358 matches found
Regular Expression Denial of Service (ReDoS)
Overview Affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS in the addImage, html, and addSvgAsImage methods. An attacker can occupy excessive CPU by supplying a malicious data-url. PoC js import jsPDF from "jpsdf" const doc = new jsPDF; const payload =...
The vulnerability of the PHP library TCPDF, related to the use of files and directories accessible from external parties, allows a hacker to execute arbitrary code.
The vulnerability of the PHP TCPDF library is related to the use of files and directories accessible from external parties. Exploiting this vulnerability allows a malicious actor to execute arbitrary code...
UBUNTU-CVE-2024-56521
An issue was discovered in TCPDF before 6.8.0. If libcurl is used, CURLOPTSSLVERIFYHOST and CURLOPTSSLVERIFYPEER are set unsafely...
UBUNTU-CVE-2024-56519
An issue was discovered in TCPDF before 6.8.0. setSVGStyles does not sanitize the SVG font-family attribute...
TCPDF 安全漏洞
TCPDF is an open source library from Tecnick. It is used to generate PDF documents and barcodes. TCPDF version before 6.8.0 has a security vulnerability , the vulnerability stems from the Error function lacks htmlspecialchars call for error messages...
TCPDF 安全漏洞
TCPDF is an open source library from Tecnick. It is used to generate PDF documents and barcodes. A security vulnerability exists in TCPDF versions prior to 6.8.0, which stems from insecure settings of CURLOPTSSLVERIFYHOST and CURLOPTSSLVERIFYPEER...
The vulnerability of the Adobe PDFL Software Development Kit for creating, processing, and analyzing PDF documents lies in its ability to perform operations beyond the buffer boundaries in memory. This allows an attacker to execute arbitrary code.
The vulnerability of the Adobe PDFL Software Development Kit for creating, processing, and analyzing PDF documents lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
CVE-2024-49513
PDFL SDK versions 21.0.0.5 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
Adobe PDFL SDK 缓冲区错误漏洞
The Adobe PDFL SDK is a software development kit for OEMs, ISVs, system integrators, and enterprise IT developers from Adobe, Inc. that contains a powerful set of functions for developing third-party solutions and workflows based on the Adobe PDF standard. A buffer error vulnerability exists in...
APSB24-98 : Security update available for Adobe PDFL SDK
Adobe has released an update for the Adobe PDF Library Software Development Kit SDK for Windows, Linux and macOS. Adobe PDFL SDK contains a set of functions for developing third-party solutions and workflows built upon the Adobe PDF standard. This update resolves a critical vulnerability that cou...
The vulnerability of the APDFL library used by the 3D JT and JT2Go viewing tools, as well as the Teamcenter Visualization lifecycle management system, allows a perpetrator to execute arbitrary code.
The vulnerability of the APDFL library used by the 3D JT and JT2Go viewing tools, as well as the Teamcenter Visualization lifecycle management system, relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow attackers to execute arbitrary code...
UBUNTU-CVE-2024-22641
TCPDF version 6.6.5 and before is vulnerable to ReDoS Regular Expression Denial of Service if parsing an untrusted SVG file...
UBUNTU-CVE-2024-22640
TCPDF version =6.6.5 is vulnerable to ReDoS Regular Expression Denial of Service if parsing an untrusted HTML page with a crafted color...
TCPDF 安全漏洞
TCPDF is an open source library from Tecnick. It is used to generate PDF documents and barcodes. TCPDF 6.6.5 and earlier versions of a security vulnerability , the vulnerability stems from the use of carefully crafted color HTML pages vulnerable to denial of service attacks...
UBUNTU-CVE-2024-32489
TCPDF before 6.7.4 mishandles calls that use HTML syntax...
CVE-2023-46250
pypdf is a free and open-source pure-python PDF library. An attacker who uses a vulnerability present in versions 3.7.0 through 3.16.4 can craft a PDF which leads to an infinite loop. This infinite loop blocks the current process and can utilize a single core of the CPU by 100%. It does not affec...
Path traversal
pypdf is a free and open-source pure-python PDF library. An attacker who uses a vulnerability present in versions 3.7.0 through 3.16.4 can craft a PDF which leads to an infinite loop. This infinite loop blocks the current process and can utilize a single core of the CPU by 100%. It does not affec...
CVE-2023-46250 pypdf possible Infinite Loop when PdfWriter(clone_from) is used with a PDF
pypdf is a free and open-source pure-python PDF library. An attacker who uses a vulnerability present in versions 3.7.0 through 3.16.4 can craft a PDF which leads to an infinite loop. This infinite loop blocks the current process and can utilize a single core of the CPU by 100%. It does not affec...
CVE-2023-46250
The CVE-2023-46250 issue affects the pypdf project (pure-Python PDF library). Versions 3.7.0 through 3.16.4 can be exploited to craft a PDF that triggers an infinite loop, potentially tying up a CPU core (local impact). The vulnerability is fixed in version 3.17.0. As a workaround, the patch can ...