Lucene search
K

27959 matches found

vulnersOsv
vulnersOsv
added 2026/04/27 12:0 a.m.8 views

com.alibaba.cloud.ai:document-parser-apache-pdfbox (>=1.0.0-M5.1 <=1.0.0-M6.1), com.alibaba.cloud.ai:document-parser-bibtex (>=1.0.0-M5.1 <=1.0.0-M6.1) +19 more potentially affected by CVE-2026-40980 via org.springframework.ai:spring-ai-pdf-document-reader (>=1.0.0-M5 <=1.0.1)

org.springframework.ai:spring-ai-pdf-document-reader MAVEN version =1.0.0-M5, =1.0.0-M5.1, =1.0.0-M5.1, =1.0.0.1, =1.0.0.1, =1.0.0.1, =4.2.3, =4.2.3, =4.2.3, =4.2.3, =4.2.3, =4.2.3, =4.2.6 - com.chinagoods.framework.thinkc...

6.5CVSS5.8AI score0.0024EPSS
Exploits0
vulnersOsv
vulnersOsv
added 2026/04/27 12:0 a.m.6 views

ai.telosforge:kimaira-starter-etl (>=1.2.4 <=1.2.6), cn.echoparrot:echoparrot-application (=25.4.0) +12 more potentially affected by CVE-2026-40980 via org.springframework.ai:spring-ai-pdf-document-reader (>=1.1.0-M3 <=1.1.2)

org.springframework.ai:spring-ai-pdf-document-reader MAVEN version =1.1.0-M3, =1.2.4, =25.4.0, =1.1.0.0, =1.1.0.0, =1.1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =.30.0.rc1, =.30.0.rc1, =.30.0.rc1, =3.30.0.rc16 Source cves: CVE-2026-40980 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORKAI-16316421...

6.5CVSS5.4AI score0.0024EPSS
Exploits0
CNNVD
CNNVD
added 2026/04/27 12:0 a.m.3 views

Foxit PDF Reader和Foxit PDF Editor 资源管理错误漏洞

Foxit PDF Reader and Foxit PDF Editor are products of Foxit Corporation, a Chinese company. Foxit PDF Reader is a PDF reader. Foxit PDF Editor is a PDF editor. Both Foxit PDF Reader and Foxit PDF Editor have a resource management vulnerability. This vulnerability arises from the special XFA PDF...

5.5CVSS6.1AI score0.00113EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/04/27 12:0 a.m.5 views

Foxit PDF Reader和Foxit PDF Editor 资源管理错误漏洞

Foxit PDF Reader and Foxit PDF Editor are products of Foxit Corporation, a Chinese company. Foxit PDF Reader is a PDF reader. Foxit PDF Editor is a PDF editor. Both Foxit PDF Reader and Foxit PDF Editor have a resource management vulnerability. This vulnerability arises from calling a function th...

7.8CVSS7.1AI score0.00169EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/04/27 12:0 a.m.5 views

Foxit PDF Reader和Foxit PDF Editor 资源管理错误漏洞

Foxit PDF Reader and Foxit PDF Editor are products of Foxit Corporation, a Chinese company. Foxit PDF Reader is a PDF reader. Foxit PDF Editor is a PDF editor. There is a resource management vulnerability in Foxit PDF Editor and Foxit PDF Reader. This vulnerability arises from abnormal document...

7.8CVSS7.1AI score0.00181EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/04/27 12:0 a.m.6 views

Foxit PDF Reader和Foxit PDF Editor 资源管理错误漏洞

Foxit PDF Reader and Foxit PDF Editor are products of Foxit Corporation, a Chinese company. Foxit PDF Reader is a PDF reader. Foxit PDF Editor is a PDF editor. There is a resource management vulnerability in Foxit PDF Editor and Foxit PDF Reader. This vulnerability stems from a page lifecycle...

5.5CVSS5.8AI score0.00182EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2026/04/27 12:0 a.m.6 views

Foxit PDF Reader AcroForm Signature Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS4.1AI score0.00182EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2026/04/27 12:0 a.m.7 views

Foxit PDF Reader AcroForm Signature Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

7.8CVSS6AI score0.00169EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2026/04/27 12:0 a.m.3 views

Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

7.8CVSS6AI score0.00169EPSS
Exploits0References1
Packet Storm
Packet Storm
added 2026/04/27 12:0 a.m.79 views

📄 pdf-image 2.0.0 Command Injection

In pdf-image version 2.0.0, a security issue allows OS command injection when untrusted input is passed to the PDFImage constructor and later processed by methods such as getInfo...

9.8CVSS5.4AI score0.02493EPSS
Exploits4
Tenable Nessus
Tenable Nessus
added 2026/04/27 12:0 a.m.4 views

Foxit PDF Editor < 14.0.4 / 2026.1.1 Multiple Vulnerabilities

According to its version, the Foxit PDF Editor application previously named Foxit PhantomPDF installed on the remote Windows host is prior to 2026.1.1/14.0.4. It is, therefore affected by multiple vulnerabilities: - Document structural anomalies caused inconsistencies between page element...

7.8CVSS6.9AI score0.00182EPSS
Exploits0References8
Tenable Nessus
Tenable Nessus
added 2026/04/27 12:0 a.m.9 views

Foxit PDF Reader < 2026.1.1 Multiple Vulnerabilities

According to its version, the Foxit PDF Reader application previously named Foxit Reader installed on the remote Windows host is prior to 2026.1.1. It is, therefore affected by multiple vulnerabilities: - Document structural anomalies caused inconsistencies between page element relationships and...

7.8CVSS6.9AI score0.00182EPSS
Exploits0References8
Snyk
Snyk
added 2026/04/27 12:0 a.m.3 views

Allocation of Resources Without Limits or Throttling

Overview org.springframework.ai:spring-ai-pdf-document-reader is a Spring AI PDF document reader Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via ForkPDFLayoutTextStripper. An attacker can cause denial of service by supplying a crafted P...

7.1CVSS5.5AI score0.0024EPSS
Exploits0References2
GithubExploit
GithubExploit
added 2026/04/26 6:9 p.m.94 views

Advanced-AI-Recon-and-Exploit-Framework

reNgine: The Ultimate Web Reconnaissance & Vulnerability Scanner...

6.1AI score
Exploits0
Cvelist
Cvelist
added 2026/04/26 1:19 p.m.27 views

CVE-2018-25279 jiNa OCR Image to Text 1.0 Denial of Service via PNG

jiNa OCR Image to Text 1.0 contains a denial of service vulnerability that allows local attackers to crash the application by processing a malformed PNG file. Attackers can create a specially crafted PNG file with an oversized buffer and trigger the crash when the application attempts to convert...

6.9CVSS0.00123EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2026/04/26 1:19 p.m.0 views

CVE-2018-25279

jiNa OCR Image to Text 1.0 contains a denial of service vulnerability that allows local attackers to crash the application by processing a malformed PNG file. Attackers can create a specially crafted PNG file with an oversized buffer and trigger the crash when the application attempts to convert...

6.9CVSS5.4AI score0.00123EPSS
Exploits0References3Affected Software1
CVE
CVE
added 2026/04/26 1:19 p.m.6 views

CVE-2018-25279

jiNa OCR Image to Text 1.0 contains a local denial-of-service vulnerability: processing a specially crafted PNG with an oversized buffer causes the application to crash during PNG-to-PDF conversion. Root cause: malformed PNG triggers a crash in the image-to-text pipeline. Impact is local, with av...

6.9CVSS5.5AI score0.00123EPSS
Exploits0References3
CNNVD
CNNVD
added 2026/04/26 12:0 a.m.6 views

jiNa OCR Image to Text 安全漏洞

jiNa OCR Image to Text is an open-source tool developed by Convertimagetotext, which supports extracting text from images. Version 1.0 of jiNa OCR Image to Text contains a security vulnerability. This vulnerability arises from a denial-of-service attack when processing deformed PNG files. It may...

6.9CVSS5.8AI score0.00123EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/04/25 11:9 a.m.1 views

CVE-2026-41312

A flaw was found in pypdf. An attacker can craft a malicious PDF file containing a specially compressed stream. When this file is processed, it can lead to excessive memory consumption RAM exhaustion, resulting in a Denial of Service DoS for the affected system. Mitigation Mitigation for this iss...

6.5CVSS5AI score0.00226EPSS
Exploits0References7
RedhatCVE
RedhatCVE
added 2026/04/25 11:4 a.m.1 views

CVE-2026-41168

A flaw was found in pypdf. An attacker can craft a malicious PDF file containing oversized cross-reference streams or object streams. Processing such a file can lead to excessively long runtimes, resulting in a Denial of Service DoS for applications using the pypdf library. Mitigation Mitigation...

6.9CVSS5.1AI score0.00297EPSS
Exploits0References7
Rows per page
Query Builder