SUSE CVE-2016-2175

Apache PDFBox before 1.8.12 and 2.x before 2.0.1 does not properly initialize the XML parsers, which allows context-dependent attackers to conduct XML External Entity XXE attacks via a crafted PDF...

SUSE CVE-2018-8036

In Apache PDFBox 1.8.0 to 1.8.14 and 2.0.0RC1 to 2.0.10, a carefully crafted or fuzzed file can trigger an infinite loop which leads to an out of memory exception in Apache PDFBox's AFMParser...

SUSE CVE-2018-11797

In Apache PDFBox 1.8.0 to 1.8.15 and 2.0.0RC1 to 2.0.11, a carefully crafted PDF file can trigger an extremely long running computation when parsing the page tree...

SUSE CVE-2021-27807

A carefully crafted PDF file can trigger an infinite loop while loading the file. This issue affects Apache PDFBox version 2.0.22 and prior 2.0.x versions...

SUSE CVE-2021-27906

A carefully crafted PDF file can trigger an OutOfMemory-Exception while loading the file. This issue affects Apache PDFBox version 2.0.22 and prior 2.0.x versions...

SUSE CVE-2021-31812

In Apache PDFBox, a carefully crafted PDF file can trigger an infinite loop while loading the file. This issue affects Apache PDFBox version 2.0.23 and prior 2.0.x versions...

SUSE CVE-2021-31811

In Apache PDFBox, a carefully crafted PDF file can trigger an OutOfMemory-Exception while loading the file. This issue affects Apache PDFBox version 2.0.23 and prior 2.0.x versions...

Oracle WebCenter Sites (Jan 2023 CPU)

The 12.2.1.4.0 version of WebCenter Sites installed on the remote host is affected by multiple vulnerabilities as referenced in the January 2023 CPU advisory. - Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware component: WebCenter Sites Apache PDFBox. The supported...

Apache Tika Denial of Service Vulnerability (CNVD-2022-51053)

Apache Tika is a collection of content extraction tools from the Apache Foundation that integrates POI an open source library that uses Java programs to provide read and write functionality for Microsoft Office format documents, Pdfbox a pure Java library for reading and creating PDF documents an...

Apache Tika Denial of Service Vulnerability (CNVD-2022-73263)

Apache Tika is a collection of content extraction tools from the Apache Foundation that integrates POI an open source library that uses Java programs to provide read and write functionality for Microsoft Office format documents, Pdfbox a pure Java class library for reading and creating PDF...

Apache Tika Denial of Service Vulnerability (CNVD-2022-73491)

Apache Tika is a collection of content extraction tools from the Apache Foundation that integrates POI an open source library that uses Java programs to provide read and write functionality for Microsoft Office format documents, Pdfbox a pure Java class library for reading and creating PDF...

Apache Tika security vulnerabilities

Apache Tika is a collection of content extraction tools from the Apache Foundation that integrates POI an open source library that uses Java programs to provide read and write functionality for Microsoft Office format documents, Pdfbox a pure Java class library for reading and creating PDF...

ae.teletronics.nlp:entityextraction (>=1.3, <=1.4), be.thematchbox:abstractriver (>=1.0.1, <=1.1.0) +511 more potentially affected by CVE-2018-8036 via org.apache.pdfbox:pdfbox (>=1.8.0, <=1.8.14)

org.apache.pdfbox:pdfbox MAVEN version =1.8.0, =1.3, =1.0.1, =0.6, =0.3, =1.0, =0.2.0, =0.9, =3.0, =3.5.1 - com.findwise.hydra:hydra-tika-stages 0.4.5 - com.github.cka3o4huk:jmeter-graph-maven-plugin 0.1.1 and more Source cves: CVE-2018-8036 Source advisory: OSV:GHSA-J2XQ-PFFF-MVGG...

GHSA-J2XQ-PFFF-MVGG Loop with Unreachable Exit Condition in Apache PDFBox

In Apache PDFBox 1.8.0 to 1.8.14 and 2.0.0RC1 to 2.0.10, a carefully crafted or fuzzed file can trigger an infinite loop which leads to an out of memory exception in Apache PDFBox's AFMParser...

Loop with Unreachable Exit Condition in Apache PDFBox

In Apache PDFBox 1.8.0 to 1.8.14 and 2.0.0RC1 to 2.0.10, a carefully crafted or fuzzed file can trigger an infinite loop which leads to an out of memory exception in Apache PDFBox's AFMParser...

ai.mattmann.mnemosyne:cas-crawler (1.11.0), ai.mattmann.mnemosyne:cas-filemgr (1.11.0) +763 more potentially affected by CVE-2018-8036 via org.apache.pdfbox:pdfbox (>=2.0.0-rc1, <=2.0.10)

org.apache.pdfbox:pdfbox MAVEN version =2.0.0-rc1, =0.9.6, =0.9.6, =0.1.1, =1.0.0, =2.0.0, =2.0.0, =0.1.8, =0.2.28 and more Source cves: CVE-2018-8036 Source advisory: OSV:GHSA-J2XQ-PFFF-MVGG...

ae.teletronics.nlp:entityextraction (>=1.3, <=1.4), be.thematchbox:abstractriver (>=1.0.1, <=1.1.0) +511 more potentially affected by CVE-2018-8036 via org.apache.pdfbox:pdfbox (>=1.8.0, <=1.8.14)

org.apache.pdfbox:pdfbox MAVEN version =1.8.0, =1.3, =1.0.1, =0.6, =0.3, =1.0, =0.2.0, =0.9, =3.0, =3.5.1 - com.findwise.hydra:hydra-tika-stages 0.4.5 - com.github.cka3o4huk:jmeter-graph-maven-plugin 0.1.1 and more Source cves: CVE-2018-8036 Source advisory: GHSA-J2XQ-PFFF-MVGG...

Security Bulletin: Multiple security vulnerabilities with IBM FileNet Content Manager component in IBM Business Automation Workflow -CVE-2021-31811, CVE-2021-31812, CVE-2021-23926, CVE-2021-38965

Summary The embedded IBM FileNet Content Manager component, that is shipped with IBM Business Automation Workflow is vulnerable to multiple vulnerabilities. Vulnerability Details CVEID: CVE-2021-38965 DESCRIPTION: IBM FileNet Content Manager 5.5.4, 5.5.6, and 5.5.7 could allow a remote...

Mageia: Security Advisory (MGASA-2021-0378)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2021-0184)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...