Lucene search
+L

557 matches found

osv_cve
osv_cve
•added 2022/10/11 9:15 p.m.•20 views

CVE-2022-41180

Due to lack of proper memory management, when a victim opens a manipulated Portable Document Format .pdf, PDFPublishing.dll file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a...

7.8CVSS5.9AI score0.00391EPSS
SaveExploits0References2
Fedora
Fedora
•added 2022/10/11 11:13 a.m.•62 views

[SECURITY] Fedora 35 Update: rubygem-pdfkit-0.8.7-1.fc35

Create PDFs using plain old HTML+CSS. Uses wkhtmltopdf on the back-end which renders HTML using Webkit...

9.8CVSS1.3AI score0.41568EPSS
SaveExploits12
osv_cve
osv_cve
•added 2022/10/11 12:00 a.m.•23 views

CVE-2022-41387

The d8s-pdfs package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-urls package. The affected version is 0.1.0...

9.8CVSS9.6AI score
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/10/11 12:00 a.m.•3 views

CVE-2022-41387: Unrestricted Upload of File with Dangerous Type

The d8s-pdfs package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-urls package. The affected version is 0.1.0...

9.8CVSS8.2AI score0.01633EPSS
SaveExploits1References3
Mend
Mend
•added 2022/10/11 12:00 a.m.•5 views

CVE-2022-41387

The d8s-pdfs package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-urls package. The affected version is 0.1.0...

9.8CVSS0.01633EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2022/10/11 12:00 a.m.•12 views

CVE-2022-41387

The d8s-pdfs package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-urls package. The affected version is 0.1.0...

9.5AI score0.01633EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2022/10/11 12:00 a.m.•20 views

PT-2022-25704 · Sap · Sap 3D Visual Enterprise Author

Name of the Vulnerable Software and Affected Versions: SAP 3D Visual Enterprise Author version 9 Description: The issue arises due to improper memory management when handling manipulated Portable Document Format .pdf files, specifically through the PDFPublishing.dll. This can cause the applicatio...

5.5CVSS5.3AI score0.00212EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2022/10/11 12:00 a.m.•19 views

PT-2022-25838 · Pypi · D8S-Pdfs +1

Name of the Vulnerable Software and Affected Versions: d8s-pdfs version 0.1.0 Description: The d8s-pdfs package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-urls package. Recommendations: For version...

9.8CVSS9.5AI score0.01633EPSS
SaveExploits1References8
CNNVD
CNNVD
•added 2022/10/11 12:00 a.m.•18 views

Democritus Project 代码问题漏洞

Democritus Project is a collection of simple, effective, modular, fully tested and well-documented features from Democritus. A security vulnerability exists in Democritus Project d8s-pdfs that originates from the distribution of the package containing a potential code execution backdoor inserted ...

9.8CVSS8.8AI score0.01633EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2022/10/07 12:00 a.m.•21 views

PT-2022-26411 · Pdf Xchange · Pdf-Xchange Editor

Name of the Vulnerable Software and Affected Versions: PDF-XChange Editor affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations. User interaction is required, where the target must visit a malicious page or open...

5.5CVSS6.9AI score0.00344EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2022/10/07 12:00 a.m.•19 views

PT-2022-26402 · Pdf Xchange · Pdf-Xchange Editor

Name of the Vulnerable Software and Affected Versions: PDF-XChange Editor affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a...

7.8CVSS7.4AI score0.00386EPSS
SaveExploits0References4
attackerkb
attackerkb
•added 2022/09/19 4:15 p.m.•10 views

CVE-2022-40812

The d8s-pdfs for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-file-system package. The affected version is 0.1.0...

9.8CVSS7.3AI score0.01301EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2022/09/19 4:15 p.m.•13 views

CVE-2022-40431

The d8s-pdfs for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-networking package. The affected version is 0.1.0...

9.8CVSS7.3AI score0.0136EPSS
SaveExploits1References3
osv_pysec
osv_pysec
•added 2022/09/19 4:15 p.m.•14 views

PYSEC-2022-43099

The d8s-pdfs for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-file-system package. The affected version is 0.1.0...

9.8CVSS7.2AI score
SaveExploits0References2
PyPA
PyPA
•added 2022/09/19 4:15 p.m.•16 views

PYSEC-2022-43099

The d8s-pdfs for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-file-system package. The affected version is 0.1.0...

9.8CVSS7AI score0.01301EPSS
SaveExploits0References2Affected Software1
Mend
Mend
•added 2022/09/19 3:13 p.m.•4 views

CVE-2022-40812

The d8s-pdfs for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-file-system package. The affected version is 0.1.0...

9.8CVSS0.01301EPSS
SaveExploits0References4
CVE
CVE
•added 2022/09/19 3:13 p.m.•71 views

CVE-2022-40812

The CVE-2022-40812 entry concerns the PyPI package d8s-pdfs for Python. Affected component: the package as distributed in version 0.1.0, with a backdoor introduced by a third party — the democritus-file-system package — enabling potential code execution. Multiple sources (NVD, Red Hat, Veracode, ...

9.8CVSS9.4AI score0.01301EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2022/09/19 3:11 p.m.•73 views

CVE-2022-40431

The CVE-2022-40431 incident concerns the Python package d8s-pdfs for PyPI, version 0.1.0, which reportedly included a backdoor inserted by a third party via the democritus-networking package. Public sources describe this as a potential code execution vulnerability with a network-based attack surf...

9.8CVSS9.4AI score0.0136EPSS
SaveExploits1References2Affected Software1
Mend
Mend
•added 2022/09/19 3:11 p.m.•6 views

CVE-2022-40431

The d8s-pdfs for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-networking package. The affected version is 0.1.0...

9.8CVSS0.0136EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2022/09/19 12:00 a.m.•16 views

Democritus Project 安全漏洞

Democritus Project is a collection of simple, effective, modular, fully tested and well-documented features from Democritus. A security vulnerability exists in Democritus Project d8s-pdfs version 0.1.0 that originates from a potential code execution backdoor inserted by a third party...

9.8CVSS8.8AI score0.01301EPSS
SaveExploits0References3
Rows per page
Query Builder