Lucene search
+L

7 matches found

RedhatCVE
RedhatCVE
added 2026/06/05 7:39 p.m.13 views

CVE-2026-7315

A flaw has been found in eiceblue spire-pdf-mcp-server 0.1.1. This impacts the function getpdfpath of the file src/spirepdfmcp/server.py of the component PDF File Handler. Executing a manipulation of the argument filepath can lead to path traversal. The attack can be launched remotely. The exploi...

7.5CVSS6.8AI score0.0041EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/04/28 8:0 p.m.3 views

CVE-2026-7315

A flaw has been found in eiceblue spire-pdf-mcp-server 0.1.1. This impacts the function getpdfpath of the file src/spirepdfmcp/server.py of the component PDF File Handler. Executing a manipulation of the argument filepath can lead to path traversal. The attack can be launched remotely. The exploi...

7.5CVSS7AI score0.0041EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
added 2026/04/28 8:0 p.m.40 views

CVE-2026-7315 eiceblue spire-pdf-mcp-server PDF File server.py get_pdf_path path traversal

A flaw has been found in eiceblue spire-pdf-mcp-server 0.1.1. This impacts the function getpdfpath of the file src/spirepdfmcp/server.py of the component PDF File Handler. Executing a manipulation of the argument filepath can lead to path traversal. The attack can be launched remotely. The exploi...

7.5CVSS0.0041EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/04/28 12:0 a.m.8 views

PT-2026-35828

Name of the Vulnerable Software and Affected Versions eiceblue spire-pdf-mcp-server version 0.1.1 Description A flaw in the PDF File Handler component allows for remote path traversal. This occurs when the filepath argument is manipulated within the get pdf path function located in the src/spire...

7.5CVSS7.1AI score0.0041EPSS
SaveExploits0References9
Packet Storm
Packet Storm
added 2026/04/27 12:0 a.m.126 views

📄 pdf-image 2.0.0 Command Injection

In pdf-image version 2.0.0, a security issue allows OS command injection when untrusted input is passed to the PDFImage constructor and later processed by methods such as getInfo...

9.8CVSS5.4AI score0.02493EPSS
SaveExploits4
CNNVD
CNNVD
added 2024/02/29 12:0 a.m.6 views

pdfmake Security Vulnerabilities

pdfmake is Bartek Pampuch individual developers of a pure JavaScript server-side and client-side PDF document generation library . A security vulnerability exists in pdfmake 0.2.9 and earlier versions, which stems from a vulnerability that allows a remote attacker to run arbitrary code to a...

9.8CVSS7.4AI score0.01024EPSS
SaveExploits2References5
NVD
NVD
added 2019/03/27 7:30 p.m.36 views

CVE-2019-1010257

An Information Disclosure / Data Modification issue exists in article2pdfgetfile.php in the article2pdf Wordpress plugin 0.24, 0.25, 0.26, 0.27. A URL can be constructed which allows overriding the PDF file's path leading to any PDF whose path is known and which is readable to the web server can ...

9.1CVSS9AI score0.04361EPSS
SaveExploits3References4
Rows per page
Query Builder