35287 matches found
PT-2025-29548 · Unknown · Pdftools.Exe +2
Name of the Vulnerable Software and Affected Versions: PDF Shaper versions 3.5 and 3.6 Description: A buffer overflow exists when converting a crafted PDF file to an image using the 'Convert PDF to Image' functionality. An attacker can exploit this by tricking a user into opening a malicious PDF...
Burnaware PDF Shaper security vulnerability
Burnaware PDF Shaper is a PDF processing software from Burnaware, Inc. A security vulnerability exists in Burnaware PDF Shaper version 3.5 and 3.6, which originates from improper boundary checking when converting PDF files and may result in a buffer overflow...
GhostPDL PDF Ferror DoS
The vulnerability of the pdfferror function devices/vector/gdevpdf.c in the GhostPDL framework is related to pointer manipulation. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...
Metasploit Weekly Wrap-Up 06/17/2025
New Modules & Adapters, and Improvements! This week’s release brings new modules, additional adapter payloads and improvements to existing modules and features. These modules target software such as ThinManager, Remote for Mac, Roundcube and more. It also includes additional work from bcoles that...
DEBIAN-CVE-2025-7462
A vulnerability was found in Artifex GhostPDL up to 3989415a5b8e99b9d1b87cc9902bde9b7cdea145. It has been classified as problematic. This affects the function pdfferror of the file devices/vector/gdevpdf.c of the component New Output File Open Error Handler. The manipulation leads to null pointer...
UBUNTU-CVE-2025-51591
A Server-Side Request Forgery SSRF in JGM Pandoc v3.6.4 allows attackers to gain access to and compromise the whole infrastructure via injecting a crafted iframe. Note: Some users have stated that Pandoc by default can retrieve and parse untrusted HTML content which can enable SSRF vulnerabilitie...
OESA-2025-1763 clamav security update
Clam AntiVirus is an anti-virus toolkit for UNIX. The main purpose of this software is the integration with mail servers attachment scanning. The package provides a flexible and scalable multi-threaded daemon, a command line scanner, and a tool for automatic updating via Internet. The programs ar...
Unspecified Vulnerability in Huawei HarmonyOS (CNVD-2025-15505)
Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in Huawei HarmonyOS versions 5.0.1 and 5.1.0, which stems from a null pointer dereference in the PDF Preview module, and can ...
Huawei HarmonyOS PDF preview module null pointer dereference vulnerability
Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A null pointer dereference vulnerability exists in the Huawei HarmonyOS PDF preview module, which can be exploited by an attacker to cause a functional...
Unspecified Vulnerability in Huawei HarmonyOS (CNVD-2025-15506)
Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in Huawei HarmonyOS versions 5.0.1 and 5.1.0, which stems from a null pointer dereference in the PDF Preview module, and can ...
Unspecified Vulnerability in Huawei HarmonyOS (CNVD-2025-15509)
Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in Huawei HarmonyOS versions 5.0.1 and 5.1.0, which stems from a null pointer dereference in the PDF Preview module, and can ...
Unspecified vulnerability in Huawei HarmonyOS (CNVD-2025-15519)
Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in Huawei HarmonyOS versions 5.0.1 and 5.1.0, which stems from a null pointer dereference in the PDF Preview module, and can ...
Unspecified vulnerability in Huawei HarmonyOS (CNVD-2025-15513)
Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in Huawei HarmonyOS versions 5.0.1 and 5.1.0, which stems from a null pointer dereference in the PDF Preview module, and can ...
CVE-2025-53626 pdfme has Sandbox Escape and Prototype Pollution vulnerabilities in pdfme expression evaluation
pdfme is a TypeScript-based PDF generator and React-based UI. The expression evaluation feature in pdfme 5.2.0 to 5.4.0 contains critical vulnerabilities allowing sandbox escape leading to XSS and prototype pollution attacks. This vulnerability is fixed in 5.4.1...
CVE-2025-53626
CVE-2025-53626 affects pdfme (TypeScript/React) and its expression evaluation feature. Reported vulnerabilities in versions 5.2.0–5.4.0 allow sandbox escape enabling XSS and prototype pollution. The issues are mitigated in version 5.4.1. By exploiting the expression evaluator, an attacker could b...
CVE-2025-53626 pdfme has Sandbox Escape and Prototype Pollution vulnerabilities in pdfme expression evaluation
pdfme is a TypeScript-based PDF generator and React-based UI. The expression evaluation feature in pdfme 5.2.0 to 5.4.0 contains critical vulnerabilities allowing sandbox escape leading to XSS and prototype pollution attacks. This vulnerability is fixed in 5.4.1...
Amazon Linux 2023 : clamav1.4, clamav1.4-data, clamav1.4-devel (ALAS2023-2025-1081)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-1081 advisory. A vulnerability in Universal Disk Format UDF processing of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device.This...
Important: clamav1.4
Issue Overview: A vulnerability in Universal Disk Format UDF processing of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to a memory overread during UDF file scanning. An attacker could exploit th...
