Lucene search
+L

445 matches found

OSSF Malicious Packages
OSSF Malicious Packages
•added 2022/06/20 8:26 p.m.•9 views

Malicious code in handbook-epub (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5edd736393f9c1bdbfd02f3d1a92f23913f61168099b0602f974509d6c91179a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
•added 2022/06/20 8:26 p.m.•16 views

MAL-2022-3555 Malicious code in handbook-epub (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5edd736393f9c1bdbfd02f3d1a92f23913f61168099b0602f974509d6c91179a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
Fedora
Fedora
•added 2022/03/26 3:34 p.m.•25 views

[SECURITY] Fedora 36 Update: python-PyMuPDF-1.19.5-2.fc36

This is PyMuPDF, a Python binding for MuPDF - a lightweight PDF and XPS viewer. MuPDF can access files in PDF, XPS, OpenXPS, epub, comic and fiction book formats, and it is known for its top performance and high rendering quality. With PyMuPDF you therefore can also access files with extensions...

7.3AI score
SaveExploits0
OpenVAS
OpenVAS
•added 2022/01/28 12:00 a.m.•19 views

Mageia: Security Advisory (MGASA-2019-0249)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.6AI score0.03694EPSS
SaveExploits0References4
OSV
OSV
•added 2022/01/23 7:15 a.m.•14 views

CVE-2022-23850

xhtmltranslateentity in xhtml.c in epub2txt aka epub2txt2 through 2.02 allows a stack-based buffer overflow via a crafted EPUB document...

7.8CVSS7.6AI score0.00867EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2022/01/23 7:15 a.m.•15 views

CVE-2022-23850

xhtmltranslateentity in xhtml.c in epub2txt aka epub2txt2 through 2.02 allows a stack-based buffer overflow via a crafted EPUB document...

7.8CVSS7.6AI score0.00867EPSS
SaveExploits1References3
Prion
Prion
•added 2022/01/23 7:15 a.m.•30 views

Stack overflow

xhtmltranslateentity in xhtml.c in epub2txt aka epub2txt2 through 2.02 allows a stack-based buffer overflow via a crafted EPUB document...

6.8CVSS7.7AI score0.00867EPSS
SaveExploits1References2Affected Software1
AlpineLinux
AlpineLinux
•added 2022/01/23 6:47 a.m.•58 views

CVE-2022-23850

xhtmltranslateentity in xhtml.c in epub2txt aka epub2txt2 through 2.02 allows a stack-based buffer overflow via a crafted EPUB document...

7.8CVSS7.6AI score0.00867EPSS
SaveExploits1
Positive Technologies
Positive Technologies
•added 2022/01/23 12:00 a.m.•12 views

PT-2022-16292 · Epub2Txt · Epub2Txt

Name of the Vulnerable Software and Affected Versions: epub2txt aka epub2txt2 versions 2.02 and earlier Description: The issue allows a stack-based buffer overflow via a crafted EPUB document. This is due to the xhtml translate entity function in xhtml.c. Recommendations: For versions 2.02 and...

7.8CVSS7.4AI score0.00867EPSS
SaveExploits1References4
OSV
OSV
•added 2022/01/21 11:52 p.m.•24 views

GHSA-C6RP-XVQV-MWMF Cross-site Scripting in epubjs

managers/views/iframe.js in FuturePress EPub.js before 0.3.89 allows XSS...

6.1CVSS5.9AI score0.00937EPSS
SaveExploits0References5
Fedora
Fedora
•added 2021/11/04 1:34 a.m.•56 views

[SECURITY] Fedora 34 Update: python-PyMuPDF-1.19.1-1.fc34

This is PyMuPDF, a Python binding for MuPDF - a lightweight PDF and XPS viewer. MuPDF can access files in PDF, XPS, OpenXPS, epub, comic and fiction book formats, and it is known for its top performance and high rendering quality. With PyMuPDF you therefore can also access files with extensions...

5.5CVSS5.4AI score0.01331EPSS
SaveExploits1
OSV
OSV
•added 2021/09/27 4:15 p.m.•9 views

CVE-2021-39826

Adobe Digital Editions 4.5.11.187646 and earlier are affected by an arbitrary command execution vulnerability. An authenticated attacker could leverage this vulnerability to execute arbitrary commands. User interaction is required to abuse this vulnerability in that a user must open a maliciously...

8.6CVSS6.1AI score0.02069EPSS
SaveExploits0References1
NVD
NVD
•added 2021/09/27 4:15 p.m.•22 views

CVE-2021-39826

Adobe Digital Editions 4.5.11.187646 and earlier are affected by an arbitrary command execution vulnerability. An authenticated attacker could leverage this vulnerability to execute arbitrary commands. User interaction is required to abuse this vulnerability in that a user must open a maliciously...

9.3CVSS0.02069EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/09/27 12:00 a.m.•4 views

CVE-2021-39826: Improper Neutralization of Special Elements used in an OS Command

Adobe Digital Editions 4.5.11.187646 and earlier are affected by an arbitrary command execution vulnerability. An authenticated attacker could leverage this vulnerability to execute arbitrary commands. User interaction is required to abuse this vulnerability in that a user must open a maliciously...

9.3CVSS7.8AI score0.02069EPSS
SaveExploits0References3
CNVD
CNVD
•added 2021/09/22 12:00 a.m.•29 views

PDFTools stack buffer overflow vulnerability

PDFTools is a tool for converting PDF files to ePUB format. A stack buffer overflow vulnerability exists in the Analyze::AnalyzePages function in analyze.cpp in PDFTools 20200714 and earlier versions. An attacker could exploit this vulnerability to execute code...

7.8CVSS5.5AI score0.01052EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2021/09/14 11:00 p.m.•9 views

CVE-2021-39826

Adobe Digital Editions 4.5.11.187646 and earlier are affected by an arbitrary command execution vulnerability. An authenticated attacker could leverage this vulnerability to execute arbitrary commands. User interaction is required to abuse this vulnerability in that a user must open a maliciously...

9.3CVSS7.5AI score0.02069EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2021/09/14 12:00 a.m.•4 views

PT-2021-5109

Name of the Vulnerable Software and Affected Versions Adobe Digital Editions versions 4.5.11.187646 and earlier Description The issue is related to an arbitrary command execution vulnerability. An authenticated attacker could leverage this vulnerability to execute arbitrary commands. User...

9.3CVSS0.02069EPSS
SaveExploits0References5
OPENSUSE Linux
OPENSUSE Linux
•added 2021/06/18 12:00 a.m.•41 views

Security update for htmldoc (important)

openSUSE Security Update: Security update for htmldoc Announcement ID: openSUSE-SU-2021:0895-1 Rating: important References: 1184424 Cross-References: CVE-2021-20308 CVSS scores: CVE-2021-20308 NVD : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2021-20308 SUSE: 3.3...

3.3CVSS8AI score0.02477EPSS
SaveExploits1References1
OSV
OSV
•added 2021/06/17 6:06 p.m.•13 views

OPENSUSE-SU-2021:0893-1 Security update for htmldoc

This update for htmldoc fixes the following issues: htmldoc was updated to version 1.9.12 Fixed buffer-overflow CVE-2021-20308 boo1184424 Fixed a crash bug with 'data:' URIs and EPUB output Fixed several other crash bugs Fixed JPEG error handling Fixed some minor issues Removed the bundled libjpe...

9.8CVSS9.5AI score0.02477EPSS
SaveExploits1References3
OPENSUSE Linux
OPENSUSE Linux
•added 2021/06/17 12:00 a.m.•40 views

Security update for htmldoc (important)

openSUSE Security Update: Security update for htmldoc Announcement ID: openSUSE-SU-2021:0893-1 Rating: important References: 1184424 Cross-References: CVE-2021-20308 CVSS scores: CVE-2021-20308 NVD : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2021-20308 SUSE: 3.3...

3.3CVSS8AI score0.02477EPSS
SaveExploits1References1
Rows per page
Query Builder