33981 matches found
CVE-2026-100257
In JetBrains YouTrack before 2026.2.18991 sSRF via stored XHTML injection was possible during PDF export...
CVE-2026-100257
In JetBrains YouTrack before 2026.2.18991 sSRF via stored XHTML injection was possible during PDF export...
CVE-2026-100257
In JetBrains YouTrack versions prior to 2026.2.18991 , a vulnerability exists where Server-Side Request Forgery (SSRF) can occur via stored XHTML injection during the PDF export process. The provided documents do not specify the exact root cause or specific remediation steps beyond the affected v...
EUVD-2026-90001
In JetBrains YouTrack before 2026.2.18991 sSRF via stored XHTML injection was possible during PDF export...
CVE-2026-62081
Contributor Insecure Direct Object References IDOR in Flexible PDF Coupons = 1.14.11 versions...
CVE-2026-62081 WordPress Flexible PDF Coupons plugin <= 1.14.11 - Insecure Direct Object References (IDOR) vulnerability
Contributor Insecure Direct Object References IDOR in Flexible PDF Coupons = 1.14.11 versions...
CVE-2026-62081
The Flexible PDF Coupons WordPress plugin versions
CVE-2026-62081 WordPress Flexible PDF Coupons plugin <= 1.14.11 - Insecure Direct Object References (IDOR) vulnerability
Contributor Insecure Direct Object References IDOR in Flexible PDF Coupons = 1.14.11 versions...
EUVD-2026-89820
Contributor Insecure Direct Object References IDOR in Flexible PDF Coupons = 1.14.11 versions...
WordPress Flexible PDF Coupons plugin <= 1.14.11 - Insecure Direct Object References (IDOR) vulnerability
Insecure Direct Object References IDOR vulnerability discovered by Brobicho in WordPress Plugin Flexible PDF Coupons versions = 1.14.11...
CVE-2026-102993: Uncontrolled Resource Consumption
pypdf is a free and open-source pure-python PDF library. Prior to 6.17.0, a crafted PDF can provide unusually large Roman page-label values that cause pypdf/pagelabels.py to generate excessively large numeral strings when an application retrieves document page labels, consuming large amounts of...
PT-2026-103304
Name of the Vulnerable Software and Affected Versions JetBrains YouTrack versions prior to 2026.2.18991 Description Stored XHTML injection allows for Server-Side Request Forgery SSRF, a technique where an attacker induces the server to make requests to an unintended location, during the PDF expor...
PT-2026-103152
Contributor Insecure Direct Object References IDOR in Flexible PDF Coupons = 1.14.11 versions...
PT-2026-103528
Name of the Vulnerable Software and Affected Versions Kiteworks Core versions prior to 9.5.1 Description Content Injection occurs due to insufficient validation of a URL parameter in the PDF viewer. This flaw allows an attacker-controlled document to be loaded and displayed under the trust of the...
CVE-2026-102090: URL Redirection to Untrusted Site
Kiteworks Core before version 9.5.1 is vulnerable to Content Injection. A URL parameter in the PDF viewer was insufficiently validated, allowing an attacker-controlled document to be loaded and displayed under the trust of the legitimate application domain. This could increase the credibility of...
Telerik UI for ASP.NET AJAX 2008.3.1314 < 2026.2.708 RadEditor PDF Export SSRF
The version of Progress Telerik UI for ASP.NET AJAX installed on the remote Windows host is 2008.3.1314 or later and prior to 2026.2.708. It is, therefore, affected by a server-side request forgery vulnerability. Insufficient validation of content submitted to the RadEditor PDF export feature may...
AlmaLinux 9.2 [TuxCare] Security Update: evince / evince-devel / evince-dvi / evince-libs / evince-nautilus / etc (ALMALINUX9.2:CLSA-2026:1782485183)
The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1782485183 advisory. - Atril Document Viewer is the default document reader of the MATE desktop environment for Linux. A single- click remote code execution...
AlmaLinux 9.6 [TuxCare] Security Update: evince / evince-devel / evince-dvi / evince-libs / evince-nautilus / etc (ALMALINUX9.6:CLSA-2026:1782819496)
The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1782819496 advisory. - Atril Document Viewer is the default document reader of the MATE desktop environment for Linux. A single- click remote code execution...
CentOS Linux 7 [TuxCare] Security Update: clamav / clamav-data / clamav-devel / clamav-doc / etc Multiple Vulnerabilities (CENTOS7:CLSA-2024:1732562044)
The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2024:1732562044 advisory. - A vulnerability in the PDF parsing module of Clam AntiVirus ClamAV versions 1.4.0, 1.3.2 and prior versions, all 1.2.x versions, 1.0.6...