Lucene search
+L

4973 matches found

Positive Technologies
Positive Technologies
•added 2026/06/25 12:00 a.m.•37 views

PT-2026-52453

Malicious HTML content contained in the layout specification of a PDF ticket or badge layout was executed when the PDF editor is opened in the browser. This could allow one backend user to inject JavaScript into the browser context of another backend user. Due to requirements of the PDF rendering...

8.8CVSS5.8AI score0.00425EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/06/24 8:39 p.m.•22 views

CVE-2026-54530

A flaw was found in pypdf, a pure-python PDF library. An attacker can craft a malicious PDF file that, when processed by a system extracting text in layout mode, can lead to an infinite loop. This vulnerability results in a Denial of Service DoS, making the affected system unresponsive. Mitigatio...

6.9CVSS5.7AI score0.00174EPSS
SaveExploits0References6
AstraLinux
AstraLinux
•added 2026/06/24 3:11 p.m.•21 views

Astra Linux – Vulnerability in Firefox, Thunderbird

Incorrect boundary conditions in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9...

7.5CVSS7.3AI score0.00687EPSS
SaveExploits0References3
AstraLinux
AstraLinux
•added 2026/06/24 3:11 p.m.•17 views

Astra Linux – Vulnerability in Firefox, Thunderbird

Use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9...

9.8CVSS8.3AI score0.00483EPSS
SaveExploits0References3
IBM Security Bulletins
IBM Security Bulletins
•added 2026/06/23 10:42 a.m.•23 views

Security Bulletin: Multiple Vulnerabilities affects IBM License Metric Tool v9

Summary Multiple vulnerabilities have been addressed in components used by IBM License Metric Tool Vulnerability Details CVEID:CVE-2026-34477 DESCRIPTION: The fix for CVE-2025-68161 https://logging.apache.org/security.htmlCVE-2025-68161 was incomplete: it addressed hostname verification only when...

7.5CVSS5.9AI score0.01187EPSS
SaveExploits2Affected Software1
Tenable Nessus
Tenable Nessus
•added 2026/06/23 12:00 a.m.•25 views

Linux Distros Unpatched Vulnerability : CVE-2026-54530

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pypdf is a free and open-source pure-python PDF library. Prior to 6.13.0, an attacker who uses this vulnerability can craft a PDF which leads to an infinite loo...

6.9CVSS5.9AI score0.00174EPSS
SaveExploits0References3
NVD
NVD
•added 2026/06/22 9:16 p.m.•35 views

CVE-2026-54530

pypdf is a free and open-source pure-python PDF library. Prior to 6.13.0, an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires extracting the text in layout mode. This vulnerability is fixed in 6.13.0...

6.9CVSS0.00174EPSS
SaveExploits0References3
osv_debian
osv_debian
•added 2026/06/22 9:16 p.m.•25 views

DEBIAN-CVE-2026-54530

pypdf is a free and open-source pure-python PDF library. Prior to 6.13.0, an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires extracting the text in layout mode. This vulnerability is fixed in 6.13.0...

5.5CVSS5.9AI score0.00174EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2026/06/22 9:16 p.m.•21 views

UBUNTU-CVE-2026-54530

pypdf is a free and open-source pure-python PDF library. Prior to 6.13.0, an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires extracting the text in layout mode. This vulnerability is fixed in 6.13.0...

6.9CVSS5.9AI score0.00174EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
•added 2026/06/22 9:16 p.m.•17 views

CVE-2026-54530

pypdf is a free and open-source pure-python PDF library. Prior to 6.13.0, an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires extracting the text in layout mode. This vulnerability is fixed in 6.13.0...

6.9CVSS6AI score0.00174EPSS
SaveExploits0References4
osv_cve
osv_cve
•added 2026/06/22 8:25 p.m.•19 views

CVE-2026-54530 pypdf: Possible infinite loop when retrieving fonts for layout-mode text extraction

pypdf is a free and open-source pure-python PDF library. Prior to 6.13.0, an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires extracting the text in layout mode. This vulnerability is fixed in 6.13.0...

6.9CVSS5.9AI score
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/06/22 8:25 p.m.•12 views

CVE-2026-54530 pypdf: Possible infinite loop when retrieving fonts for layout-mode text extraction

pypdf is a free and open-source pure-python PDF library. Prior to 6.13.0, an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires extracting the text in layout mode. This vulnerability is fixed in 6.13.0...

6.9CVSS5.9AI score0.00174EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2026/06/22 8:25 p.m.•14 views

CVE-2026-54530

pypdf is a free and open-source pure-python PDF library. Prior to 6.13.0, an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires extracting the text in layout mode. This vulnerability is fixed in 6.13.0...

6.9CVSS6AI score0.00174EPSS
SaveExploits0References4Affected Software1
EUVD
EUVD
•added 2026/06/22 8:25 p.m.•28 views

EUVD-2026-38354

pypdf is a free and open-source pure-python PDF library. Prior to 6.13.0, an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires extracting the text in layout mode. This vulnerability is fixed in 6.13.0...

6.9CVSS6AI score0.00174EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/06/22 8:25 p.m.•48 views

CVE-2026-54530 pypdf: Possible infinite loop when retrieving fonts for layout-mode text extraction

pypdf is a free and open-source pure-python PDF library. Prior to 6.13.0, an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires extracting the text in layout mode. This vulnerability is fixed in 6.13.0...

6.9CVSS0.00174EPSS
SaveExploits0References3
CVE
CVE
•added 2026/06/22 8:25 p.m.•111 views

CVE-2026-54530

CVE-2026-54530 – pypdf : A flaw in the pure-Python PDF library allows an attacker to craft a PDF that triggers an infinite loop when performing text extraction in layout mode. Affected versions are prior to 6.13.0. Impact noted as higher for availability. Remediation: upgrade to 6.13.0 (or apply ...

6.9CVSS5.9AI score0.00174EPSS
SaveExploits0References3Affected Software1
Mend
Mend
•added 2026/06/22 8:25 p.m.•14 views

CVE-2026-54530

pypdf is a free and open-source pure-python PDF library. Prior to 6.13.0, an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires extracting the text in layout mode. This vulnerability is fixed in 6.13.0...

6.9CVSS6AI score0.00174EPSS
SaveExploits0References8
Debian CVE
Debian CVE
•added 2026/06/22 8:25 p.m.•29 views

CVE-2026-54530

pypdf is a free and open-source pure-python PDF library. Prior to 6.13.0, an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires extracting the text in layout mode. This vulnerability is fixed in 6.13.0...

6.9CVSS5.9AI score0.00174EPSS
SaveExploits0
osv_bit
osv_bit
•added 2026/06/22 5:47 a.m.•26 views

BIT-NGINX-GATEWAY-2026-42530 NGINX Open-Source ngx_http_v3_module vulnerability

NGINX Open Source has a vulnerability in the ngxhttpv3module module. When NGINX Open Source is configured to use the HTTP/3 QUIC module, a remote unauthenticated attacker along with conditions beyond their control can use a specially crafted HTTP/3 session to reopen a QPACK encoder stream. This m...

9.2CVSS6.7AI score0.01145EPSS
SaveExploits3References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/22 12:00 a.m.•5 views

CVE-2026-54530: Loop with Unreachable Exit Condition

pypdf is a free and open-source pure-python PDF library. Prior to 6.13.0, an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires extracting the text in layout mode. This vulnerability is fixed in 6.13.0...

6.9CVSS6AI score0.00174EPSS
SaveExploits0References5
Rows per page
Query Builder