evince-cve-2017-1000083

이 저장소에는 README가 없습니다...

document-viewer-link-handler-security-assessment

CVE-2026-46529 - Atril Evince XReader PDFのクリック可能なリンクによるRCE コンサルタント形式のサイバーセキュリティレポート ドキュメントビューアのリンクハンドラリスクに関するプロフェッショナルな脆弱性評価レポート。影響分析、是正措置、緩和戦略を含みます。 📍 レポート概要...

CVE-2022-35497

Trimble의 TM4WEB =22.2.0에서 세션 식별자 보안 구성 오류로 인해, 반사형 크로스 사이트 스크립팅을 통해 유효한 세션 쿠키를 복구할 수 있으며, 이는 외부 문서 뷰어 엔드포인트에 영향을 미칩니다. 구체적으로, 세션 유지에 사용되는 세 가지 쿠키는 UID, rstring 및 PHPSESSIONID이며, 이들 중 어느 것도 JavaScript 실행 벡터로부터 복구를 방지하는 적절한 HttpOnly 플래그가 설정되어 있지 않습니다. 1단계 : 공격자는 반사형 크로스 사이트 스크립팅 취약점 CVE-2022-35499를...

CVE-2022-35497

In Trimble TM4WEB 21.4.0.4 due to security misconfiguration with session identifiers, it is possible to recover valid session cookies via reflected cross-site scripting affecting the external document viewer endpoint...

CVE-2022-35497

Trimble TM4WEB (versions 21.4.0.4 through ≤22.2.0 ) is vulnerable to session cookie theft via a reflected XSS on the external document viewer endpoint. The root cause is that the three session cookies — UID , rstring , and PHPSESSIONID — lack the HttpOnly flag, allowing JavaScript to read them. T...

EUVD-2022-56032

In Trimble TM4WEB 21.4.0.4 due to security misconfiguration with session identifiers, it is possible to recover valid session cookies via reflected cross-site scripting affecting the external document viewer endpoint...

firefox: thunderbird: Mitigation bypass in the PDF Viewer component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Mitigation bypass in the PDF Viewer component...

CVE-2026-17875

Use after free in PDFium in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted PDF file. Chromium security severity: Medium...

CVE-2026-16377

Mitigation bypass in Firefox’s PDF Viewer component (CVE-2026-16377) is confirmed. The vulnerability was fixed in Firefox 153 and Firefox ESR 140.13. According to the sources, the CVSSv3.1 base score is 9.8 (CRITICAL) with network attack vector, low complexity, and no user interaction required, a...

TencentOS Server 3: evince (TSSA-2026:0620)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0620 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

Exploit for CVE-2026-46529

─── CVE-2026-46529 ─── 🏴 AMN SECURITY 🏴 مركز أب...

TencentOS Server 4: evince (TSSA-2026:0539)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0539 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

CVE-2026-46529

Atril Document Viewer is the default document reader of the MATE desktop environment for Linux. A single-click remote code execution vulnerability in versions prior to 1.26.3 and 1.28.4 allows an attacker to achieve arbitrary code execution as the user by tricking them into clicking a link inside...

CVE-2026-46529 PDF /GoToR action argv injection enables single-click RCE via --gtk-module dlopen

Atril Document Viewer is the default document reader of the MATE desktop environment for Linux. A single-click remote code execution vulnerability in versions prior to 1.26.3 and 1.28.4 allows an attacker to achieve arbitrary code execution as the user by tricking them into clicking a link inside...

CVE-2026-46529 PDF /GoToR action argv injection enables single-click RCE via --gtk-module dlopen

Atril Document Viewer is the default document reader of the MATE desktop environment for Linux. A single-click remote code execution vulnerability in versions prior to 1.26.3 and 1.28.4 allows an attacker to achieve arbitrary code execution as the user by tricking them into clicking a link inside...

Adobe Acrobat Reader 资源管理错误漏洞

Adobe Acrobat Reader is a PDF viewer developed by Adobe Inc. in the United States. This software is used for printing, signing, and annotating PDF documents. Versions of Adobe Acrobat Reader such as 24.001.30365, 26.001.21651, and earlier versions have a resource management vulnerability that ste...

Adobe Acrobat Reader 资源管理错误漏洞

Adobe Acrobat Reader is a PDF viewer developed by Adobe Inc. in the United States. This software is used for printing, signing, and annotating PDF documents. Versions of Adobe Acrobat Reader such as 24.001.30365, 26.001.21651, and earlier versions have a resource management vulnerability. This...

The vulnerability of Adobe Reader, a PDF viewer program, and Adobe Acrobat, a PDF editing program, is related to buffer overflow attacks. This allows attackers to execute arbitrary code.

The vulnerability of Adobe Reader, a PDF viewer software, and Adobe Acrobat, a PDF editing program, is related to buffer overflow attacks. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

[SECURITY] [DLA 4596-1] evince security update

Debian LTS Advisory DLA-4596-1 [email protected] https://www.debian.org/lts/security/ Andreas Henriksson May 22, 2026 https://wiki.debian.org/LTS Package : evince Version : 3.38.2-1+deb11u1 CVE ID : CVE-2026-46529 It was discovered that evince, a simple multi-page document viewer, is...

Cross-site Scripting (XSS)

Overview @cyntler/react-doc-viewer is a File viewer for React. Affected versions of this package are vulnerable to Cross-site Scripting XSS in the TXTRenderer component when file content is not sanitized and raw data is explicitly cast as a ReactNode. An attacker can execute arbitrary JavaScript...