Lucene search
K

9 matches found

RedhatCVE
RedhatCVE
added 2025/11/18 12:11 a.m.9 views

CVE-2025-63918

PDFPatcher executable does not validate user-supplied file paths, allowing directory traversal attacks allowing attackers to upload arbitrary files to arbitrary locations...

6.2CVSS7.2AI score0.00182EPSS
Exploits1References1
EUVD
EUVD
added 2025/11/17 6:30 p.m.2 views

EUVD-2025-197809

PDFPatcher executable does not validate user-supplied file paths, allowing directory traversal attacks allowing attackers to upload arbitrary files to arbitrary locations...

6.7AI score0.00182EPSS
Exploits1References4
OSV
OSV
added 2025/11/17 5:15 p.m.0 views

CVE-2025-63918

PDFPatcher executable does not validate user-supplied file paths, allowing directory traversal attacks allowing attackers to upload arbitrary files to arbitrary locations...

6.2CVSS5.9AI score
Exploits0References3
NVD
NVD
added 2025/11/17 5:15 p.m.1 views

CVE-2025-63917

PDFPatcher thru 1.1.3.4663 executable's XML bookmark import functionality does not restrict XML external entity XXE references. The application uses .NET's XmlDocument class without disabling external entity resolution, enabling attackers to: Read arbitrary files from the victim's filesystem,...

7.1CVSS0.00084EPSS
Exploits1References3
CNNVD
CNNVD
added 2025/11/17 12:0 a.m.2 views

PDFPatcher 安全漏洞

PDFPatcher is a PDF toolkit for WMJ individual developers. A security vulnerability exists in PDFPatcher 1.1.3.4663 and earlier versions, which stems from an under-restricted XML external entity reference, and could lead to arbitrary file reading or SSRF attacks...

7.1CVSS6.8AI score0.00084EPSS
Exploits1References4
CNNVD
CNNVD
added 2025/11/17 12:0 a.m.4 views

PDFPatcher 安全漏洞

PDFPatcher is a PDF toolkit for WMJ individual developers. A security vulnerability exists in PDFPatcher that stems from insufficient file path validation and could lead to a directory traversal attack...

6.2CVSS6.7AI score0.00182EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2025/11/17 12:0 a.m.6 views

PT-2025-47168

Name of the Vulnerable Software and Affected Versions PDFPatcher affected versions not specified Description The PDFPatcher executable does not properly validate user-supplied file paths, which can lead to directory traversal attacks. This allows attackers to upload arbitrary files to arbitrary...

6.7AI score0.00182EPSS
Exploits1References6
Positive Technologies
Positive Technologies
added 2025/11/17 12:0 a.m.10 views

PT-2025-47167

Name of the Vulnerable Software and Affected Versions PDFPatcher versions through 1.1.3.4663 Description The software does not properly restrict XML external entity XXE references in its XML bookmark import functionality. The application utilizes .NET’s XmlDocument class without disabling externa...

7.1CVSS6.7AI score0.00084EPSS
Exploits1References6
CVE
CVE
added 2025/11/17 12:0 a.m.10 views

CVE-2025-63917

PDFPatcher

7.1CVSS6.7AI score0.00084EPSS
Exploits1References3Affected Software1
Rows per page
Query Builder