92 matches found
PT-2026-20850
Name of the Vulnerable Software and Affected Versions jsPDF versions prior to 4.2.0 Description jsPDF is a JavaScript library used to generate PDF documents. A flaw exists where user-controlled input to the addJS method allows an attacker to inject arbitrary PDF objects into generated documents. ...
jsPDF has PDF Injection in AcroFormChoiceField that allows Arbitrary JavaScript Execution
Impact User control of properties and methods of the Acroform module allows users to inject arbitrary PDF objects, such as JavaScript actions. If given the possibility to pass unsanitized input to one of the following methods or properties, a user can inject arbitrary PDF objects, such as...
CVE-2026-24737: Improper Encoding or Escaping of Output
jsPDF is a library to generate PDFs in JavaScript. Prior to 4.1.0, user control of properties and methods of the Acroform module allows users to inject arbitrary PDF objects, such as JavaScript actions. If given the possibility to pass unsanitized input to one of the following methods or...
Linux Distros Unpatched Vulnerability : CVE-2025-11896
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Xpdf 4.05 and earlier, a PDF object loop in a CMap, via the UseCMap entry, leads to infinite recursion and a stack overflow. CVE-2025-11896 Note that Nessus...
EUVD-2020-3846
Malware in sbrugna...
EUVD-2024-31839
Malicious code in bioql PyPI...
EUVD-2024-48717
Malicious code in bioql PyPI...
EUVD-2023-34129
Malicious code in bioql PyPI...
EUVD-2023-34130
Malicious code in bioql PyPI...
EUVD-2024-44180
Malicious code in bioql PyPI...
SUSE CVE-2023-2664
In Xpdf 4.04 and earlier, a PDF object loop in the embedded file tree leads to infinite recursion and a stack overflow...
CVE-2024-7866
In Xpdf 4.05 and earlier, a PDF object loop in a pattern resource leads to infinite recursion and a stack overflow...
CVE-2024-7866
In Xpdf 4.05 and earlier, a PDF object loop in a pattern resource leads to infinite recursion and a stack overflow...
UBUNTU-CVE-2024-7866
In Xpdf 4.05 and earlier, a PDF object loop in a pattern resource leads to infinite recursion and a stack overflow...
CVE-2024-7866
In Xpdf 4.05 and earlier, a PDF object loop in a pattern resource leads to infinite recursion and a stack overflow...
CVE-2024-7866
CVE-2024-7866 affects Xpdf 4.05 and earlier, where a PDF object loop in a pattern resource causes infinite recursion and a stack overflow (local exploit path). Fedora advisories indicate the fix is to upgrade to Xpdf 4.06, addressing the vulnerability in affected packages. The connected sources c...
CVE-2024-7866
In Xpdf 4.05 and earlier, a PDF object loop in a pattern resource leads to infinite recursion and a stack overflow...
Xpdf 安全漏洞
Xpdf is a free PDF viewer and toolkit from Xpdf, Inc. that includes a text extractor, image converter, HTML converter, and more. A security vulnerability exists in Xpdf version 4.05 and earlier versions, which stems from a PDF object loop in a schema resource that can lead to infinite recursion a...