EUVD-2021-18406

Malware in sbrugna...

EUVD-2023-56276

Malicious code in bioql PyPI...

EUVD-2023-46530

Malicious code in bioql PyPI...

EUVD-2021-33295

Malicious code in bioql PyPI...

CVE-2022-25108

Foxit PDF Reader and Editor before 11.2.1 and PhantomPDF before 10.1.7 allow a NULL pointer dereference during PDF parsing because the pointer is used without proper validation...

CVE-2023-42038

Kofax Power PDF PDF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kofax Power PDF. User interaction is required to exploit this vulnerability in that the target must...

CVE-2023-39490

PDF-XChange Editor PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must vis...

CVE-2023-36464 Infinite Loop when a comment isn't followed by a character in pypdf

pypdf is an open source, pure-python PDF library. In affected versions an attacker may craft a PDF which leads to an infinite loop if parsecontentstream is executed. That is, for example, the case if the user extracted text from such a PDF. This issue was introduced in pull request 969 and resolv...

PT-2022-17589 · Muhammara +1 · Muhammara +1

Name of the Vulnerable Software and Affected Versions: muhammara versions prior to 2.6.1 muhammara versions 3.0.0 through 3.1.0 hummus versions prior to 1.0.111 Description: The issue allows for Denial of Service DoS when a maliciously crafted PDF file is supplied to be parsed. Recommendations: F...

CVE-2022-3198

Use after free in PDF in Google Chrome prior to 105.0.5195.125 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. Chromium security severity: High...

CVE-2021-34316

A vulnerability has been identified in JT2Go All versions V13.2, Teamcenter Visualization All versions V13.2. The DL180CoolType.dll library in affected applications lacks proper validation of user-supplied data when parsing PDF files. This could result in an out of bounds write past the end of an...

EulerOS Virtualization 3.0.2.2 : ghostscript (EulerOS-SA-2020-1499)

According to the versions of the ghostscript package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - The PS Interpreter in Ghostscript 9.18 and 9.20 allows remote attackers to execute arbitrary code via crafted...

EulerOS 2.0 SP8 : ghostscript (EulerOS-SA-2019-1823)

According to the version of the ghostscript packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - In Artifex Ghostscript before 9.26, a carefully crafted PDF file can trigger an extremely long running computation when parsing the...

[ MDVSA-2009:068-1 ] poppler

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2009:068-1 http://www.mandriva.com/security/ Package : poppler Date : March 7, 2009 Affected: 2008.0, 2008.1, 2009.0, Corporate 4.0 Problem Description: A crafted PDF file that triggers a parsing error allows...

Adobe Acrobat / Reader 0-day vulnerability

Undisclosed vulnerability in PDF parsing can be used for code execution...