27823 matches found
CVE-2026-27628
A flaw was found in pypdf. Processing a specially crafted PDF document, specifically with circular /Prev references in the cross-reference xref chain, can cause an infinite loop and a high consumption of CPU, resulting in a denial of service. Mitigation Mitigation for this issue is either not...
MINI-PJJW-7367-WVVC
Bulletin has no description...
CGA-GPV2-2M7J-7629
Bulletin has no description...
MINI-W6F9-XMCV-PMV5
Bulletin has no description...
MINI-P8XM-P67M-J8WP
Bulletin has no description...
CVE-2025-40541
An Insecure Direct Object Reference IDOR vulnerability exists in Serv-U, which when exploited, gives a malicious actor the ability to execute native code as a privileged account. This issue requires administrative privileges to abuse. On Windows deployments, the risk is scored as a medium because...
Exploit for CVE-2026-1357
No d...
Infinite loop
Overview pypdf is an A pure-python PDF library capable of splitting, merging, cropping, and transforming PDF files Affected versions of this package are vulnerable to Infinite loop in reader.py, when loading circular /Prev entries in cross-reference streams. An attacker can cause the application ...
ECHO-9F57-8EE2-53B3
Bulletin has no description...
CVE-2026-27628 pypdf has a possible infinite loop when loading circular /Prev entries in cross-reference streams
pypdf is a free and open-source pure-python PDF library. Prior to 6.7.2, an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires reading the file. This has been fixed in pypdf 6.7.2. As a workaround, one may apply the patch manually...
CVE-2026-27628 pypdf has a possible infinite loop when loading circular /Prev entries in cross-reference streams
pypdf is a free and open-source pure-python PDF library. Prior to 6.7.2, an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires reading the file. This has been fixed in pypdf 6.7.2. As a workaround, one may apply the patch manually...
CVE-2026-27628 pypdf has a possible infinite loop when loading circular /Prev entries in cross-reference streams
pypdf is a free and open-source pure-python PDF library. Prior to 6.7.2, an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires reading the file. This has been fixed in pypdf 6.7.2. As a workaround, one may apply the patch manually...
CVE-2026-27628
CVE-2026-27628 affects the Python library pypdf. Before version 6.7.2, crafted PDFs could trigger an infinite loop when loading circular /Prev entries in cross-reference streams (requires reading the file). The issue has been fixed in pypdf 6.7.2; a patch can be manually applied as a workaround. ...
MINI-V3XR-72H6-G9HC
Bulletin has no description...
kernel: drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies
A flaw was found in the kernel subsystem handling of the DRM scheduler. Under certain error conditions, the function drmschedjobadddependency consumes a fence reference and then later erroneously attempts to free it again double free. This may lead to memory corruption and, in some configurations...
The vulnerability of the icp_opal_init() function in the arch/powerpc/sysdev/xics/icp-opal.c module of the PowerPC platform allows a hacker to cause a service failure.
The vulnerability of the icpopalinit function in the arch/powerpc/sysdev/xics/icp-opal.c module of the PowerPC platform in the Linux operating system is related to errors during the update of the reference counter. Exploiting this vulnerability could allow an attacker to cause a service failure...
mchange-commons-java 注入漏洞
mchange-commons-java is a software developed by Steve Waldman. Versions of mchange-commons-java prior to 0.4.0 had a injection vulnerability. This vulnerability stemmed from the library’s inclusion of an independently implemented JNDI dereferencing function, which could allow attackers to trigger...
CVE-2026-2697
An Indirect Object Reference IDOR in Security Center allows an authenticated remote attacker to escalate privileges via the 'owner' parameter...