Lucene search
+L

1023 matches found

OSV
OSV
added 2018/11/26 2:29 a.m.24 views

CVE-2018-19532

A NULL pointer dereference vulnerability exists in the function PdfTranslator::setTarget in pdftranslator.cpp of PoDoFo 0.9.6, while creating the PdfXObject, as demonstrated by podofoimpose. It allows an attacker to cause Denial of Service...

8.8CVSS6.5AI score
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2018/11/26 2:29 a.m.4 views

CVE-2018-19532

A NULL pointer dereference vulnerability exists in the function PdfTranslator::setTarget in pdftranslator.cpp of PoDoFo 0.9.6, while creating the PdfXObject, as demonstrated by podofoimpose. It allows an attacker to cause Denial of Service...

8.8CVSS5.5AI score0.01666EPSS
SaveExploits1References5
Snyk
Snyk
added 2018/11/26 2:29 a.m.2 views

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference. A NULL pointer dereference vulnerability exists in the function PdfTranslator::setTarget in pdftranslator.cpp of PoDoFo 0.9.6, while creating the PdfXObject, as demonstrated by podofoimpose. It allows an attack...

8.8CVSS6.9AI score0.01666EPSS
SaveExploits1References2
Prion
Prion
added 2018/11/26 2:29 a.m.16 views

Null pointer dereference

A NULL pointer dereference vulnerability exists in the function PdfTranslator::setTarget in pdftranslator.cpp of PoDoFo 0.9.6, while creating the PdfXObject, as demonstrated by podofoimpose. It allows an attacker to cause Denial of Service...

6.8CVSS8.3AI score0.01666EPSS
SaveExploits1References2Affected Software1
OSV
OSV
added 2018/11/26 2:29 a.m.2 views

DEBIAN-CVE-2018-19532

A NULL pointer dereference vulnerability exists in the function PdfTranslator::setTarget in pdftranslator.cpp of PoDoFo 0.9.6, while creating the PdfXObject, as demonstrated by podofoimpose. It allows an attacker to cause Denial of Service...

8.8CVSS6.3AI score0.01666EPSS
SaveExploits1References1
CVE
CVE
added 2018/11/26 2:0 a.m.85 views

CVE-2018-19532

PoDoFo 0.9.6 is affected by a NULL pointer dereference in PdfTranslator::setTarget() when creating PdfXObject (CVE-2018-19532). Exploitation leads to Denial of Service. Upstream fix exists in PoDoFo 0.9.7; affected systems should upgrade to 0.9.7 or apply vendor patches. Connected advisories (Arc...

8.8CVSS8.2AI score0.01666EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2018/11/26 2:0 a.m.28 views

CVE-2018-19532

A NULL pointer dereference vulnerability exists in the function PdfTranslator::setTarget in pdftranslator.cpp of PoDoFo 0.9.6, while creating the PdfXObject, as demonstrated by podofoimpose. It allows an attacker to cause Denial of Service...

8.4AI score0.01666EPSS
SaveExploits1References2
AlpineLinux
AlpineLinux
added 2018/11/26 2:0 a.m.71 views

CVE-2018-19532

A NULL pointer dereference vulnerability exists in the function PdfTranslator::setTarget in pdftranslator.cpp of PoDoFo 0.9.6, while creating the PdfXObject, as demonstrated by podofoimpose. It allows an attacker to cause Denial of Service...

8.8CVSS8.5AI score0.01666EPSS
SaveExploits1
Debian CVE
Debian CVE
added 2018/11/26 2:0 a.m.40 views

CVE-2018-19532

A NULL pointer dereference vulnerability exists in the function PdfTranslator::setTarget in pdftranslator.cpp of PoDoFo 0.9.6, while creating the PdfXObject, as demonstrated by podofoimpose. It allows an attacker to cause Denial of Service...

8.8CVSS8.5AI score0.01666EPSS
SaveExploits1
CNVD
CNVD
added 2018/09/19 12:0 a.m.28 views

PoDoFo Information Disclosure Vulnerability

PoDoFo is an open source , written in C++ using the PDF file format library . PoDoFo in the 'PdfEncoding::ParseToUnicode ' function there is an information leakage vulnerability , the vulnerability stems from the program fails to correctly validate the data submitted by the user , an attacker can...

6.5CVSS7.2AI score0.02359EPSS
SaveExploits0References1
OSV
OSV
added 2018/09/17 6:29 p.m.4 views

DEBIAN-CVE-2018-14320

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of PoDoFo. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

6.5CVSS6.3AI score0.02359EPSS
SaveExploits0References1
NVD
NVD
added 2018/09/17 6:29 p.m.15 views

CVE-2018-14320

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of PoDoFo. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

6.5CVSS6.3AI score0.02359EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2018/09/17 6:29 p.m.22 views

CVE-2018-14320

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of PoDoFo. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

6.5CVSS6.5AI score0.02359EPSS
SaveExploits0References2
Prion
Prion
added 2018/09/17 6:29 p.m.23 views

Memory corruption

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of PoDoFo. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

4.3CVSS6.6AI score0.02359EPSS
SaveExploits0References1
OSV
OSV
added 2018/09/17 6:29 p.m.5 views

UBUNTU-CVE-2018-14320

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of PoDoFo. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

6.5CVSS5.9AI score0.02359EPSS
SaveExploits0References3
OSV
OSV
added 2018/09/17 6:29 p.m.6 views

CVE-2018-14320

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of PoDoFo. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

6.5CVSS8.4AI score
SaveExploits0References1
Cvelist
Cvelist
added 2018/09/17 6:0 p.m.29 views

CVE-2018-14320

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of PoDoFo. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

7.3AI score0.02359EPSS
SaveExploits0References1
CVE
CVE
added 2018/09/17 6:0 p.m.73 views

CVE-2018-14320

PoDoFo 0.9.6 is vulnerable to CVE-2018-14320 through PdfEncoding::ParseToUnicode due to improper validation, enabling memory corruption that can lead to arbitrary code execution (with user interaction required). The issue can also cause information disclosure and denial depending on exploitation ...

6.5CVSS7.3AI score0.02359EPSS
SaveExploits0References1Affected Software1
Debian CVE
Debian CVE
added 2018/09/17 6:0 p.m.39 views

CVE-2018-14320

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of PoDoFo. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

6.5CVSS7.5AI score0.02359EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2018/09/13 12:0 a.m.31 views

(0Day) PoDoFo Library ParseToUnicode Memory Corruption Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of PoDoFo Library. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

4.3CVSS3.6AI score0.02359EPSS
SaveExploits0
Rows per page
Query Builder