Lucene search
+L

867 matches found

SUSE CVE
SUSE CVE
•added 2026/04/17 11:25 p.m.•18 views

SUSE CVE-2026-40260

pypdf is a free and open-source pure-python PDF library. In versions prior to 6.10.0, manipulated XMP metadata entity declarations can exhaust RAM. An attacker who exploits this vulnerability can craft a PDF which leads to large memory usage. This requires parsing the XMP metadata. This issue has...

5.3CVSS5.6AI score0.00515EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/04/17 12:00 a.m.•26 views

pypdf 安全漏洞

pypdf is an open-source, free, and pure Python PDF library developed by py-pdf. It allows for splitting, merging, cropping, and converting pages of PDF files. Prior to version 6.10.0, pypdf had a security vulnerability. This vulnerability stemmed from the manipulated XMP metadata entity...

6.9CVSS5.8AI score0.00515EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/17 12:00 a.m.•6 views

CVE-2026-40260: Improper Restriction of Recursive Entity References in DTDs

pypdf is a free and open-source pure-python PDF library. In versions prior to 6.10.0, manipulated XMP metadata entity declarations can exhaust RAM. An attacker who exploits this vulnerability can craft a PDF which leads to large memory usage. This requires parsing the XMP metadata. This issue has...

6.9CVSS5.7AI score0.00515EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/04/17 12:00 a.m.•15 views

Linux Distros Unpatched Vulnerability : CVE-2026-40260

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pypdf is a free and open-source pure-python PDF library. In versions prior to 6.10.0, manipulated XMP metadata entity declarations can exhaust RAM. An attacker...

6.9CVSS5.8AI score0.00515EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2026/04/16 11:18 p.m.•10 views

CVE-2026-40260

pypdf is a free and open-source pure-python PDF library. In versions prior to 6.10.0, manipulated XMP metadata entity declarations can exhaust RAM. An attacker who exploits this vulnerability can craft a PDF which leads to large memory usage. This requires parsing the XMP metadata. This issue has...

6.9CVSS5.7AI score0.00515EPSS
SaveExploits0References5Affected Software1
OSV
OSV
•added 2026/04/16 11:18 p.m.•16 views

CVE-2026-40260 pypdf: Manipulated XMP metadata entity declarations can exhaust RAM

pypdf is a free and open-source pure-python PDF library. In versions prior to 6.10.0, manipulated XMP metadata entity declarations can exhaust RAM. An attacker who exploits this vulnerability can craft a PDF which leads to large memory usage. This requires parsing the XMP metadata. This issue has...

6.9CVSS5.8AI score
SaveExploits0References6
SUSE CVE
SUSE CVE
•added 2026/04/15 11:25 p.m.•15 views

SUSE CVE-2026-40311

ImageMagick is free and open-source software used for editing and manipulating digital images. Versions below 7.1.2-19 and 6.9.13-44 contain a heap use-after-free vulnerability that can cause a crash when reading and printing values from an invalid XMP profile. This issue has been fixed in versio...

5.5CVSS6AI score0.00184EPSS
SaveExploits0References8
EUVD
EUVD
•added 2026/04/14 6:51 p.m.•13 views

EUVD-2026-22130

ImageMagick has a heap-use-after-free via XMP profile could result in a crash when printing the values...

5.5CVSS5.8AI score0.00184EPSS
SaveExploits0References5
Snyk
Snyk
•added 2026/04/13 11:06 p.m.•15 views

Use After Free

Overview Magick.NET-Q8-OpenMP-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package ar...

6.8CVSS5.7AI score0.00184EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/04/13 11:06 p.m.•15 views

Use After Free

Overview Magick.NET-Q16-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

6.8CVSS5.7AI score0.00184EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/04/13 11:06 p.m.•13 views

Use After Free

Overview Magick.NET-Q16-HDRI-OpenMP-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this...

6.8CVSS5.7AI score0.00184EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/04/13 11:06 p.m.•17 views

Use After Free

Overview Magick.NET-Q16-OpenMP-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...

6.8CVSS5.7AI score0.00184EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/04/13 11:06 p.m.•29 views

Use After Free

Overview Magick.NET-Q16-OpenMP-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package a...

6.8CVSS5.7AI score0.00184EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/04/13 11:06 p.m.•18 views

Use After Free

Overview Magick.NET-Q16-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

6.8CVSS5.7AI score0.00184EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/04/13 11:06 p.m.•15 views

Use After Free

Overview Magick.NET-Q16-HDRI-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...

6.8CVSS5.7AI score0.00184EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/04/13 11:06 p.m.•12 views

Use After Free

Overview Magick.NET-Q8-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

6.8CVSS5.7AI score0.00184EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/04/13 11:06 p.m.•14 views

Use After Free

Overview Magick.NET-Q8-x86 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

6.8CVSS5.7AI score0.00184EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/04/13 11:06 p.m.•15 views

Use After Free

Overview Magick.NET-Q16-HDRI-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package a...

6.8CVSS5.7AI score0.00184EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/04/13 11:06 p.m.•14 views

Use After Free

Overview Magick.NET-Q16-HDRI-OpenMP-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this...

6.8CVSS5.7AI score0.00184EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/04/13 11:06 p.m.•16 views

Use After Free

Overview Magick.NET-Q8-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

6.8CVSS5.7AI score0.00184EPSS
SaveExploits0References2
Rows per page
Query Builder