EUVD-2022-6252

Malicious code in bioql PyPI...

Improper Restriction of XML External Entity Reference in dompdf/dompdf

An improper restriction of external entities XXE vulnerability in dompdf/dompdf's SVG parser allows for Server-Side Request Forgery SSRF and deserialization attacks. This issue affects all versions prior to 2.0.0. The vulnerability can be exploited even if the isRemoteEnabled option is set to...

CVE-2014-5012

DOMPDF before 0.6.2 allows denial of service...

Arbitrary file read in dompdf

More info at https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-2383/...

CVE-2010-4879

PHP remote file inclusion vulnerability in dompdf.php in dompdf 0.6.0 beta1 allows remote attackers to execute arbitrary PHP code via a URL in the inputfile parameter...