228 matches found
Fedora 41 : perl-YAML-Syck (2025-568b5b6ddc)
The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-568b5b6ddc advisory. This update addresses a flaw in which processing a specially-crafted YAML document could lead to accessing information outside of the document itself and hen...
EUVD-2019-3912
Malware in sbrugna...
EUVD-2021-2261
Malware in sbrugna...
Linux Distros Unpatched Vulnerability : CVE-2025-43718
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Poppler 24.06.1 through 25.x before 25.04.0 allows stack consumption and a SIGSEGV via deeply nested structures within the metadata such as GTSPDFEVersion of a...
EUVD-2022-34719
Malicious code in bioql PyPI...
EUVD-2025-4578
Malicious code in bioql PyPI...
EUVD-2024-48906
Malicious code in bioql PyPI...
EUVD-2025-4662
Malicious code in bioql PyPI...
EUVD-2024-2228
Malicious code in bioql PyPI...
Ghostscript TTF Heap Buffer Overflow DoS
The vulnerability of file pdffmap.c in the TTF component of the software for processing, transforming, and generating Ghostscript documents is related to a numerical overflow condition. Exploiting this vulnerability could allow an attacker to cause a service failure...
MuPDF DoS
The vulnerability of the mutool clean PDF viewer program’s PDF file processing function is related to an infinite recursion. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
Advisory ROSA-SA-2025-2991
software: ghostscript 9.56.1 OS: ROSA-CHROME unaffected versions = ghostscript-9.56.1-7 affected versions ghostscript-9.56.1-7 CVE-ID: CVE-2025-48708 BDU-ID: 2025-06028 CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in the gslibctxctxstashsanitizedarg function of the base/gslibctx.c file of the...
CVE-2025-3933
CVE-2025-3933 (Hugging Face Transformers) A ReDoS vulnerability exists in the DonutProcessor.token2json() implementation where the regex pattern (and a similar pattern in later mention) can cause catastrophic backtracking and high CPU usage. Affected: Transformers versions 4.50.3 and earlier. Im...
Documino Automation Platform SQL Injection
The vulnerability of the Documino automation platform for electronic document processing lies in the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows attackers to execute arbitrary SQL queries...
CVE-2024-8049
In Progress Telerik Document Processing Libraries, versions prior to 2024 Q4 2024.4.1106, importing a document with unsupported features can lead to excessive processing, leading to excessive use of computing resources leaving the application process unavailable...
CVE-2023-24621
An issue was discovered in Esoteric YamlBeans through 1.15. It allows untrusted deserialisation to Java classes by default, where the data and class are controlled by the author of the YAML document being processed...
CVE-2019-12270
OpenText Brava! Enterprise and Brava! Server 7.5 through 16.4 configure excessive permissions by default on Windows. During installation, a displaylistcache file share is created on the Windows server with full read and write permissions for the Everyone group at both the NTFS and Share levels. T...
USN-7361-1 libxslt vulnerability
Ivan Fratric discovered that Libxslt incorrectly handled certain memory operations when handling documents. A remote attacker could use this issue to cause Libxslt to crash, resulting in a denial of service, or possibly execute arbitrary code...