Lucene search
+L

6 matches found

PyPA
PyPA
•added 2026/07/13 3:02 p.m.•30 views

pypdf has long runtimes for wrong size values in cross-reference and object streams

ImpactAn attacker who uses this vulnerability can craft a PDF which leads to long runtimes. This requires cross-reference streams with wrong large /Size values or object streams with wrong large /N values. PatchesThis has been fixed in pypdf==6.10.1. WorkaroundsIf you cannot upgrade yet, consider...

6.9CVSS5.9AI score0.00515EPSS
SaveExploits0References8Affected Software1
Tenable Nessus
Tenable Nessus
•added 2026/04/23 12:00 a.m.•14 views

Linux Distros Unpatched Vulnerability : CVE-2026-41168

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pypdf is a free and open-source pure-python PDF library. An attacker who uses a vulnerability present in versions prior to 6.10.1 can craft a PDF which leads to...

6.9CVSS5.9AI score0.00515EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/04/22 8:49 p.m.•13 views

CVE-2026-41168 pypdf has possible long runtimes for wrong size values in cross-reference and object streams

pypdf is a free and open-source pure-python PDF library. An attacker who uses a vulnerability present in versions prior to 6.10.1 can craft a PDF which leads to long runtimes. This requires cross-reference streams with wrong large /Size values or object streams with wrong large /N values. This ha...

6.9CVSS5.8AI score0.00515EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
•added 2026/04/15 7:43 p.m.•46 views

pypdf has long runtimes for wrong size values in cross-reference and object streams

Impact An attacker who uses this vulnerability can craft a PDF which leads to long runtimes. This requires cross-reference streams with wrong large /Size values or object streams with wrong large /N values. Patches This has been fixed in pypdf==6.10.1. Workarounds If you cannot upgrade yet,...

6.9CVSS5.9AI score0.00515EPSS
SaveExploits0References6Affected Software1
GithubExploit
GithubExploit
•added 2025/10/31 6:30 a.m.•334 views

Exploit for Server-Side Request Forgery in Rocket.Chat

CVE-2024-39713: Rocket.Chat SSRF PoC Description A Server...

8.6CVSS8.7AI score0.03201EPSS
SaveExploits2
attackerkb
attackerkb
•added 2022/03/15 1:15 a.m.•18 views

CVE-2022-0944

Template injection in connection test endpoint leads to RCE in GitHub repository sqlpad/sqlpad prior to 6.10.1...

9.1CVSS7.4AI score0.08669EPSS
SaveExploits12References3
Rows per page
Query Builder