Lucene search
+L

70 matches found

Fedora
Fedora
added 2022/10/11 11:33 a.m.39 views

[SECURITY] Fedora 36 Update: rubygem-pdfkit-0.8.7-1.fc36

Create PDFs using plain old HTML+CSS. Uses wkhtmltopdf on the back-end which renders HTML using Webkit...

9.8CVSS1.3AI score0.39389EPSS
SaveExploits11
Fedora
Fedora
added 2022/10/11 11:13 a.m.56 views

[SECURITY] Fedora 35 Update: rubygem-pdfkit-0.8.7-1.fc35

Create PDFs using plain old HTML+CSS. Uses wkhtmltopdf on the back-end which renders HTML using Webkit...

9.8CVSS1.3AI score0.39389EPSS
SaveExploits11
NVD
NVD
added 2022/08/22 4:15 p.m.17 views

CVE-2022-35583

wkhtmlTOpdf 0.12.6 is vulnerable to SSRF which allows an attacker to get initial access into the target's system by injecting iframe tag with initial asset IP address on it's source. This allows the attacker to takeover the whole infrastructure by accessing their internal assets...

9.8CVSS0.11276EPSS
SaveExploits5References4
OSV
OSV
added 2022/08/22 4:15 p.m.5 views

DEBIAN-CVE-2022-35583

wkhtmlTOpdf 0.12.6 is vulnerable to SSRF which allows an attacker to get initial access into the target's system by injecting iframe tag with initial asset IP address on it's source. This allows the attacker to takeover the whole infrastructure by accessing their internal assets...

9.8CVSS8.5AI score0.11276EPSS
SaveExploits5References1
ATTACKERKB
ATTACKERKB
added 2022/08/22 4:15 p.m.2 views

CVE-2022-35583

wkhtmlTOpdf 0.12.6 is vulnerable to SSRF which allows an attacker to get initial access into the target's system by injecting iframe tag with initial asset IP address on it's source. This allows the attacker to takeover the whole infrastructure by accessing their internal assets...

9.8CVSS7.3AI score0.11276EPSS
SaveExploits5References5
Prion
Prion
added 2022/08/22 4:15 p.m.18 views

Server side request forgery (ssrf)

wkhtmlTOpdf 0.12.6 is vulnerable to SSRF which allows an attacker to get initial access into the target's system by injecting iframe tag with initial asset IP address on it's source. This allows the attacker to takeover the whole infrastructure by accessing their internal assets...

7.5CVSS9.3AI score0.11276EPSS
SaveExploits5References4Affected Software1
OSV
OSV
added 2022/08/22 4:15 p.m.21 views

UBUNTU-CVE-2022-35583

wkhtmlTOpdf 0.12.6 is vulnerable to SSRF which allows an attacker to get initial access into the target's system by injecting iframe tag with initial asset IP address on it's source. This allows the attacker to takeover the whole infrastructure by accessing their internal assets...

9.8CVSS5.8AI score0.11276EPSS
SaveExploits5References4
CVE
CVE
added 2022/08/22 12:0 a.m.201 views

CVE-2022-35583

The CVE-2022-35583 entry pertains to wkhtmltopdf 0.12.6, which is vulnerable to Server-Side Request Forgery (SSRF) via crafted iframe injection. The connected exploit document provides a Pandoc-based SSRF PoC claiming it can compromise the infrastructure by injecting an iframe, indicating practic...

9.8CVSS9.3AI score0.11276EPSS
SaveIn wildExploits5References4Affected Software1
Cvelist
Cvelist
added 2022/08/22 12:0 a.m.31 views

CVE-2022-35583

wkhtmlTOpdf 0.12.6 is vulnerable to SSRF which allows an attacker to get initial access into the target's system by injecting iframe tag with initial asset IP address on it's source. This allows the attacker to takeover the whole infrastructure by accessing their internal assets...

9.6AI score0.11276EPSS
SaveExploits5References4
CNNVD
CNNVD
added 2022/08/22 12:0 a.m.9 views

wkhtmltopdf 代码问题漏洞

wkhtmltopdf is wkhtmltopdf open source a library . Used to convert HTML to PDF. A code issue vulnerability exists in wkhtmltopdf version 0.12.6, which stems from the fact that it allows an attacker to gain initial access to a target system by injecting an iframe tag with the IP address of the...

9.8CVSS8.2AI score0.11276EPSS
SaveExploits5References6
OSV
OSV
added 2022/08/22 12:0 a.m.17 views

CVE-2022-35583

wkhtmlTOpdf 0.12.6 is vulnerable to SSRF which allows an attacker to get initial access into the target's system by injecting iframe tag with initial asset IP address on it's source. This allows the attacker to takeover the whole infrastructure by accessing their internal assets...

9.8CVSS6.6AI score0.11276EPSS
SaveExploits5References6
Debian CVE
Debian CVE
added 2022/08/22 12:0 a.m.124 views

CVE-2022-35583

wkhtmlTOpdf 0.12.6 is vulnerable to SSRF which allows an attacker to get initial access into the target's system by injecting iframe tag with initial asset IP address on it's source. This allows the attacker to takeover the whole infrastructure by accessing their internal assets...

9.8CVSS8.9AI score0.11276EPSS
SaveExploits5
OSV
OSV
added 2022/08/15 8:15 p.m.1 views

DEBIAN-CVE-2020-21365

Directory traversal vulnerability in wkhtmltopdf through 0.12.5 allows remote attackers to read local files and disclose sensitive information via a crafted html file running with the default configurations...

7.5CVSS7.2AI score0.01712EPSS
SaveExploits1References1
OSV
OSV
added 2022/08/15 8:15 p.m.30 views

CVE-2020-21365

Directory traversal vulnerability in wkhtmltopdf through 0.12.5 allows remote attackers to read local files and disclose sensitive information via a crafted html file running with the default configurations...

7.5CVSS6.1AI score
SaveExploits0References2
NVD
NVD
added 2022/08/15 8:15 p.m.16 views

CVE-2020-21365

Directory traversal vulnerability in wkhtmltopdf through 0.12.5 allows remote attackers to read local files and disclose sensitive information via a crafted html file running with the default configurations...

7.5CVSS0.01712EPSS
SaveExploits1References2
Prion
Prion
added 2022/08/15 8:15 p.m.15 views

Directory traversal

Directory traversal vulnerability in wkhtmltopdf through 0.12.5 allows remote attackers to read local files and disclose sensitive information via a crafted html file running with the default configurations...

5CVSS7.1AI score0.01712EPSS
SaveExploits1References2Affected Software2
UbuntuCve
UbuntuCve
added 2022/08/15 8:15 p.m.32 views

CVE-2020-21365

Directory traversal vulnerability in wkhtmltopdf through 0.12.5 allows remote attackers to read local files and disclose sensitive information via a crafted html file running with the default configurations...

7.5CVSS7AI score0.01712EPSS
SaveExploits1References4
OSV
OSV
added 2022/08/15 8:15 p.m.5 views

UBUNTU-CVE-2020-21365

Directory traversal vulnerability in wkhtmltopdf through 0.12.5 allows remote attackers to read local files and disclose sensitive information via a crafted html file running with the default configurations...

7.5CVSS7.1AI score0.01712EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2022/08/15 12:0 a.m.6 views

wkhtmltopdf 路径遍历漏洞

wkhtmltopdf is wkhtmltopdf open source a library . Used to convert HTML to PDF. A security vulnerability exists in wkhtmltopdf version 0.12.5 and earlier versions. Remote attackers use this vulnerability to read local files and leak sensitive information through specially crafted html files...

7.5CVSS7.2AI score0.01712EPSS
SaveExploits1References6
Cvelist
Cvelist
added 2022/08/15 12:0 a.m.32 views

CVE-2020-21365

Directory traversal vulnerability in wkhtmltopdf through 0.12.5 allows remote attackers to read local files and disclose sensitive information via a crafted html file running with the default configurations...

7AI score0.01712EPSS
SaveExploits1References2
Rows per page
Query Builder