Lucene search
+L

490 matches found

CNVD
CNVD
added 2022/05/27 12:0 a.m.37 views

Apache Tika Denial of Service Vulnerability (CNVD-2022-73491)

Apache Tika is a collection of content extraction tools from the Apache Foundation that integrates POI an open source library that uses Java programs to provide read and write functionality for Microsoft Office format documents, Pdfbox a pure Java class library for reading and creating PDF...

4.3CVSS3AI score0.02524EPSS
SaveExploits0Affected Software2
RedhatCVE
RedhatCVE
added 2022/05/20 11:59 p.m.34 views

CVE-2020-1951

A carefully crafted or corrupt PSD file can cause an infinite loop in Apache Tika's PSDParser in versions 1.0-1.23...

5.5CVSS2.8AI score0.02834EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/05/18 12:0 a.m.20 views

Apache Tika Denial of Service Vulnerability (CNVD-2022-41633)

Apache Tika is a collection of content extraction tools from the Apache Foundation that integrates POI an open source library that uses Java programs to provide read and write functionality for Microsoft Office format documents, Pdfbox a pure Java class library for reading and creating PDF...

5.5CVSS3.1AI score0.0205EPSS
SaveExploits0References1
Veracode
Veracode
added 2022/05/17 7:13 a.m.31 views

Denial Of Service (DoS)

Apache Tika core is vulnerable to service attacks. A malicious user is able to cause denial of service conditions due to a regular expression in our StandardsText class by backtracking on a specially crafted file. This only affects users who are running the StandardsExtractingContentHandler...

5.5CVSS5.3AI score0.02524EPSS
SaveExploits0References7Affected Software1
vulnersOsv
vulnersOsv
added 2022/05/17 12:0 a.m.7 views

ai.konduit.serving:konduit-serving-cli (=0.1.0), ai.konduit.serving:konduit-serving-distro-bom (=0.1.0) +1594 more potentially affected by CVE-2022-30126 via org.apache.tika:tika-core (>=1.17 <=1.28.1)

org.apache.tika:tika-core MAVEN version =1.17, =4.1.3, =3.1.1, =4.1.2, =4.1.2, =4.1.2, =4.1.2, =4.2.7, =4.1.2, =4.1.2, =4.1.2, =4.1.2, =4.1.2, =4.4.0-beta.7 and more Source cves: CVE-2022-30126 Source advisory: OSV:GHSA-RPJM-422R-95MH...

5.5CVSS6.1AI score0.02524EPSS
SaveExploits0
vulnersOsv
vulnersOsv
added 2022/05/17 12:0 a.m.5 views

be.ugent.idlab.knows:dataio (>=1.2.0 <=1.3.0), be.zvz:KotlinInside (>=1.14.1 <=1.14.2) +326 more potentially affected by CVE-2022-30126 via org.apache.tika:tika-core (>=2.0.0 <=2.3.0)

org.apache.tika:tika-core MAVEN version =2.0.0, =1.2.0, =1.14.1, =2.10.0, =2.10.0, =2.10.0, =2.10.0, =1.9.14, =1.9.14, =21.2.0, =2.2, =2.2, =2.2, =2.2, =2.2, =2.2, =2.4 and more Source cves: CVE-2022-30126 Source advisory: OSV:GHSA-RPJM-422R-95MH...

5.5CVSS6.3AI score0.02524EPSS
SaveExploits0
Github Security Blog
Github Security Blog
added 2022/05/17 12:0 a.m.34 views

Regular expression denial of service in apache tika

In Apache Tika, a regular expression in our StandardsText class, used by the StandardsExtractingContentHandler could lead to a denial of service caused by backtracking on a specially crafted file. This only affects users who are running the StandardsExtractingContentHandler, which is a non-standa...

5.5CVSS5.4AI score0.02524EPSS
SaveExploits0References12Affected Software1
OSV
OSV
added 2022/05/17 12:0 a.m.4 views

GHSA-RPJM-422R-95MH Regular expression denial of service in apache tika

In Apache Tika, a regular expression in our StandardsText class, used by the StandardsExtractingContentHandler could lead to a denial of service caused by backtracking on a specially crafted file. This only affects users who are running the StandardsExtractingContentHandler, which is a non-standa...

5.5CVSS6.4AI score0.02524EPSS
SaveExploits0References12
Github Security Blog
Github Security Blog
added 2022/05/17 12:0 a.m.37 views

Apache Tika vulnerable to uncontrolled memory consumption

The BPG parser in versions of Apache Tika before 1.28.2 and 2.4.0 may allocate an unreasonable amount of memory on carefully crafted files...

5.5CVSS3.5AI score0.0205EPSS
SaveExploits0References6Affected Software1
OSV
OSV
added 2022/05/17 12:0 a.m.50 views

GHSA-7QCQ-XP2F-56F6 Apache Tika vulnerable to uncontrolled memory consumption

The BPG parser in versions of Apache Tika before 1.28.2 and 2.4.0 may allocate an unreasonable amount of memory on carefully crafted files...

5.5CVSS5.6AI score0.0205EPSS
SaveExploits0References6
OpenVAS
OpenVAS
added 2022/05/17 12:0 a.m.30 views

Apache Tika < 1.28.2, 2.x < 2.4.0 Multiple Vulnerabilities

Apache Tika is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apache:tika"; ifdescription...

5.5CVSS5.2AI score0.02524EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2022/05/16 5:15 p.m.3 views

CVE-2022-30126

In Apache Tika, a regular expression in our StandardsText class, used by the StandardsExtractingContentHandler could lead to a denial of service caused by backtracking on a specially crafted file. This only affects users who are running the StandardsExtractingContentHandler, which is a non-standa...

5.5CVSS6.3AI score0.02524EPSS
SaveExploits0References7
NVD
NVD
added 2022/05/16 5:15 p.m.16 views

CVE-2022-30126

In Apache Tika, a regular expression in our StandardsText class, used by the StandardsExtractingContentHandler could lead to a denial of service caused by backtracking on a specially crafted file. This only affects users who are running the StandardsExtractingContentHandler, which is a non-standa...

5.5CVSS0.02524EPSS
SaveExploits0References6
OSV
OSV
added 2022/05/16 5:15 p.m.4 views

DEBIAN-CVE-2022-30126

In Apache Tika, a regular expression in our StandardsText class, used by the StandardsExtractingContentHandler could lead to a denial of service caused by backtracking on a specially crafted file. This only affects users who are running the StandardsExtractingContentHandler, which is a non-standa...

5.5CVSS5.8AI score0.02524EPSS
SaveExploits0References1
OSV
OSV
added 2022/05/16 5:15 p.m.1 views

DEBIAN-CVE-2022-25169

The BPG parser in versions of Apache Tika before 1.28.2 and 2.4.0 may allocate an unreasonable amount of memory on carefully crafted files...

5.5CVSS6.6AI score0.0205EPSS
SaveExploits0References1
Prion
Prion
added 2022/05/16 5:15 p.m.26 views

Code injection

In Apache Tika, a regular expression in our StandardsText class, used by the StandardsExtractingContentHandler could lead to a denial of service caused by backtracking on a specially crafted file. This only affects users who are running the StandardsExtractingContentHandler, which is a non-standa...

4.3CVSS4.4AI score0.02524EPSS
SaveExploits0References6Affected Software2
Prion
Prion
added 2022/05/16 5:15 p.m.30 views

Memory corruption

The BPG parser in versions of Apache Tika before 1.28.2 and 2.4.0 may allocate an unreasonable amount of memory on carefully crafted files...

4.3CVSS5.5AI score0.0205EPSS
SaveExploits0References4Affected Software2
ATTACKERKB
ATTACKERKB
added 2022/05/16 5:15 p.m.13 views

CVE-2022-25169

The BPG parser in versions of Apache Tika before 1.28.2 and 2.4.0 may allocate an unreasonable amount of memory on carefully crafted files...

5.5CVSS6.7AI score0.0205EPSS
SaveExploits0References5
OSV
OSV
added 2022/05/16 5:15 p.m.4 views

UBUNTU-CVE-2022-30126

In Apache Tika, a regular expression in our StandardsText class, used by the StandardsExtractingContentHandler could lead to a denial of service caused by backtracking on a specially crafted file. This only affects users who are running the StandardsExtractingContentHandler, which is a non-standa...

5.5CVSS6.8AI score0.02524EPSS
SaveExploits0References4
OSV
OSV
added 2022/05/16 5:15 p.m.4 views

UBUNTU-CVE-2022-25169

The BPG parser in versions of Apache Tika before 1.28.2 and 2.4.0 may allocate an unreasonable amount of memory on carefully crafted files...

5.5CVSS6.4AI score0.0205EPSS
SaveExploits0References3
Rows per page
Query Builder