Lucene search
K

7 matches found

RedhatCVE
RedhatCVE
added 2026/06/05 7:39 p.m.7 views

CVE-2026-7315

A flaw has been found in eiceblue spire-pdf-mcp-server 0.1.1. This impacts the function getpdfpath of the file src/spirepdfmcp/server.py of the component PDF File Handler. Executing a manipulation of the argument filepath can lead to path traversal. The attack can be launched remotely. The exploi...

7.5CVSS6.8AI score0.0041EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/04/28 8:0 p.m.1 views

CVE-2026-7315

A flaw has been found in eiceblue spire-pdf-mcp-server 0.1.1. This impacts the function getpdfpath of the file src/spirepdfmcp/server.py of the component PDF File Handler. Executing a manipulation of the argument filepath can lead to path traversal. The attack can be launched remotely. The exploi...

7.5CVSS7AI score0.0041EPSS
Exploits0References5Affected Software1
Cvelist
Cvelist
added 2026/04/28 8:0 p.m.28 views

CVE-2026-7315 eiceblue spire-pdf-mcp-server PDF File server.py get_pdf_path path traversal

A flaw has been found in eiceblue spire-pdf-mcp-server 0.1.1. This impacts the function getpdfpath of the file src/spirepdfmcp/server.py of the component PDF File Handler. Executing a manipulation of the argument filepath can lead to path traversal. The attack can be launched remotely. The exploi...

7.5CVSS0.0041EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2026/04/28 12:0 a.m.5 views

PT-2026-35828

A flaw has been found in eiceblue spire-pdf-mcp-server 0.1.1. This impacts the function get pdf path of the file src/spire pdf mcp/server.py of the component PDF File Handler. Executing a manipulation of the argument filepath can lead to path traversal. The attack can be launched remotely. The...

7.5CVSS7.1AI score0.0041EPSS
Exploits0References8
Packet Storm
Packet Storm
added 2026/04/27 12:0 a.m.85 views

📄 pdf-image 2.0.0 Command Injection

In pdf-image version 2.0.0, a security issue allows OS command injection when untrusted input is passed to the PDFImage constructor and later processed by methods such as getInfo...

9.8CVSS5.4AI score0.02493EPSS
Exploits4
CNNVD
CNNVD
added 2024/02/29 12:0 a.m.3 views

pdfmake Security Vulnerabilities

pdfmake is Bartek Pampuch individual developers of a pure JavaScript server-side and client-side PDF document generation library . A security vulnerability exists in pdfmake 0.2.9 and earlier versions, which stems from a vulnerability that allows a remote attacker to run arbitrary code to a...

9.8CVSS7.4AI score0.01024EPSS
Exploits2References5
NVD
NVD
added 2019/03/27 7:30 p.m.28 views

CVE-2019-1010257

An Information Disclosure / Data Modification issue exists in article2pdfgetfile.php in the article2pdf Wordpress plugin 0.24, 0.25, 0.26, 0.27. A URL can be constructed which allows overriding the PDF file's path leading to any PDF whose path is known and which is readable to the web server can ...

9.1CVSS9AI score0.04361EPSS
Exploits3References4
Rows per page
Query Builder