Lucene search
+L

76 matches found

Positive Technologies
Positive Technologies
added 2022/06/10 12:0 a.m.6 views

PT-2022-7123

Name of the Vulnerable Software and Affected Versions pypdf versions prior to 3.9.0 Description The issue is related to the execution of parse content stream which can lead to an infinite loop if a crafted PDF is used. This can occur, for example, when a user extracts text from such a PDF. The...

6.2CVSS6AI score0.00352EPSS
SaveExploits1References26
OSV
OSV
added 2022/05/17 1:36 a.m.34 views

GHSA-4FVG-PWV7-V54G Karteek Docsplit vulnerable to OS Command Injection

The extractfromocr function in lib/docsplit/textextractor.rb in the Karteek Docsplit karteek-docsplit gem 0.5.4 for Ruby allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a PDF filename...

9.3CVSS7.1AI score0.01793EPSS
SaveExploits3References5
Positive Technologies
Positive Technologies
added 2022/05/09 12:0 a.m.6 views

PT-2022-20158 · Xpdf +1 · Xpdf +1

Name of the Vulnerable Software and Affected Versions: Xpdf version 4.0.4 Description: The issue is caused by an invalid memory access in the TextLine class in TextOutputDev.cc. This occurs because the text extractor mishandles characters at large y coordinates. It can be triggered by sending a...

9.1CVSS6.3AI score0.01618EPSS
SaveExploits22References69
ATTACKERKB
ATTACKERKB
added 2021/12/14 4:15 p.m.3 views

CVE-2021-44231

Internally used text extraction reports allow an attacker to inject code that can be executed by the application. An attacker could thereby control the behavior of the application...

9.8CVSS7.4AI score0.01294EPSS
SaveExploits0References3Affected Software1
NVD
NVD
added 2021/12/14 4:15 p.m.26 views

CVE-2021-44231

Internally used text extraction reports allow an attacker to inject code that can be executed by the application. An attacker could thereby control the behavior of the application...

9.8CVSS0.01294EPSS
SaveExploits0References2
Prion
Prion
added 2021/12/14 4:15 p.m.21 views

Code injection

Internally used text extraction reports allow an attacker to inject code that can be executed by the application. An attacker could thereby control the behavior of the application...

7.5CVSS9.3AI score0.01294EPSS
SaveExploits0References2Affected Software2
Cvelist
Cvelist
added 2021/12/14 3:44 p.m.28 views

CVE-2021-44231

Internally used text extraction reports allow an attacker to inject code that can be executed by the application. An attacker could thereby control the behavior of the application...

9.7AI score0.01294EPSS
SaveExploits0References2
CVE
CVE
added 2021/12/14 3:44 p.m.65 views

CVE-2021-44231

The CVE-2021-44231 issue is linked to SAP NetWeaver AS ABAP (and related ABAP server components) with a code-injection vulnerability in internally used text-extraction reports. The connected Nessus entry for SAP NetWeaver ABAP (3119365) describes a vulnerability where an attacker could inject cod...

9.8CVSS9.3AI score0.01294EPSS
SaveExploits0References2Affected Software2
Positive Technologies
Positive Technologies
added 2021/12/14 12:0 a.m.8 views

PT-2021-24070 · Sap Se +1 · Sap Abap Server & Abap Platform +2

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: Internally used text extraction reports allow an attacker to inject code that can be executed by the application. An attacker could thereby control the behavior of the application...

9.8CVSS9.3AI score0.01294EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2020/12/18 12:0 a.m.8 views

The vulnerability of the OpenDetex text extraction tool relates to the occurrence of operations that go beyond the buffer boundaries in memory. This allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the OpenDetex text extraction tool is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

7.8CVSS7.6AI score0.01212EPSS
SaveExploits1References7Affected Software3
CNVD
CNVD
added 2018/09/21 12:0 a.m.5 views

Apache Tika Denial of Service Vulnerability

Apache Tika is the United States Apache Apache Software Foundation, an integrated POI using Java programs to provide read and write Microsoft Office format documents open-source library, Pdfbox read and create PDF documents pure Java class library and for text extraction work provides a unified...

5.5CVSS5.5AI score0.02509EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2012/11/15 12:0 a.m.15 views

Fedora Update for catdoc FEDORA-2012-17588

Check for the Version of catdoc OpenVAS Vulnerability Test Fedora Update for catdoc FEDORA-2012-17588 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

7.4AI score
SaveExploits0References2
Fedora
Fedora
added 2012/11/13 1:7 a.m.17 views

[SECURITY] Fedora 16 Update: catdoc-0.94.2-10.fc16

catdoc is program which reads one or more Microsoft word files and outputs text, contained insinde them to standard output. Therefore it does same work for.doc files, as unix cat command for plain ASCII files. It is now accompanied by xls2csv - program which converts Excel spreadsheet into...

0.5AI score
SaveExploits0
Fedora
Fedora
added 2012/11/13 1:1 a.m.16 views

[SECURITY] Fedora 17 Update: catdoc-0.94.2-10.fc17

catdoc is program which reads one or more Microsoft word files and outputs text, contained insinde them to standard output. Therefore it does same work for.doc files, as unix cat command for plain ASCII files. It is now accompanied by xls2csv - program which converts Excel spreadsheet into...

0.5AI score
SaveExploits0
Fedora
Fedora
added 2012/11/08 6:7 a.m.15 views

[SECURITY] Fedora 18 Update: catdoc-0.94.2-10.fc18

catdoc is program which reads one or more Microsoft word files and outputs text, contained insinde them to standard output. Therefore it does same work for.doc files, as unix cat command for plain ASCII files. It is now accompanied by xls2csv - program which converts Excel spreadsheet into...

0.5AI score
SaveExploits0
securityvulns
securityvulns
added 2000/09/28 12:0 a.m.24 views

Несколько дырок в WebPlus

Различные дырки дают возможность получения полного пути к документам, получение текста исполняемых приложений и др...

0.4AI score
SaveExploits0References1
Rows per page
Query Builder