Lucene search
K

40 matches found

RedhatCVE
RedhatCVE
added 2026/03/26 2:56 p.m.1 views

CVE-2019-25467

Verypdf docPrint Pro 8.0 contains a structured exception handling buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying an oversized alphanumeric encoded payload in the User Password or Master Password fields. Attackers can craft a malicious payload with...

8.6CVSS6.3AI score0.00012EPSS
Exploits0References1
NVD
NVD
added 2026/03/21 1:16 p.m.3 views

CVE-2019-25549

VeryPDF PCL Converter 2.7 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long password string. Attackers can trigger a buffer overflow by entering a 3000-byte password in the PDF Security encryption fields, causing the...

6.9CVSS0.00016EPSS
Exploits1References3
NVD
NVD
added 2026/03/11 7:16 p.m.1 views

CVE-2019-25467

Verypdf docPrint Pro 8.0 contains a structured exception handling buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying an oversized alphanumeric encoded payload in the User Password or Master Password fields. Attackers can craft a malicious payload with...

8.6CVSS0.00012EPSS
Exploits0References4
CVE
CVE
added 2026/03/11 6:23 p.m.5 views

CVE-2019-25467

CVE-2019-25467 affects Verypdf docPrint Pro 8.0. The issue is a structured exception handling (SEH) buffer overflow in processing the User Password or Master Password fields during PDF encryption, enabling local code execution via an oversized alphanumeric-encoded payload with crafted shellcode, ...

8.6CVSS6.3AI score0.00012EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2026/03/11 6:23 p.m.2 views

CVE-2019-25467 Verypdf docPrint Pro 8.0 Local SEH Buffer Overflow

Verypdf docPrint Pro 8.0 contains a structured exception handling buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying an oversized alphanumeric encoded payload in the User Password or Master Password fields. Attackers can craft a malicious payload with...

8.6CVSS6.3AI score0.00012EPSS
Exploits0References4
ATTACKERKB
ATTACKERKB
added 2026/03/11 6:23 p.m.1 views

CVE-2019-25467

Verypdf docPrint Pro 8.0 contains a structured exception handling buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying an oversized alphanumeric encoded payload in the User Password or Master Password fields. Attackers can craft a malicious payload with...

8.6CVSS6.3AI score0.00012EPSS
Exploits0References4Affected Software1
Positive Technologies
Positive Technologies
added 2026/03/11 12:0 a.m.0 views

PT-2026-24765

Verypdf docPrint Pro 8.0 contains a structured exception handling buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying an oversized alphanumeric encoded payload in the User Password or Master Password fields. Attackers can craft a malicious payload with...

8.6CVSS6.3AI score0.00012EPSS
Exploits0References5
RedhatCVE
RedhatCVE
added 2026/03/05 1:39 p.m.4 views

CVE-2026-27441

SEPPmail Secure Email Gateway before version 15.0.1 insufficiently neutralizes the PDF encryption password, allowing OS command execution...

9.8CVSS5.9AI score0.00068EPSS
Exploits0References1
EUVD
EUVD
added 2026/03/04 9:31 a.m.2 views

EUVD-2026-9377

SEPPmail Secure Email Gateway before version 15.0.1 insufficiently neutralizes the PDF encryption password, allowing OS command execution...

9.5CVSS5.9AI score0.00068EPSS
Exploits0References2
Cvelist
Cvelist
added 2026/03/04 8:49 a.m.27 views

CVE-2026-27441 PDF Password CMDi

SEPPmail Secure Email Gateway before version 15.0.1 insufficiently neutralizes the PDF encryption password, allowing OS command execution...

9.5CVSS0.00068EPSS
Exploits0References1
CVE
CVE
added 2026/03/04 8:49 a.m.8 views

CVE-2026-27441

SEPPmail Secure Email Gateway is affected by CVE-2026-27441. In versions prior to 15.0.1, the product insufficiently neutralizes the PDF encryption password, allowing OS command execution. This is a potential network-accessible vulnerability with high impact to confidentiality, integrity, and ava...

9.8CVSS5.9AI score0.00068EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2026/03/04 12:0 a.m.3 views

SEPPmail Secure Email Gateway 安全漏洞

SEPPmail Secure Email Gateway is an email security gateway developed by the German company SEPPmail. Versions of SEPPmail Secure Email Gateway prior to version 15.0.1 contained security vulnerabilities, which were due to insufficient PDF encryption and password encoding. These vulnerabilities cou...

9.8CVSS6AI score0.00068EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/03/04 12:0 a.m.3 views

PT-2026-22887

Name of the Vulnerable Software and Affected Versions SEPPmail Secure Email Gateway versions prior to 15.0.1 Description The SEPPmail Secure Email Gateway does not properly handle PDF encryption passwords, potentially allowing for operating system command execution. The issue arises from...

9.8CVSS5.9AI score0.00068EPSS
Exploits0References9
Fedora
Fedora
added 2026/02/22 12:58 a.m.4 views

[SECURITY] Fedora 42 Update: mupdf-1.26.3-5.fc42

MuPDF is a lightweight PDF viewer and toolkit written in portable C. The renderer in MuPDF is tailored for high quality anti-aliased graphics. MuPDF renders text with metrics and spacing accurate to within fractions of a pixel for the highest fidelity in reproducing the look of a printed page on...

7.5CVSS6AI score0.00024EPSS
Exploits1
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2008-1001

Malware in sbrugna...

2.6CVSS6.4AI score0.0037EPSS
Exploits1References10
RedhatCVE
RedhatCVE
added 2025/05/22 2:38 a.m.5 views

CVE-2013-4828

HP LaserJet M4555, M525, and M725; LaserJet flow MFP M525c; LaserJet Enterprise color flow MFP M575c; Color LaserJet CM4540, M575, and M775; and ScanJet Enterprise 8500fn1 FutureSmart devices do not properly encrypt PDF documents, which allows remote attackers to obtain sensitive information via...

4.3CVSS6.6AI score0.00594EPSS
Exploits0References1
CVE
CVE
added 2024/03/29 11:12 a.m.95 views

CVE-2024-23449

CVE-2024-23449 affects Elasticsearch: versions 8.4.0 up to (but not including) 8.11.1 are vulnerable to an uncaught exception when an encrypted PDF is passed to the REST API’s attachment processor, causing the ingest node to crash. The issue does not occur with password-protected or unencrypted P...

5.3CVSS4.3AI score0.00047EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2023/10/17 11:29 p.m.44 views

CVE-2023-5552

CVE-2023-5552 describes a password-disclosure vulnerability in the Secure PDF eXchange (SPX) feature of Sophos Firewall 19.5 MR3 (19.5.3) and older, where a password type set to “Specified by sender” allows an attacker with full email access to decrypt PDFs. The issue is tied to SPX password hand...

7.5CVSS7.3AI score0.00068EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2023/10/14 5:0 a.m.107 views

CVE-2023-26155

node-qpdf is vulnerable to Command Injection due to encrypt() not sanitizing input before passing it to a sensitive command execution API. Affected: all versions. Root cause: unsanitized parameter input in encrypt() leads to command execution when a PDF file path is provided. Impact: potential ar...

9.8CVSS9.8AI score0.00155EPSS
Exploits1References2Affected Software1
Veracode
Veracode
added 2023/05/21 8:49 a.m.14 views

Denial Of Services (DoS)

libpodofo.so is vulnerable to Denial Of Services DoS. The vulnerability exists due to the heap buffer overflow in the PdfEncryptAESV3 function of PdfEncrypt.h, which allows an attacker to cause an application crash...

8.8CVSS7.3AI score0.00168EPSS
Exploits1References2Affected Software1
Rows per page
Query Builder