Lucene search
+L

300 matches found

UbuntuCve
UbuntuCve
added 2026/03/10 6:18 p.m.11 views

CVE-2026-23907

This issue affects the ExtractEmbeddedFiles example in Apache PDFBox: from 2.0.24 through 2.0.35, from 3.0.0 through 3.0.6. The ExtractEmbeddedFiles example contains a path traversal vulnerability CWE-22 because the filename that is obtained from PDComplexFileSpecification.getFilename is appended...

5.3CVSS5.9AI score0.00886EPSS
SaveExploits0References1
OSV
OSV
added 2026/03/10 6:18 p.m.15 views

UBUNTU-CVE-2026-23907

This issue affects the ExtractEmbeddedFiles example in Apache PDFBox: from 2.0.24 through 2.0.35, from 3.0.0 through 3.0.6. The ExtractEmbeddedFiles example contains a path traversal vulnerability CWE-22 because the filename that is obtained from PDComplexFileSpecification.getFilename is appended...

5.3CVSS5.8AI score0.00886EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/03/10 1:00 p.m.13 views

CVE-2026-23907

A path traversal vulnerability was identified in the ExtractEmbeddedFiles example provided with Apache PDFBox. The example code constructs extraction paths by directly appending filenames obtained from PDComplexFileSpecification.getFilename without validating the resulting path. An attacker could...

6.5CVSS5.8AI score0.00886EPSS
SaveExploits0References5
OSV
OSV
added 2026/03/10 9:43 a.m.12 views

CVE-2026-23907 Apache PDFBox Examples: Path Traversal in PDFBox ExtractEmbeddedFiles Example Code

This issue affects the ExtractEmbeddedFiles example in Apache PDFBox: from 2.0.24 through 2.0.35, from 3.0.0 through 3.0.6. The ExtractEmbeddedFiles example contains a path traversal vulnerability CWE-22 because the filename that is obtained from PDComplexFileSpecification.getFilename is appended...

5.3CVSS6AI score
SaveExploits0References6
ATTACKERKB
ATTACKERKB
added 2026/03/10 9:43 a.m.9 views

CVE-2026-23907

This issue affects the ExtractEmbeddedFiles example in Apache PDFBox: from 2.0.24 through 2.0.36, from 3.0.0 through 3.0.7. The ExtractEmbeddedFiles example contains a path traversal vulnerability CWE-22 because the filename that is obtained from PDComplexFileSpecification.getFilename is appended...

5.8AI score0.00886EPSS
SaveExploits0References3Affected Software1
CVE
CVE
added 2026/03/10 9:43 a.m.157 views

CVE-2026-23907

Summary (CVE-2026-23907) Apache PDFBox’s ExtractEmbeddedFiles example contained a path traversal vulnerability (CWE-22) where the filename from PDComplexFileSpecification.getFilename() was appended to the extraction path. Affected versions: 2.0.24–2.0.35 and 3.0.0–3.0.6. Subsequent releases 2.0.3...

5.3CVSS5.8AI score0.00886EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2026/03/10 9:43 a.m.9 views

CVE-2026-23907 Apache PDFBox Examples: Path Traversal in PDFBox ExtractEmbeddedFiles Example Code

This issue affects the ExtractEmbeddedFiles example in Apache PDFBox: from 2.0.24 through 2.0.35, from 3.0.0 through 3.0.6. The ExtractEmbeddedFiles example contains a path traversal vulnerability CWE-22 because the filename that is obtained from PDComplexFileSpecification.getFilename is appended...

5.8AI score0.00886EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/03/10 9:43 a.m.54 views

CVE-2026-23907 Apache PDFBox Examples: Path Traversal in PDFBox ExtractEmbeddedFiles Example Code

This issue affects the ExtractEmbeddedFiles example in Apache PDFBox: from 2.0.24 through 2.0.35, from 3.0.0 through 3.0.6. The ExtractEmbeddedFiles example contains a path traversal vulnerability CWE-22 because the filename that is obtained from PDComplexFileSpecification.getFilename is appended...

0.00886EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2026/03/10 9:43 a.m.12 views

CVE-2026-23907

This issue affects the ExtractEmbeddedFiles example in Apache PDFBox: from 2.0.24 through 2.0.35, from 3.0.0 through 3.0.6. The ExtractEmbeddedFiles example contains a path traversal vulnerability CWE-22 because the filename that is obtained from PDComplexFileSpecification.getFilename is appended...

5.3CVSS5.4AI score0.00886EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/03/10 12:00 a.m.16 views

PT-2026-24199

Name of the Vulnerable Software and Affected Versions Apache PDFBox versions 2.0.24 through 2.0.36 Apache PDFBox versions 3.0.0 through 3.0.7 Description The ExtractEmbeddedFiles example within Apache PDFBox contains a path traversal issue. The filename obtained from...

5.3CVSS5.8AI score0.00886EPSS
SaveExploits0References19
CNNVD
CNNVD
added 2026/03/10 12:00 a.m.12 views

Apache PDFBox 路径遍历漏洞

Apache PDFBox is an open-source tool library based on the Java language, developed by the Apache Foundation. This product provides functions for creating and editing PDF documents. Versions 2.0.24 to 2.0.35, as well as 3.0.0 to 3.0.6 of Apache PDFBox, have a path traversal vulnerability. This...

5.3CVSS5.8AI score0.00886EPSS
SaveExploits0References4
IBM Security Bulletins
IBM Security Bulletins
added 2026/01/27 6:55 a.m.15 views

Security Bulletin: IBM Engineering Lifecycle Management - Jazz Foundation is impacted by vulnerabilities in Apache PDFBox

Summary Vulnerabilities have been identified in Apache PDFBox, which is used in IBM Engineering Lifecycle Management - Jazz Foundation. Vulnerability Details CVEID:CVE-2021-27807 DESCRIPTION: A carefully crafted PDF file can trigger an infinite loop while loading the file. This issue affects Apac...

5.5CVSS5.9AI score0.02979EPSS
SaveExploits0Affected Software1
EUVD
EUVD
added 2025/10/07 12:30 a.m.14 views

EUVD-2021-0975

Malware in sbrugna...

5.5CVSS6.8AI score0.03337EPSS
SaveExploits0References47
EUVD
EUVD
added 2025/10/07 12:30 a.m.13 views

EUVD-2021-1242

Malware in sbrugna...

5.5CVSS6.6AI score0.02979EPSS
SaveExploits0References48
EUVD
EUVD
added 2025/10/07 12:30 a.m.18 views

EUVD-2019-0587

Malware in sbrugna...

9.8CVSS6.7AI score0.09451EPSS
SaveExploits0References25
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2018-0607

Malware in sbrugna...

5.5CVSS5.8AI score0.03521EPSS
SaveExploits0References17
EUVD
EUVD
added 2025/10/07 12:30 a.m.13 views

EUVD-2021-1279

Malware in sbrugna...

5.5CVSS6.4AI score0.03054EPSS
SaveExploits0References32
EUVD
EUVD
added 2025/10/07 12:30 a.m.11 views

EUVD-2021-1315

Malware in sbrugna...

5.5CVSS6.6AI score0.03445EPSS
SaveExploits0References33
EUVD
EUVD
added 2025/10/07 12:30 a.m.14 views

EUVD-2018-0498

Malware in sbrugna...

7.8CVSS7.7AI score0.0384EPSS
SaveExploits0References24
EUVD
EUVD
added 2025/10/03 8:07 p.m.13 views

EUVD-2022-4264

Malicious code in bioql PyPI...

6.5CVSS6.8AI score0.04645EPSS
SaveExploits1References12
Rows per page
Query Builder