28999 matches found
CVE-2024-52800 Potential XXE (XML External Entity Injection) vulnerability in veraPDF CLI
veraPDF is an open source PDF/A validation library. Executing policy checks using custom schematron files via the CLI invokes an XSL transformation that may theoretically lead to a remote code execution RCE vulnerability. This doesn't affect the standard validation and policy checks functionality...
Foxit PDF Reader Resource Management Error Vulnerability
Foxit PDF Reader is a Chinese Foxit Foxit company's a PDF reader. A resource management error vulnerability exists in Foxit PDF Reader, which stems from the AcroForm feature that contains a reuse-after-release, leading to information disclosure vulnerability. No details of the vulnerability are...
Foxit PDF Reader Buffer Overflow Vulnerability (CNVD-2025-16218)
Foxit PDF Reader is China Foxit Foxit company a PDF reader. A buffer error vulnerability exists in Foxit PDF Reader, which stems from the AcroForm feature that contains an out-of-bounds read, resulting in an information disclosure vulnerability. No details of the vulnerability are provided at thi...
Foxit PDF Editor Elevation of Privilege Vulnerability
Foxit PDF Editor is China Foxit Foxit company a PDF editor. A security vulnerability exists in Foxit PDF Editor, which can be exploited by attackers to cause a local elevation of privilege...
DAAS. PDF Printer generates image files are not editable selectable letters in PDFs with HTML5
Citrix PDF Printer generates image files are not editable / selectable letters in PDFs with 2402 With HTML5 Receiver v22.9.0.26 in DAAS. Users can't copy and paste any character...
CVE-2024-53619
An authenticated arbitrary file upload vulnerability in the Documents module of SPIP v4.3.3 allows attackers to execute arbitrary code via uploading a crafted PDF file...
UBUNTU-CVE-2024-53619
An authenticated arbitrary file upload vulnerability in the Documents module of SPIP v4.3.3 allows attackers to execute arbitrary code via uploading a crafted PDF file...
SUSE-SU-2024:4054-1 Security update for javapackages-tools, xmlgraphics-batik, xmlgraphics-commons, xmlgraphics-fop
This update for javapackages-tools, xmlgraphics-batik, xmlgraphics-commons, xmlgraphics-fop fixes the following issues: xmlgraphics-fop was updated from version 2.8 to 2.10: - Security issues fixed: CVE-2024-28168: Fixed improper restriction of XML External Entity XXE reference bsc1231428 -...
CVE-2024-53619
CVE-2024-53619 concerns an authenticated arbitrary file upload in the Documents module of SPIP v4.3.3 that can lead to arbitrary code execution via a crafted PDF upload. The incident is consistently described across multiple sources as affecting SPIP 4.3.3 with an authenticated file upload path, ...
CVE-2024-53619
An authenticated arbitrary file upload vulnerability in the Documents module of SPIP v4.3.3 allows attackers to execute arbitrary code via uploading a crafted PDF file...
The vulnerability affects the AcroForm component of the PDF viewer software from Foxit PDF Reader (previously Foxit Reader) and the PDF editor software from Foxit PDF Editor (previously Foxit PhantomPDF). This vulnerability allows a malicious individual to execute arbitrary code.
The vulnerability of the AcroForm component in the PDF viewer application, Foxit PDF Reader formerly Foxit Reader, and the PDF editing application, Foxit PDF Editor formerly Foxit PhantomPDF, is related to the use of memory after it is released. Exploiting this vulnerability can allow an attacker...
TCPDF 安全漏洞
TCPDF is an open source library from Tecnick. It is used to generate PDF documents and barcodes. A security vulnerability exists in TCPDF version 6.7.5, which stems from the inclusion of a local file inclusion vulnerability...
CVE-2024-53619
An authenticated arbitrary file upload vulnerability in the Documents module of SPIP v4.3.3 allows attackers to execute arbitrary code via uploading a crafted PDF file...
SUSE: Security Advisory (SUSE-SU-2024:4054-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2024-11361 PDF Invoices & Packing Slips Generator for WooCommerce <= 2.2.1 - Reflected Cross-Site Scripting
The PDF Invoices & Packing Slips Generator for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 2.2.1. This makes it possible for unauthenticated attackers t...
CVE-2024-11361
CVE-2024-11361 affects the WordPress plugin “PDF Invoices & Packing Slips Generator for WooCommerce”. All versions up to and including 2.2.1 are susceptible to a Reflected Cross-Site Scripting vulnerability caused by insufficient escaping when using add_query_arg in the URL. This enables unauthen...
CVE-2024-11361 PDF Invoices & Packing Slips Generator for WooCommerce <= 2.2.1 - Reflected Cross-Site Scripting
The PDF Invoices & Packing Slips Generator for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 2.2.1. This makes it possible for unauthenticated attackers t...
Astra Linux – Vulnerability in GhostScript
A issue was discovered in pdf/pdfxref.c in Artifex Ghostscript prior to version 10.04.0. There is a buffer overflow that occurs during the handling of a PDF XRef stream related to W array values...