Lucene search
K

307 matches found

vulnersOsv
vulnersOsv
added 2018/10/17 6:22 p.m.4 views

au.com.turingg:turingg-files (=0.0.1), au.com.turingg:turingg-mimak (=1.0.0) +154 more potentially affected by CVE-2018-11797 via org.apache.pdfbox:pdfbox (>=2.0.0 <=2.0.11)

org.apache.pdfbox:pdfbox MAVEN version =2.0.0, =1.0.0, =0.21.0, =0.22.0-bin-20191218-35fbb34-NIGHTLY, =0.21.0, =1.0-RELEASE, =2.2, =3.1.0, =3.3.0 and more Source cves: CVE-2018-11797 Source advisory: OSV:GHSA-GX96-VGF7-HWFG...

5.5CVSS6.5AI score0.04024EPSS
Exploits0
vulnersOsv
vulnersOsv
added 2018/10/17 6:22 p.m.4 views

cc.catalysts.boot:cat-boot-report-pdf (=0.0.10), com.bit-scout:pdf-converter (=1.0.0) +227 more potentially affected by CVE-2018-11797 via org.apache.pdfbox:pdfbox (>=1.8.0 <=1.8.15)

org.apache.pdfbox:pdfbox MAVEN version =1.8.0, =0.6, =0.9, =3.0, =1.3.3-2.10, =0.0.2, =0.0.2, =1.0, =1.0, =1.0, =1.3 and more Source cves: CVE-2018-11797 Source advisory: OSV:GHSA-GX96-VGF7-HWFG...

5.5CVSS6.5AI score0.04024EPSS
Exploits0
OSV
OSV
added 2018/10/17 6:22 p.m.0 views

GHSA-GX96-VGF7-HWFG In Apache PDFBox a carefully crafted PDF file can trigger an extremely long running computation

In Apache PDFBox 1.8.0 to 1.8.15 and 2.0.0RC1 to 2.0.11, a carefully crafted PDF file can trigger an extremely long running computation when parsing the page tree...

5.5CVSS7.2AI score0.04024EPSS
Exploits0References9
Github Security Blog
Github Security Blog
added 2018/10/17 6:22 p.m.104 views

In Apache PDFBox a carefully crafted PDF file can trigger an extremely long running computation

In Apache PDFBox 1.8.0 to 1.8.15 and 2.0.0RC1 to 2.0.11, a carefully crafted PDF file can trigger an extremely long running computation when parsing the page tree...

5.5CVSS3.8AI score0.04024EPSS
Exploits0References9Affected Software1
vulnersOsv
vulnersOsv
added 2018/10/17 6:22 p.m.5 views

com.amashchenko.struts2.pdfstream:struts2-pdfstream-plugin (=2.0.0), com.amashchenko.struts2.pdfstream:struts2-pdfstream-showcase (=2.0.0) +50 more potentially affected by CVE-2016-2175 via org.apache.pdfbox:pdfbox (=2.0.0)

org.apache.pdfbox:pdfbox MAVEN version =2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.pdfbox:pdfbox and may be impacted: - com.amashchenko.struts2.pdfstream:struts2-pdfstream-plugin =2.0.0 -...

7.8CVSS7.1AI score0.04797EPSS
Exploits0
vulnersOsv
vulnersOsv
added 2018/10/17 6:22 p.m.4 views

biz.netcentric.cq.tools.accesscontroltool:sling-minimum-version-environment (>=4.2.0 <=4.2.1), br.net.woodstock.rockframework:rockframework-core (>=1.2.1 <=3.0.0) +457 more potentially affected by CVE-2016-2175 via org.apache.pdfbox:pdfbox (>=0.8.0-incubating <=1.8.11)

org.apache.pdfbox:pdfbox MAVEN version =0.8.0-incubating, =4.2.0, =1.2.1, =3.0.0, =5.6.100, =2.0.6, =1.0.10, =1.0.8, =0.6, =1.0.8, =1.0.12 and more Source cves: CVE-2016-2175 Source advisory: OSV:GHSA-4C32-XMGJ-2G98...

7.8CVSS7.2AI score0.04797EPSS
Exploits0
Github Security Blog
Github Security Blog
added 2018/10/17 6:22 p.m.34 views

High severity vulnerability that affects org.apache.pdfbox:pdfbox

Apache PDFBox before 1.8.12 and 2.x before 2.0.1 does not properly initialize the XML parsers, which allows context-dependent attackers to conduct XML External Entity XXE attacks via a crafted PDF...

7.8CVSS5.8AI score0.04797EPSS
Exploits0References14Affected Software1
OSV
OSV
added 2018/10/17 6:22 p.m.0 views

GHSA-4C32-XMGJ-2G98 High severity vulnerability that affects org.apache.pdfbox:pdfbox

Apache PDFBox before 1.8.12 and 2.x before 2.0.1 does not properly initialize the XML parsers, which allows context-dependent attackers to conduct XML External Entity XXE attacks via a crafted PDF...

7.8CVSS7.1AI score0.04797EPSS
Exploits0References14
RedhatCVE
RedhatCVE
added 2018/10/09 11:19 a.m.39 views

CVE-2018-11797

In Apache PDFBox 1.8.0 to 1.8.15 and 2.0.0RC1 to 2.0.11, a carefully crafted PDF file can trigger an extremely long running computation when parsing the page tree...

5.5CVSS3.6AI score0.04024EPSS
Exploits0References2
Veracode
Veracode
added 2018/10/08 6:26 a.m.16 views

Denial Of Service (DoS)

pdfbox is vulnerable to denial of service DoS attacks. The vulnerability exists during computation made when parsing the page tree, causing a DoS attack...

5.5CVSS5.4AI score0.04024EPSS
Exploits0References13Affected Software2
CNVD
CNVD
added 2018/10/08 12:0 a.m.3 views

Apache PDFBox parser denial of service vulnerability

Apache PDFBox is the United States Apache Apache Software Foundation of an open source, Java-based and provide the creation of new PDF documents, modify existing PDF documents and other features of the tool library. Apache PDFBox parser there is a denial-of-service vulnerability, attackers use...

5.5CVSS6.2AI score0.04024EPSS
Exploits0References1
Prion
Prion
added 2018/10/05 8:29 p.m.14 views

Code injection

In Apache PDFBox 1.8.0 to 1.8.15 and 2.0.0RC1 to 2.0.11, a carefully crafted PDF file can trigger an extremely long running computation when parsing the page tree...

4.3CVSS5.5AI score0.04024EPSS
Exploits0References7Affected Software3
NVD
NVD
added 2018/10/05 8:29 p.m.21 views

CVE-2018-11797

In Apache PDFBox 1.8.0 to 1.8.15 and 2.0.0RC1 to 2.0.11, a carefully crafted PDF file can trigger an extremely long running computation when parsing the page tree...

5.5CVSS5.3AI score0.04024EPSS
Exploits0References7
OSV
OSV
added 2018/10/05 8:29 p.m.2 views

DEBIAN-CVE-2018-11797

In Apache PDFBox 1.8.0 to 1.8.15 and 2.0.0RC1 to 2.0.11, a carefully crafted PDF file can trigger an extremely long running computation when parsing the page tree...

5.5CVSS5.9AI score0.04024EPSS
Exploits0References1
UbuntuCve
UbuntuCve
added 2018/10/05 8:29 p.m.29 views

CVE-2018-11797

In Apache PDFBox 1.8.0 to 1.8.15 and 2.0.0RC1 to 2.0.11, a carefully crafted PDF file can trigger an extremely long running computation when parsing the page tree...

5.5CVSS6.6AI score0.04024EPSS
Exploits0References2
OSV
OSV
added 2018/10/05 8:29 p.m.2 views

UBUNTU-CVE-2018-11797

In Apache PDFBox 1.8.0 to 1.8.15 and 2.0.0RC1 to 2.0.11, a carefully crafted PDF file can trigger an extremely long running computation when parsing the page tree...

5.5CVSS5.8AI score0.04024EPSS
Exploits0References3
OSV
OSV
added 2018/10/05 8:29 p.m.8 views

CVE-2018-11797

In Apache PDFBox 1.8.0 to 1.8.15 and 2.0.0RC1 to 2.0.11, a carefully crafted PDF file can trigger an extremely long running computation when parsing the page tree...

5.5CVSS5.3AI score
Exploits0References7
CVE
CVE
added 2018/10/05 8:0 p.m.145 views

CVE-2018-11797

CVE-2018-11797 affects Apache PDFBox 1.8.0–1.8.15 and 2.0.0-RC1–2.0.11, where parsing the PDF page tree can trigger an extremely long computation (denial of service). The issue is caused by the page-tree parsing logic; exploitation details are not provided in the documents. Connected sources conf...

5.5CVSS5.5AI score0.04024EPSS
Exploits0References7Affected Software1
Cvelist
Cvelist
added 2018/10/05 8:0 p.m.19 views

CVE-2018-11797

In Apache PDFBox 1.8.0 to 1.8.15 and 2.0.0RC1 to 2.0.11, a carefully crafted PDF file can trigger an extremely long running computation when parsing the page tree...

5.6AI score0.04024EPSS
Exploits0References7
Debian CVE
Debian CVE
added 2018/10/05 8:0 p.m.36 views

CVE-2018-11797

In Apache PDFBox 1.8.0 to 1.8.15 and 2.0.0RC1 to 2.0.11, a carefully crafted PDF file can trigger an extremely long running computation when parsing the page tree...

5.5CVSS5.6AI score0.04024EPSS
Exploits0
Rows per page
Query Builder