33997 matches found
CVE-2026-62081 WordPress Flexible PDF Coupons plugin <= 1.14.11 - Insecure Direct Object References (IDOR) vulnerability
Contributor Insecure Direct Object References IDOR in Flexible PDF Coupons = 1.14.11 versions...
EUVD-2026-89820
Contributor Insecure Direct Object References IDOR in Flexible PDF Coupons = 1.14.11 versions...
CVE-2026-62081
The Flexible PDF Coupons WordPress plugin versions
WordPress Flexible PDF Coupons plugin <= 1.14.11 - Insecure Direct Object References (IDOR) vulnerability
Insecure Direct Object References IDOR vulnerability discovered by Brobicho in WordPress Plugin Flexible PDF Coupons versions = 1.14.11...
PT-2026-103304
Name of the Vulnerable Software and Affected Versions JetBrains YouTrack versions prior to 2026.2.18991 Description Stored XHTML injection allows for Server-Side Request Forgery SSRF, a technique where an attacker induces the server to make requests to an unintended location, during the PDF expor...
PT-2026-103152
Contributor Insecure Direct Object References IDOR in Flexible PDF Coupons = 1.14.11 versions...
PT-2026-103528
Name of the Vulnerable Software and Affected Versions Kiteworks Core versions prior to 9.5.1 Description Content Injection occurs due to insufficient validation of a URL parameter in the PDF viewer. This flaw allows an attacker-controlled document to be loaded and displayed under the trust of the...
PT-2026-103585
Name of the Vulnerable Software and Affected Versions pypdf versions prior to 6.18.0 Description A flaw in the way the library handles crafted PDF files can lead to uncontrolled resource consumption. Specifically, when a PDF contains indirect-object identifiers or generation-number tokens that...
CVE-2026-102090: URL Redirection to Untrusted Site
Kiteworks Core before version 9.5.1 is vulnerable to Content Injection. A URL parameter in the PDF viewer was insufficiently validated, allowing an attacker-controlled document to be loaded and displayed under the trust of the legitimate application domain. This could increase the credibility of...
CVE-2026-62081: Authorization Bypass Through User-Controlled Key
Contributor Insecure Direct Object References IDOR in Flexible PDF Coupons = 1.14.11 versions...
PT-2026-103587
Name of the Vulnerable Software and Affected Versions pypdf versions prior to 6.18.1 Description A crafted PDF file can contain a TrueType or Type1 simple font with an unusually large /Widths array. This causes the Font. collect tt t1 character widths function in pypdf/ font.py to process entries...
Telerik UI for ASP.NET AJAX 2008.3.1314 < 2026.2.708 RadEditor PDF Export SSRF
The version of Progress Telerik UI for ASP.NET AJAX installed on the remote Windows host is 2008.3.1314 or later and prior to 2026.2.708. It is, therefore, affected by a server-side request forgery vulnerability. Insufficient validation of content submitted to the RadEditor PDF export feature may...
AlmaLinux 9.6 [TuxCare] Security Update: evince / evince-devel / evince-dvi / evince-libs / evince-nautilus / etc (ALMALINUX9.6:CLSA-2026:1782819496)
The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1782819496 advisory. - Atril Document Viewer is the default document reader of the MATE desktop environment for Linux. A single- click remote code execution...
Rocky Linux 9.6 [TuxCare] Security Update: evince / evince-devel / evince-dvi / evince-libs / evince-nautilus / etc (ALMALINUX9.6:CLSA-2026:1782819496)
The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1782819496 advisory. - Atril Document Viewer is the default document reader of the MATE desktop environment for Linux. A single- click remote code execution...
AlmaLinux 9.2 [TuxCare] Security Update: evince / evince-devel / evince-dvi / evince-libs / evince-nautilus / etc (ALMALINUX9.2:CLSA-2026:1782485183)
The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1782485183 advisory. - Atril Document Viewer is the default document reader of the MATE desktop environment for Linux. A single- click remote code execution...
CentOS Linux 7 [TuxCare] Security Update: clamav / clamav-data / clamav-devel / clamav-doc / etc Multiple Vulnerabilities (CENTOS7:CLSA-2024:1732562044)
The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2024:1732562044 advisory. - A vulnerability in the PDF parsing module of Clam AntiVirus ClamAV versions 1.4.0, 1.3.2 and prior versions, all 1.2.x versions, 1.0.6...
CVE-2026-102993: Uncontrolled Resource Consumption
pypdf is a free and open-source pure-python PDF library. Prior to 6.17.0, a crafted PDF can provide unusually large Roman page-label values that cause pypdf/pagelabels.py to generate excessively large numeral strings when an application retrieves document page labels, consuming large amounts of...
CVE-2026-100257: Server-Side Request Forgery (SSRF)
In JetBrains YouTrack before 2026.2.18991 sSRF via stored XHTML injection was possible during PDF export...
