Lucene search
+L

15 matches found

Tenable Nessus
Tenable Nessus
added 2025/08/06 12:0 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2021-29421

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - models/metadata.py in the pikepdf package 1.3.0 through 2.9.2 for Python allows XXE when parsing XMP metadata entries. CVE-2021-29421 Note that Nessus relies on...

7.5CVSS7AI score0.01713EPSS
Exploits0References2
OSV
OSV
added 2022/10/24 7:0 p.m.3 views

GHSA-X58J-J539-W8MV Duplicate Advisory: Improper Restriction of XML External Entity Reference in pikepdf

REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-29421, GHSA-ccgm-3xw4-h5p8. Reason: This candidate is a duplicate of CVE-2021-29421. Notes: All CVE users should reference CVE-2021-29421 instead of this candidate. All references and descriptions in this candidate have been removed to...

9.8CVSS7.5AI score
Exploits0References4
Github Security Blog
Github Security Blog
added 2022/10/24 7:0 p.m.23 views

Duplicate Advisory: Improper Restriction of XML External Entity Reference in pikepdf

REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-29421, GHSA-ccgm-3xw4-h5p8. Reason: This candidate is a duplicate of CVE-2021-29421. Notes: All CVE users should reference CVE-2021-29421 instead of this candidate. All references and descriptions in this candidate have been removed to...

6.9AI score
Exploits0References5Affected Software1
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.13 views

Mageia: Security Advisory (MGASA-2021-0268)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.6AI score0.01713EPSS
Exploits0References3
Mageia
Mageia
added 2021/06/18 7:24 p.m.36 views

Updated python-pikepdf packages fix security vulnerability

models/metadata.py in the pikepdf package 1.3.0 through 2.9.2 for Python allows XXE when parsing XMP metadata entries CVE-2021-29421...

7.5CVSS5.5AI score0.01713EPSS
Exploits0References1
OSV
OSV
added 2021/06/18 7:24 p.m.7 views

MGASA-2021-0268 Updated python-pikepdf packages fix security vulnerability

models/metadata.py in the pikepdf package 1.3.0 through 2.9.2 for Python allows XXE when parsing XMP metadata entries CVE-2021-29421...

7.5CVSS7.5AI score0.01713EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2021/04/19 12:0 a.m.33 views

Fedora 33 : python-pikepdf (2021-4bf9909a76)

The remote Fedora 33 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-4bf9909a76 advisory. - models/metadata.py in the pikepdf package 1.3.0 through 2.9.2 for Python allows XXE when parsing XMP metadata entries. CVE-2021-29421 Note that...

7.5CVSS7.3AI score0.01713EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2021/04/19 12:0 a.m.25 views

Fedora 32 : python-pikepdf (2021-d97bc581be)

The remote Fedora 32 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-d97bc581be advisory. - models/metadata.py in the pikepdf package 1.3.0 through 2.9.2 for Python allows XXE when parsing XMP metadata entries. CVE-2021-29421 Note that...

7.5CVSS7.3AI score0.01713EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2021/04/10 12:0 a.m.13 views

Fedora: Security Advisory for python-pikepdf (FEDORA-2021-d97bc581be)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS7.6AI score0.01713EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2021/04/10 12:0 a.m.14 views

Fedora: Security Advisory for python-pikepdf (FEDORA-2021-4bf9909a76)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.5AI score0.01713EPSS
Exploits0References2
NVD
NVD
added 2021/04/01 8:15 p.m.14 views

CVE-2021-29421

models/metadata.py in the pikepdf package 1.3.0 through 2.9.2 for Python allows XXE when parsing XMP metadata entries...

7.5CVSS0.01713EPSS
Exploits0References4
Debian CVE
Debian CVE
added 2021/04/01 12:0 a.m.32 views

CVE-2021-29421

models/metadata.py in the pikepdf package 1.3.0 through 2.9.2 for Python allows XXE when parsing XMP metadata entries...

7.5CVSS7.5AI score0.01713EPSS
Exploits0
Cvelist
Cvelist
added 2021/04/01 12:0 a.m.31 views

CVE-2021-29421

models/metadata.py in the pikepdf package 1.3.0 through 2.9.2 for Python allows XXE when parsing XMP metadata entries...

7.7AI score0.01713EPSS
Exploits0References4
CVE
CVE
added 2021/04/01 12:0 a.m.149 views

CVE-2021-29421

CVE-2021-29421 affects the Python library pikepdf (models/metadata.py) from 1.3.0 through 2.9.2, due to XXE when parsing XMP metadata entries. The issue is documented across multiple sources; a fix is available in pikepdf 2.10.0 and later. Upgrading to >= 2.10.0 is the recommended remediation....

7.5CVSS7.3AI score0.01713EPSS
Exploits0References4Affected Software1
AlpineLinux
AlpineLinux
added 2021/04/01 12:0 a.m.41 views

CVE-2021-29421

models/metadata.py in the pikepdf package 1.3.0 through 2.9.2 for Python allows XXE when parsing XMP metadata entries...

7.5CVSS7.5AI score0.01713EPSS
Exploits0
Rows per page
Query Builder