Lucene search
+L

392 matches found

RedhatCVE
RedhatCVE
added 2025/05/22 6:1 a.m.4 views

CVE-2014-5013

DOMPDF before 0.6.2 allows remote code execution, a related issue to CVE-2014-2383...

8.8CVSS7.7AI score0.39231EPSS
SaveExploits6References1
RedhatCVE
RedhatCVE
added 2025/05/22 2:3 a.m.4 views

CVE-2014-5011

DOMPDF before 0.6.2 allows Information Disclosure...

6.5CVSS6.8AI score0.01628EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 1:34 a.m.10 views

CVE-2014-5012

DOMPDF before 0.6.2 allows denial of service...

6.5CVSS6.7AI score0.01337EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 1:31 a.m.6 views

CVE-2010-4879

PHP remote file inclusion vulnerability in dompdf.php in dompdf 0.6.0 beta1 allows remote attackers to execute arbitrary PHP code via a URL in the inputfile parameter...

7.5CVSS7.8AI score0.05367EPSS
SaveExploits2References1
Tenable Nessus
Tenable Nessus
added 2025/03/05 12:0 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2021-3838

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - DomPDF before version 2.0.0 is vulnerable to PHAR deserialization due to a lack of checking on the protocol before passing it into the filegetcontents function...

9.8CVSS9.8AI score0.0143EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2025/03/05 12:0 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2023-50262

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Dompdf is an HTML to PDF converter for PHP. When parsing SVG images Dompdf performs an initial validation to ensure that paths within the SVG are allowed. One o...

7.5CVSS7.4AI score0.01463EPSS
SaveExploits1References2
OSV
OSV
added 2024/11/15 12:31 p.m.44 views

GHSA-577P-7J7H-2JGF Deserialization of Untrusted Data in dompdf/dompdf

DomPDF before version 2.0.0 is vulnerable to PHAR PHP Archive deserialization due to a lack of checking on the protocol before passing it into the filegetcontents function. An attacker who can upload files of any type to the server can pass in the phar:// protocol to unserialize the uploaded file...

9.8CVSS9.6AI score0.0143EPSS
SaveExploits1References4
Github Security Blog
Github Security Blog
added 2024/11/15 12:31 p.m.26 views

Deserialization of Untrusted Data in dompdf/dompdf

DomPDF before version 2.0.0 is vulnerable to PHAR PHP Archive deserialization due to a lack of checking on the protocol before passing it into the filegetcontents function. An attacker who can upload files of any type to the server can pass in the phar:// protocol to unserialize the uploaded file...

9.8CVSS7.5AI score0.0143EPSS
SaveExploits1References4Affected Software1
Github Security Blog
Github Security Blog
added 2024/11/15 12:31 p.m.21 views

Improper Restriction of XML External Entity Reference in dompdf/dompdf

An improper restriction of external entities XXE vulnerability in dompdf/dompdf's SVG parser allows for Server-Side Request Forgery SSRF and deserialization attacks. This issue affects all versions prior to 2.0.0. The vulnerability can be exploited even if the isRemoteEnabled option is set to...

9.8CVSS6.8AI score0.00924EPSS
SaveExploits1References4Affected Software1
Snyk
Snyk
added 2024/11/15 11:44 a.m.6 views

Deserialization of Untrusted Data

Overview Affected versions of this package are vulnerable to Deserialization of Untrusted Data through the filegetcontents function. An attacker can execute arbitrary code by uploading a file with a malicious phar:// protocol, leading to the deserialization and instantiation of arbitrary PHP...

9.8CVSS8.2AI score0.0143EPSS
SaveExploits1References2
NVD
NVD
added 2024/11/15 11:15 a.m.22 views

CVE-2021-3902

An improper restriction of external entities XXE vulnerability in dompdf/dompdf's SVG parser allows for Server-Side Request Forgery SSRF and deserialization attacks. This issue affects all versions prior to 2.0.0. The vulnerability can be exploited even if the isRemoteEnabled option is set to...

9.8CVSS0.00924EPSS
SaveExploits1References2
OSV
OSV
added 2024/11/15 11:15 a.m.13 views

DEBIAN-CVE-2021-3902

An improper restriction of external entities XXE vulnerability in dompdf/dompdf's SVG parser allows for Server-Side Request Forgery SSRF and deserialization attacks. This issue affects all versions prior to 2.0.0. The vulnerability can be exploited even if the isRemoteEnabled option is set to...

9.8CVSS8.6AI score0.00924EPSS
SaveExploits1References1
OSV
OSV
added 2024/11/15 11:15 a.m.17 views

CVE-2021-3902

An improper restriction of external entities XXE vulnerability in dompdf/dompdf's SVG parser allows for Server-Side Request Forgery SSRF and deserialization attacks. This issue affects all versions prior to 2.0.0. The vulnerability can be exploited even if the isRemoteEnabled option is set to...

9.8CVSS6.8AI score
SaveExploits0References2
NVD
NVD
added 2024/11/15 11:15 a.m.25 views

CVE-2021-3838

DomPDF before version 2.0.0 is vulnerable to PHAR deserialization due to a lack of checking on the protocol before passing it into the filegetcontents function. An attacker who can upload files of any type to the server can pass in the phar:// protocol to unserialize the uploaded file and...

9.8CVSS0.0143EPSS
SaveExploits1References2
OSV
OSV
added 2024/11/15 11:15 a.m.19 views

CVE-2021-3838

DomPDF before version 2.0.0 is vulnerable to PHAR deserialization due to a lack of checking on the protocol before passing it into the filegetcontents function. An attacker who can upload files of any type to the server can pass in the phar:// protocol to unserialize the uploaded file and...

9.8CVSS9.7AI score
SaveExploits0References2
OSV
OSV
added 2024/11/15 11:15 a.m.3 views

DEBIAN-CVE-2021-3838

DomPDF before version 2.0.0 is vulnerable to PHAR deserialization due to a lack of checking on the protocol before passing it into the filegetcontents function. An attacker who can upload files of any type to the server can pass in the phar:// protocol to unserialize the uploaded file and...

9.8CVSS9.2AI score0.0143EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2024/11/15 10:52 a.m.27 views

CVE-2021-3902 Improper Restriction of XML External Entity Reference in dompdf/dompdf

An improper restriction of external entities XXE vulnerability in dompdf/dompdf's SVG parser allows for Server-Side Request Forgery SSRF and deserialization attacks. This issue affects all versions prior to 2.0.0. The vulnerability can be exploited even if the isRemoteEnabled option is set to...

9.8CVSS0.00924EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2024/11/15 10:52 a.m.13 views

CVE-2021-3902 Improper Restriction of XML External Entity Reference in dompdf/dompdf

An improper restriction of external entities XXE vulnerability in dompdf/dompdf's SVG parser allows for Server-Side Request Forgery SSRF and deserialization attacks. This issue affects all versions prior to 2.0.0. The vulnerability can be exploited even if the isRemoteEnabled option is set to...

9.8CVSS7.2AI score0.00924EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2024/11/15 10:51 a.m.23 views

CVE-2021-3838 PHAR Deserialization in dompdf/dompdf

DomPDF before version 2.0.0 is vulnerable to PHAR deserialization due to a lack of checking on the protocol before passing it into the filegetcontents function. An attacker who can upload files of any type to the server can pass in the phar:// protocol to unserialize the uploaded file and...

9.8CVSS8AI score0.0143EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2024/11/15 10:51 a.m.28 views

CVE-2021-3838 PHAR Deserialization in dompdf/dompdf

DomPDF before version 2.0.0 is vulnerable to PHAR deserialization due to a lack of checking on the protocol before passing it into the filegetcontents function. An attacker who can upload files of any type to the server can pass in the phar:// protocol to unserialize the uploaded file and...

9.8CVSS0.0143EPSS
SaveExploits1References2
Rows per page
Query Builder