Lucene search
+L

106 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/09/09 12:00 a.m.•2 views

CVE-2022-25765: Undefined Security Weakness

The package pdfkit from 0.0.0 are vulnerable to Command Injection where the URL is not properly sanitized...

9.8CVSS8.1AI score0.41568EPSS
SaveExploits12References1
CNNVD
CNNVD
•added 2022/09/09 12:00 a.m.•12 views

Apple PDFKit 安全漏洞

Apple PDFKit is one of Apple's Apple PDF document generation components. A security vulnerability exists in Apple PDFKit, which can be exploited by attackers to execute illegal commands...

9.8CVSS8.3AI score0.41568EPSS
SaveExploits12References10
Snyk
Snyk
•added 2022/06/14 2:12 p.m.•8 views

Command Injection

Overview Affected versions of this package are vulnerable to Command Injection where the URL is not properly sanitized. NOTE: This issue was originally addressed in 0.8.7, but the fix was not complete. A complete fix was released in 0.8.7.2. PoC: An application could be vulnerable if it tries to...

9.8CVSS7.8AI score0.41568EPSS
SaveExploits12References2
Github Security Blog
Github Security Blog
•added 2022/05/05 12:29 a.m.•35 views

PDFKit Improper Input Validation vulnerability

Ruby PDFKit gem prior to 0.5.3 has a Code Execution Vulnerability...

9.8CVSS2.9AI score0.02675EPSS
SaveExploits0References5Affected Software1
OSV
OSV
•added 2022/05/05 12:29 a.m.•55 views

GHSA-39V7-XPQ4-8884 PDFKit Improper Input Validation vulnerability

Ruby PDFKit gem prior to 0.5.3 has a Code Execution Vulnerability...

9.8CVSS9.5AI score0.02675EPSS
SaveExploits0References5
NVD
NVD
•added 2020/02/11 6:15 p.m.•23 views

CVE-2013-1607

Ruby PDFKit gem prior to 0.5.3 has a Code Execution Vulnerability...

9.8CVSS9.5AI score0.02675EPSS
SaveExploits0References2
Prion
Prion
•added 2020/02/11 6:15 p.m.•19 views

Remote code execution

Ruby PDFKit gem prior to 0.5.3 has a Code Execution Vulnerability...

7.5CVSS7.4AI score0.02675EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2020/02/11 5:31 p.m.•33 views

CVE-2013-1607

Ruby PDFKit gem prior to 0.5.3 has a Code Execution Vulnerability...

9.6AI score0.02675EPSS
SaveExploits0References2
CVE
CVE
•added 2020/02/11 5:31 p.m.•71 views

CVE-2013-1607

CVE-2013-1607 affects the Ruby PDFKit gem prior to 0.5.3. The vulnerability arises from improper input validation/handling during PDF generation, allowing potential remote code execution. Affected component: PDFKit Ruby gem; root cause: parameter handling/validation flaw; impact: remote code exec...

9.8CVSS9.4AI score0.02675EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/02/11 12:00 a.m.•2 views

CVE-2013-1607: Improper Input Validation

Ruby PDFKit gem prior to 0.5.3 has a Code Execution Vulnerability...

9.8CVSS8.2AI score0.02675EPSS
SaveExploits0References2
Veracode
Veracode
•added 2019/11/22 10:54 a.m.•12 views

Denial Of Service (DoS) Via Infinite Loop

pdfkit is vulnerable to denial of service attacks. When a single character exceeds the width of a empty line, the line wrapper keeps adding new lines in an infinite loop, leading to an application crash...

2.4AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2019/04/10 12:00 a.m.•29 views

macOS 10.13.x < 10.13.4 Multiple Vulnerabilities

Binary data 700515.prm...

9.8CVSS9AI score0.08523EPSS
SaveExploits5References36
CNVD
CNVD
•added 2018/04/23 12:00 a.m.•13 views

Apple macOS High Sierra PDFKit Security Bypass Vulnerability

Apple macOS High Sierra is the United States Apple Apple company's set of Mac computers developed specifically for the operating system. PDFKit is one of the PDF document generation components. A security vulnerability exists in the PDFKit component in Apple macOS High Sierra versions prior to...

6.5CVSS6.6AI score0.02EPSS
SaveExploits0References1
NVD
NVD
•added 2018/04/03 6:29 a.m.•25 views

CVE-2018-4107

An issue was discovered in certain Apple products. macOS before 10.13.4 is affected. The issue involves the "PDFKit" component. It allows remote attackers to bypass intended restrictions on visiting URLs within a PDF document...

6.5CVSS5.6AI score0.02EPSS
SaveExploits0References3
OSV
OSV
•added 2018/04/03 6:29 a.m.•13 views

CVE-2018-4107

An issue was discovered in certain Apple products. macOS before 10.13.4 is affected. The issue involves the "PDFKit" component. It allows remote attackers to bypass intended restrictions on visiting URLs within a PDF document...

6.5CVSS5.8AI score0.02EPSS
SaveExploits0References3
Prion
Prion
•added 2018/04/03 6:29 a.m.•20 views

Design/Logic Flaw

An issue was discovered in certain Apple products. macOS before 10.13.4 is affected. The issue involves the "PDFKit" component. It allows remote attackers to bypass intended restrictions on visiting URLs within a PDF document...

4.3CVSS5.5AI score0.02EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2018/04/03 6:00 a.m.•32 views

CVE-2018-4107

An issue was discovered in certain Apple products. macOS before 10.13.4 is affected. The issue involves the "PDFKit" component. It allows remote attackers to bypass intended restrictions on visiting URLs within a PDF document...

6.8AI score0.02EPSS
SaveExploits0References3
CVE
CVE
•added 2018/04/03 6:00 a.m.•73 views

CVE-2018-4107

CVE-2018-4107 affects macOS before 10.13.4, specifically the PDFKit component. The issue allows a PDF to bypass restrictions on visiting URLs contained in the document, enabling a remote attacker to direct a user to a malicious website via crafted PDF content. The vulnerability stems from parsing...

6.5CVSS6.5AI score0.02EPSS
SaveExploits0References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/04/03 12:00 a.m.•3 views

CVE-2018-4107: Improper Input Validation

An issue was discovered in certain Apple products. macOS before 10.13.4 is affected. The issue involves the "PDFKit" component. It allows remote attackers to bypass intended restrictions on visiting URLs within a PDF document...

6.5CVSS6.9AI score0.02EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2018/04/02 12:00 a.m.•109 views

macOS 10.13.x < 10.13.4 Multiple Vulnerabilities

The remote host is running a version of macOS / Mac OS X that is 10.13.x prior to 10.13.4. It is, therefore, affected by multiple vulnerabilities in the following components : - Admin Framework - APFS - ATS - CoreFoundation - CoreText - Disk Images - Disk Management - File System Events - iCloud...

10CVSS7.8AI score0.04682EPSS
SaveExploits6References43
Rows per page
Query Builder