Lucene search
+L

14426 matches found

EUVD
EUVD
•added 2026/10/22 7:13 p.m.•6 views

EUVD-2026-108315

The MongoDB C Driver does not neutralize dot and dollar characters in dictionary keys, field names and array-filter identifiers used in LINQ queries before placing them into the field paths it sends to the server. An application user whose input reaches these positions can redirect a query or...

7.6CVSS5.9AI score0.00321EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/10/22 7:13 p.m.•6 views

EUVD-2026-108303

The MongoDB C Driver writes GeoJSON extra members without checking whether their names collide with reserved GeoJSON members such as type and coordinates. An application that places user-supplied field names into these extra members can store documents with duplicate geometry fields, so the serve...

5.4CVSS6AI score0.00372EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2026/10/22 7:13 p.m.•10 views

CVE-2026-114643 Duplicate geometry fields via unvalidated GeoJSON extra members

The MongoDB C Driver writes GeoJSON extra members without checking whether their names collide with reserved GeoJSON members such as type and coordinates. An application that places user-supplied field names into these extra members can store documents with duplicate geometry fields, so the serve...

5.3CVSS6AI score
SaveExploits0References5
CVE
CVE
•added 2026/10/22 7:13 p.m.•8 views

CVE-2026-114643

The MongoDB C# Driver is vulnerable to a collision issue where it writes GeoJSON extra members without verifying if their names conflict with reserved members like type or coordinates. If an application allows user-supplied field names in these extra members, it can result in documents with dupli...

5.4CVSS5.9AI score0.00372EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/10/22 7:13 p.m.•30 views

CVE-2026-114643 Duplicate geometry fields via unvalidated GeoJSON extra members

The MongoDB C Driver writes GeoJSON extra members without checking whether their names collide with reserved GeoJSON members such as type and coordinates. An application that places user-supplied field names into these extra members can store documents with duplicate geometry fields, so the serve...

5.4CVSS0.00372EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/10/22 4:49 p.m.•7 views

EUVD-2026-107327

pypdf: Possible long runtimes/large memory usage when retrieving form fields...

6CVSS5.8AI score0.00317EPSS
SaveExploits0References5
osv_ghsa
osv_ghsa
•added 2026/10/22 4:49 p.m.•7 views

GHSA-6VVC-X485-93V7 pypdf: Possible long runtimes/large memory usage when retrieving form fields

Impact An attacker who uses this vulnerability can craft a PDF which leads to large memory usage and/or long runtimes. This requires retrieving the form fields of a document. Patches This has been fixed in pypdf==6.21.0. Workarounds If you cannot upgrade yet, consider applying the changes from PR...

6CVSS5.8AI score0.00317EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
•added 2026/10/22 4:49 p.m.•9 views

pypdf: Possible long runtimes/large memory usage when retrieving form fields

Impact An attacker who uses this vulnerability can craft a PDF which leads to large memory usage and/or long runtimes. This requires retrieving the form fields of a document. Patches This has been fixed in pypdf==6.21.0. Workarounds If you cannot upgrade yet, consider applying the changes from PR...

6CVSS5.8AI score0.00317EPSS
SaveExploits0References6Affected Software1
SUSE CVE
SUSE CVE
•added 2026/10/22 4:28 p.m.•8 views

SUSE CVE-2026-113789

pypdf is a free and open-source pure-python PDF library. Prior to 6.21.0, an attacker can craft a PDF that causes large memory usage or long runtimes when an application retrieves the document's form fields. This issue is fixed in version 6.21.0...

6CVSS6AI score0.00317EPSS
SaveExploits0References3
Ubuntu
Ubuntu
•added 2026/10/22 3:38 p.m.•6 views

USN-8953-1: OpenVPN vulnerability

It was discovered that OpenVPN incorrectly handled certificate subject fields. A remote authenticated user could possibly use this issue to impersonate other users...

7.6CVSS5.8AI score0.00217EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2026/10/21 7:34 p.m.•7 views

CVE-2026-113789

A flaw was found in pypdf. A remote attacker can exploit this vulnerability by supplying a specially crafted PDF document that triggers excessive memory consumption and long processing times when an application reads form fields. This issue can result in a Denial of Service DoS, potentially causi...

6CVSS5.8AI score0.00317EPSS
SaveExploits0References7
osv_debian
osv_debian
•added 2026/10/21 4:17 p.m.•10 views

DEBIAN-CVE-2026-113789

pypdf is a free and open-source pure-python PDF library. Prior to 6.21.0, an attacker can craft a PDF that causes large memory usage or long runtimes when an application retrieves the document's form fields. This issue is fixed in version 6.21.0...

6CVSS6AI score0.00317EPSS
SaveExploits0References1
NVD
NVD
•added 2026/10/21 4:17 p.m.•5 views

CVE-2026-113789

pypdf is a free and open-source pure-python PDF library. Prior to 6.21.0, an attacker can craft a PDF that causes large memory usage or long runtimes when an application retrieves the document's form fields. This issue is fixed in version 6.21.0...

6CVSS0.00317EPSS
SaveExploits0References4
osv_cve
osv_cve
•added 2026/10/21 3:33 p.m.•7 views

CVE-2026-113789 pypdf: Possible long runtimes/large memory usage when retrieving form fields

pypdf is a free and open-source pure-python PDF library. Prior to 6.21.0, an attacker can craft a PDF that causes large memory usage or long runtimes when an application retrieves the document's form fields. This issue is fixed in version 6.21.0...

6CVSS6AI score
SaveExploits0References6
Cvelist
Cvelist
•added 2026/10/21 3:33 p.m.•23 views

CVE-2026-113789 pypdf: Possible long runtimes/large memory usage when retrieving form fields

pypdf is a free and open-source pure-python PDF library. Prior to 6.21.0, an attacker can craft a PDF that causes large memory usage or long runtimes when an application retrieves the document's form fields. This issue is fixed in version 6.21.0...

6CVSS0.00317EPSS
SaveExploits0References4
Debian CVE
Debian CVE
•added 2026/10/21 3:33 p.m.•7 views

CVE-2026-113789

pypdf is a free and open-source pure-python PDF library. Prior to 6.21.0, an attacker can craft a PDF that causes large memory usage or long runtimes when an application retrieves the document's form fields. This issue is fixed in version 6.21.0...

6CVSS6AI score0.00317EPSS
SaveExploits0
CVE
CVE
•added 2026/10/21 3:33 p.m.•19 views

CVE-2026-113789

The pypdf pure-python PDF library is vulnerable to uncontrolled resource consumption (CWE-400, CWE-407) in versions prior to 6.21.0 . An attacker can craft a malicious PDF file that triggers large memory usage or long runtimes when an application attempts to retrieve the document's form fields . ...

6CVSS6AI score0.00317EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/10/21 12:00 a.m.•5 views

PT-2026-120660

Name of the Vulnerable Software and Affected Versions pypdf versions prior to 6.21.0 Description An attacker can craft a malicious PDF file that leads to excessive memory consumption or extended processing times when an application attempts to retrieve the document's form fields. Recommendations...

6CVSS5.8AI score0.00317EPSS
SaveExploits0References10
Tenable Nessus
Tenable Nessus
•added 2026/10/21 12:00 a.m.•1 views

Linux Distros Unpatched Vulnerability : CVE-2026-17025

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Graphene theme for WordPress is vulnerable to Stored Cross-Site Scripting via 'Current location' and 'Author profile image URL' Profile Fields in all versio...

6.4CVSS6AI score0.00187EPSS
SaveExploits0References2
NVD
NVD
•added 2026/10/20 4:17 p.m.•4 views

CVE-2026-109700

Missing Authorization vulnerability in eLightUp Meta Box – WordPress Custom Fields Framework meta-box allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Meta Box – WordPress Custom Fields Framework: from n/a through 5.15.2...

6.5CVSS0.00315EPSS
SaveExploits0References1
Rows per page
Query Builder