CVE-2023-26155

All versions of the package node-qpdf are vulnerable to Command Injection such that the package-exported method encrypt fails to sanitize its parameter input, which later flows into a sensitive command execution API. As a result, attackers may inject malicious commands once they can specify the...

SUSE: Security Advisory (SUSE-SU-2024:2173-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2024-0076)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory for qpdf (FEDORA-2024-daa7df59d6)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 38 : qpdf (2024-daa7df59d6)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-daa7df59d6 advisory. 2267205 - CVE-2024-24246 qpdf - Heap Buffer Overflow vulnerability in qpdf fedora-all Tenable has extracted the preceding description block directly...

[SECURITY] [DLA 3548-1] qpdf security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3548-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz August 29, 2023 https://wiki.debian.org/LTS -...

SUSE: Security Advisory (SUSE-SU-2018:3066-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP3 : qpdf (EulerOS-SA-2019-2655)

According to the versions of the qpdf package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in QPDF before 7.0.0. Endless recursion causes stack exhaustion in QPDFTokenizer::resolveLiteral in QPDFTokenizer.cc, relat...

Ubuntu: Security Advisory (USN-3638-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...