1122 matches found
CVE-2019-13288
Xpdf version 4.02 2019-sep-25 The Xpdf software and documentation are copyright 1996-2019 Glyph & Cog, LLC. Email: [email protected] WWW: http://www.xpdfreader.com/ The PDF data structures, operators, and specification are documented in ISO 32000-2:2017. What is Xpdf? Xpdf is an open source...
CVE-2026-25940
CVE-2026-25940 jsPDF PoC A proof-of-concept for CVE-2026-25940 demonstrating how specially crafted AcroForm radio button appearances can trigger embedded JavaScript in vulnerable PDF viewers e.g., Foxit. The repo includes a Node-based generator and a browser viewer harness to exercise different...
BugHub
BugHub this is my CVEhub You can get information about these Cves by viewing the pdf and images of the project...
CVE-2026-102090
Kiteworks Core before version 9.5.1 is vulnerable to Content Injection. A URL parameter in the PDF viewer was insufficiently validated, allowing an attacker-controlled document to be loaded and displayed under the trust of the legitimate application domain. This could increase the credibility of...
CVE-2026-102090 Kiteworks Core content injection
Kiteworks Core before version 9.5.1 is vulnerable to Content Injection. A URL parameter in the PDF viewer was insufficiently validated, allowing an attacker-controlled document to be loaded and displayed under the trust of the legitimate application domain. This could increase the credibility of...
CVE-2026-102090 Kiteworks Core content injection
Kiteworks Core before version 9.5.1 is vulnerable to Content Injection. A URL parameter in the PDF viewer was insufficiently validated, allowing an attacker-controlled document to be loaded and displayed under the trust of the legitimate application domain. This could increase the credibility of...
CVE-2026-102090
Kiteworks Core versions prior to 9.5.1 are vulnerable to a Content Injection flaw. The root cause is insufficient validation of a URL parameter within the PDF viewer , which allows an attacker to load and display a document under the trust of the legitimate application domain. This vulnerability ...
PT-2026-103528
Name of the Vulnerable Software and Affected Versions Kiteworks Core versions prior to 9.5.1 Description Content Injection occurs due to insufficient validation of a URL parameter in the PDF viewer. This flaw allows an attacker-controlled document to be loaded and displayed under the trust of the...
CVE-2026-84138
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Denial-of-service in the PDF Viewer component...
PDF_XSS
Payloads All The PDFs A list of crafted malicious PDF files...
ROS-20260910-73-0006
The vulnerability of the draw-unpack.c component in the MuPDf PDF viewer program is related to integer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure...
CVE-2026-8623: Improper Neutralization of Input During Web Page Generation
The Dear Flipbook – PDF Flipbook, 3D Flipbook, PDF embed, PDF viewer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'postcontent class attribute of .dvcss element' parameter in all versions up to, and including, 2.4.30 due to insufficient input sanitization and output...
CVE-2026-8625: Improper Neutralization of Input During Web Page Generation
The Dear Flipbook – PDF Flipbook, 3D Flipbook, PDF embed, PDF viewer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'postcontent Custom HTML block inner HTML' parameter in all versions up to, and including, 2.4.30 due to insufficient input sanitization and output...
SUSE CVE-2026-84138
Denial-of-service in the PDF Viewer component. This vulnerability was fixed in Firefox 155 and Thunderbird 155...
Linux Distros Unpatched Vulnerability : CVE-2026-84138
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Denial-of-service in the PDF Viewer component. This vulnerability was fixed in Firefox 155 and Thunderbird 155. CVE-2026-84138 Note that Nessus relies on the...
CVE-2026-84138
Denial-of-service in the PDF Viewer component. This vulnerability was fixed in Firefox 155 and Thunderbird 155...
CVE-2026-84138
Denial-of-service in the PDF Viewer component. This vulnerability was fixed in Firefox 155 and Thunderbird 155...
CVE-2026-84138 Denial-of-service in the PDF Viewer component
Denial-of-service in the PDF Viewer component. This vulnerability was fixed in Firefox 155 and Thunderbird 155...
