CVE-2020-23876

pdf2xml v2.0 was discovered to contain a memory leak in the function TextPage::testLinkedText...

CVE-2020-23877

pdf2xml v2.0 was discovered to contain a stack buffer overflow in the component getObjectStream...

CVE-2020-23877

CVE-2020-23877 affects pdf2xml/pdftoxml version 2.0, where a stack buffer overflow is exposed in the getObjectStream component. The CVE is documented across multiple sources (NVD entry and CNVD/CNNVD variants) and indicates a high-severity issue (CVSS v2: AV:N/AC:L/Au:N/C:P/I:P/A:P; CVSS v3.1: CR...

CVE-2020-23874

pdf2xml v2.0 was discovered to contain a heap-buffer overflow in the function TextPage::addAttributsNode...

CVE-2020-23872

A NULL pointer dereference in the function TextPage::restoreState of pdf2xml v2.0 allows attackers to cause a denial of service DoS...

CVE-2020-23872

CVE-2020-23872 affects pdf2xml v2.0. The vulnerability is a null pointer dereference in TextPage::restoreState, which can be exploited to cause a denial of service. Connected sources (CNVD/CNVD-derived, Red Hat, OSV, CNVD, CNVD-like feeds) corroborate the same description. There is no detail in t...

CVE-2020-23873

pdf2xml v2.0 was discovered to contain a heap-buffer overflow in the function TextPage::dump...

CVE-2020-23873

CVE-2020-23873 concerns pdf2xml v2.0, which has a reported heap-buffer overflow in the function TextPage::dump() . The vulnerability affects pdf2xml version 2.0 and is described with a CVSS v3.1 base score of 9.8 (CRITICAL) with network attack vector, no privileges required, and no user interacti...

CVE-2021-39416

Multiple Cross Site Scripting XSS vulnerabilities exists in Remote Clinic v2.0 in 1 patients/register-patient.php via the a Contact, b Email, c Weight, d Profession, e refcontact, f address, g gender, h age, and i serial parameters; in 2 patients/edit-patient.php via the a Contact, b Email, c...

Cross site scripting

Multiple Cross Site Scripting XSS vulnerabilities exists in Remote Clinic v2.0 in 1 patients/register-patient.php via the a Contact, b Email, c Weight, d Profession, e refcontact, f address, g gender, h age, and i serial parameters; in 2 patients/edit-patient.php via the a Contact, b Email, c...

CVE-2021-39416

Multiple Cross Site Scripting XSS vulnerabilities exists in Remote Clinic v2.0 in 1 patients/register-patient.php via the a Contact, b Email, c Weight, d Profession, e refcontact, f address, g gender, h age, and i serial parameters; in 2 patients/edit-patient.php via the a Contact, b Email, c...

CVE-2021-39416

CVE-2021-39416 affects Remote Clinic v2.0, with multiple XSS vulnerabilities across several PHP endpoints (patients/register-patient.php, patients/edit-patient.php, staff/edit-my-profile.php, clinics/settings.php) and numerous parameters (e.g., Contact, Email, Address, opening_time, currency, etc...

GHSA-6GJF-7W99-J7X7 Deleted Admin Can Sign In to Admin Interface

Impact Assuming an administrator once had previous access to the admin interface, they may still be able to sign in to the backend using October CMS v2.0. Patches The issue has been patched in v2.1.12 Workarounds - Reset the password of the deleted accounts to prevent them from signing in. - Plea...

Security Bulletin: IBM Planning Analytics Workspace is affected by security vulnerabilities

Summary The Planning Analytics Workspace component of IBM Planning Analytics is affected by vulnerabilities These have been addressed in IBM Planning Analytics Local v2.0 - Planning Analytics Workspace Release 67. Vulnerability Details CVEID: CVE-2021-29853 DESCRIPTION: IBM Planning Analytics cou...

Code injection in topthink/think

A remote code execution RCE vulnerability in /library/think/App.php of Twothink v2.0 allows attackers to execute arbitrary PHP code...

CVE-2020-17952

A remote code execution RCE vulnerability in /library/think/App.php of Twothink v2.0 allows attackers to execute arbitrary PHP code...

Remote code execution

A remote code execution RCE vulnerability in /library/think/App.php of Twothink v2.0 allows attackers to execute arbitrary PHP code...

CVE-2020-17952

A remote code execution RCE vulnerability in /library/think/App.php of Twothink v2.0 allows attackers to execute arbitrary PHP code...

CVE-2020-17952

CVE-2020-17952 describes a remote code execution in Twothink v2.0 due to a vulnerability in the file path /library/think/App.php. The vulnerability allows an attacker to execute arbitrary PHP code on the affected system. The public documentation consistently identifies this as an RCE risk without...

[SECURITY] Fedora 34 Update: pdfbox-2.0.24-1.fc34

Apache PDFBox is an open source Java PDF library for working with PDF documents. This project allows creation of new PDF documents, manipulation of existing documents and the ability to extract content from documents. Apache PDFBox also includes several command line utilities. Apache PDFBox is...