDF PDF Library Arbitrary File Read
The vulnerability of the OpenPDF library for creating and editing PDF documents is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to read arbitrary files...
OpenPDF SSRF
The vulnerability of the OpenPDF library for creating and editing PDF documents is related to insufficient validation of requests at the server-side. Exploiting this vulnerability could allow a malicious actor to execute an SSRF attack remotely...
PT-2025-53313
Уязвимость библиотеки для создания и редактирования PDF-документов OpenPDF связана с недостаточной проверкой вводимых данных. Эксплуатация уязвимости может позволить нарушителю читать произвольные файлы...
PT-2025-53311
Уязвимость библиотеки для создания и редактирования PDF-документов OpenPDF связана с недостаточной проверкой запросов на стороне сервера. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, осуществить SSRF-атаку...
PT-2025-53312
Уязвимость библиотеки для создания и редактирования PDF-документов OpenPDF связана с недостаточной проверкой вводимых данных. Эксплуатация уязвимости может позволить нарушителю читать произвольные файлы...
br.net.woodstock.rockframework:rockframework-core (>=1.2.1, <=1.2.4), com.day.cq.dam:cq-dam-commons (>=5.4.0, <=5.5.0) +84 more potentially affected by CVE-2018-17201 via org.apache.sanselan:sanselan (0.97-incubator)
org.apache.sanselan:sanselan MAVEN version 0.97-incubator is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.sanselan:sanselan and may be impacted: - br.net.woodstock.rockframework:rockframework-core =1.2.1, =5.4.0, =0.3.11, =2.0.0-alpha, =0.4....
CVE-2008-5492: Improper Restriction of Operations within the Bounds of a Memory Buffer
Heap-based buffer overflow in the PDFVIEW.PdfviewCtrl.1 ActiveX control in pdfview.ocx 2.0.0.1 in VeryDOC PDF Viewer OCX Control allows remote attackers to execute arbitrary code via a long first argument to the OpenPDF method. NOTE: some of these details are obtained from third party information...
VeryPDF PDFView OCX ActiveX OpenPDF Heap Overflow PoC
No description provided by source. !-- VeryPDF PDFView OCX ActiveX OpenPDF Heap Overflow Discovered & Written By: r0ut3r writ3r at gmail.com / www.bmgsec.com.au Advisory: http://www.bmgsec.com.au/advisory/39/ --------------------------------------------------- Tested on: WinXP Pro SP2 Version:...
VeryPDF PDFView OCX ActiveX OpenPDF Heap Overflow PoC
Exploit for unknown platform in category dos / poc ===================================================== VeryPDF PDFView OCX ActiveX OpenPDF Heap Overflow PoC ===================================================== Sub Boom buff = String1006, "A" target.OpenPDF buff, 1, 1 End Sub 0day.today 2018-04...
