Lucene search
+L

33 matches found

Kitploit
Kitploit
•added 2026/10/19 6:52 p.m.•7 views

CVE-2026-85246

CVE-2026-85246 — camel-mina: consumer information disclosure exception written over the socket Runnable proof-of-concept reproducer for the Apache Camel vulnerability where the Mina consumer wroteexchange.getException straight back over the socket to the remote peer when processing of an exchange...

5.3CVSS6.1AI score0.00401EPSS
SaveExploits1References2
NVD
NVD
•added 2026/10/19 11:17 a.m.•6 views

CVE-2026-85246

Generation of Error Message Containing Sensitive Information vulnerability in Apache Camel Mina component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. When processing of an exchange failed, the Mina consumer wrote exchange.getException straight back over...

5.3CVSS0.00401EPSS
SaveExploits1References5
GithubExploit
GithubExploit
•added 2026/10/19 10:41 a.m.•19 views

Exploit for CVE-2026-85246

CVE-2026-85246 — camel-mina: consumer information disclosure...

5.3CVSS6AI score0.00401EPSS
SaveExploits1
EUVD
EUVD
•added 2026/10/19 10:33 a.m.•9 views

EUVD-2026-104187

Generation of Error Message Containing Sensitive Information vulnerability in Apache Camel Mina component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. When processing of an exchange failed, the Mina consumer wrote exchange.getException straight back over...

5.3CVSS6AI score0.00401EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2026/10/19 10:33 a.m.•43 views

CVE-2026-85246 Apache Camel: Camel-Mina Information Disclosure via Unmuted Consumer Exceptions

Generation of Error Message Containing Sensitive Information vulnerability in Apache Camel Mina component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. When processing of an exchange failed, the Mina consumer wrote exchange.getException straight back over...

5.3CVSS0.00401EPSS
SaveExploits1References5
CVE
CVE
•added 2026/10/19 10:33 a.m.•12 views

CVE-2026-85246

The Apache Camel Mina component is vulnerable to information disclosure (CWE-209) because it writes exchange.getException() directly back to the remote peer when processing fails. Depending on the codec, this leaks the exception's class name and message (textline codec) or the serialized exceptio...

5.3CVSS6AI score0.00401EPSS
SaveExploits1References5
osv_cve
osv_cve
•added 2026/10/19 10:33 a.m.•12 views

CVE-2026-85246 Apache Camel: Camel-Mina Information Disclosure via Unmuted Consumer Exceptions

Generation of Error Message Containing Sensitive Information vulnerability in Apache Camel Mina component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. When processing of an exchange failed, the Mina consumer wrote exchange.getException straight back over...

5.3CVSS5.9AI score
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2026/10/19 12:00 a.m.•8 views

PT-2026-117347

Generation of Error Message Containing Sensitive Information vulnerability in Apache Camel Mina component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. When processing of an exchange failed, the Mina consumer wrote exchange.getException straight back over...

5.3CVSS6AI score0.00401EPSS
SaveExploits1References6
Veracode
Veracode
•added 2024/04/11 2:59 a.m.•29 views

Denial Of Service (DoS)

Xpdf is vulnerable to Denial of Service DoS. The vulnerability is due to the TextLine class mishandling characters with large y coordinates, potentially leading to a Denial of Service DoS or other unspecified impacts...

7.8CVSS7.5AI score0.01625EPSS
SaveExploits1References3Affected Software1
SUSE CVE
SUSE CVE
•added 2023/02/15 5:13 a.m.•11 views

SUSE CVE-2015-7631

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213 allows attackers to execute arbitrary...

9.3CVSS8AI score0.07129EPSS
SaveExploits0References7
SUSE CVE
SUSE CVE
•added 2023/02/15 3:25 a.m.•9 views

SUSE CVE-2022-30524

There is an invalid memory access in the TextLine class in TextOutputDev.cc in Xpdf 4.0.4 because the text extractor mishandles characters at large y coordinates. It can be triggered by for example sending a crafted pdf file to the pdftotext binary, which allows a remote attacker to cause a Denia...

7.8CVSS8.1AI score0.01625EPSS
SaveExploits1References5
NVD
NVD
•added 2022/05/09 6:15 p.m.•28 views

CVE-2022-30524

There is an invalid memory access in the TextLine class in TextOutputDev.cc in Xpdf 4.0.4 because the text extractor mishandles characters at large y coordinates. It can be triggered by for example sending a crafted pdf file to the pdftotext binary, which allows a remote attacker to cause a Denia...

7.8CVSS0.01625EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2022/05/09 6:15 p.m.•10 views

CVE-2022-30524

There is an invalid memory access in the TextLine class in TextOutputDev.cc in Xpdf 4.0.4 because the text extractor mishandles characters at large y coordinates. It can be triggered by for example sending a crafted pdf file to the pdftotext binary, which allows a remote attacker to cause a Denia...

7.8CVSS6.8AI score0.01625EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2022/05/09 6:15 p.m.•12 views

CVE-2022-30524

There is an invalid memory access in the TextLine class in TextOutputDev.cc in Xpdf 4.0.4 because the text extractor mishandles characters at large y coordinates. It can be triggered by for example sending a crafted pdf file to the pdftotext binary, which allows a remote attacker to cause a Denia...

7.8CVSS6.8AI score0.01625EPSS
SaveExploits1References2
Prion
Prion
•added 2022/05/09 6:15 p.m.•27 views

Design/Logic Flaw

There is an invalid memory access in the TextLine class in TextOutputDev.cc in Xpdf 4.0.4 because the text extractor mishandles characters at large y coordinates. It can be triggered by for example sending a crafted pdf file to the pdftotext binary, which allows a remote attacker to cause a Denia...

6.8CVSS6AI score0.01625EPSS
SaveExploits1References1Affected Software1
UbuntuCve
UbuntuCve
•added 2022/05/09 6:15 p.m.•53 views

CVE-2022-30524

There is an invalid memory access in the TextLine class in TextOutputDev.cc in Xpdf 4.0.4 because the text extractor mishandles characters at large y coordinates. It can be triggered by for example sending a crafted pdf file to the pdftotext binary, which allows a remote attacker to cause a Denia...

7.8CVSS6.8AI score0.01625EPSS
SaveExploits1References2
osv_ubuntu
osv_ubuntu
•added 2022/05/09 6:15 p.m.•26 views

UBUNTU-CVE-2022-30524

There is an invalid memory access in the TextLine class in TextOutputDev.cc in Xpdf 4.0.4 because the text extractor mishandles characters at large y coordinates. It can be triggered by for example sending a crafted pdf file to the pdftotext binary, which allows a remote attacker to cause a Denia...

7.8CVSS6.8AI score0.01625EPSS
SaveExploits1References3
AlpineLinux
AlpineLinux
•added 2022/05/09 6:00 p.m.•118 views

CVE-2022-30524

There is an invalid memory access in the TextLine class in TextOutputDev.cc in Xpdf 4.0.4 because the text extractor mishandles characters at large y coordinates. It can be triggered by for example sending a crafted pdf file to the pdftotext binary, which allows a remote attacker to cause a Denia...

7.8CVSS6.2AI score0.01625EPSS
SaveExploits1
Mend
Mend
•added 2022/05/09 6:00 p.m.•3 views

CVE-2022-30524

There is an invalid memory access in the TextLine class in TextOutputDev.cc in Xpdf 4.0.4 because the text extractor mishandles characters at large y coordinates. It can be triggered by for example sending a crafted pdf file to the pdftotext binary, which allows a remote attacker to cause a Denia...

8.5CVSS0.01625EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2022/05/09 6:00 p.m.•47 views

CVE-2022-30524

There is an invalid memory access in the TextLine class in TextOutputDev.cc in Xpdf 4.0.4 because the text extractor mishandles characters at large y coordinates. It can be triggered by for example sending a crafted pdf file to the pdftotext binary, which allows a remote attacker to cause a Denia...

6.4AI score0.01625EPSS
SaveExploits1References1
Rows per page
Query Builder