Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
a-pdf vulnerabilities and exploits
(subscribe to this query)
3.3
CVSSv3
CVE-2023-3436
Xpdf 4.04 will deadlock on a PDF object stream whose "Length" field is itself in another object stream.
Xpdfreader Xpdf 4.04
NA
CVE-2024-3248
In Xpdf 4.05 (and previous versions), a PDF object loop in the attachments leads to infinite recursion and a stack overflow.
NA
CVE-2024-4568
In Xpdf 4.05 (and previous versions), a PDF object loop in the PDF resources leads to infinite recursion and a stack overflow.
NA
CVE-2024-3247
In Xpdf 4.05 (and previous versions), a PDF object loop in an object stream leads to infinite recursion and a stack overflow.
9.8
CVSSv3
CVE-2020-36773
Artifex Ghostscript prior to 9.53.0 has an out-of-bounds write and use-after-free in devices/vector/gdevtxtw.c (for txtwrite) because a single character code in a PDF document can map to more than one Unicode code point (e.g., for a ligature).
Artifex Ghostscript 9.52
Artifex Ghostscript 9.53.0
Artifex Ghostscript 9.52.1
Artifex Ghostscript 9.51
5.5
CVSSv3
CVE-2023-2663
In Xpdf 4.04 (and previous versions), a PDF object loop in the page label tree leads to infinite recursion and a stack overflow.
Xpdfreader Xpdf
5.5
CVSSv3
CVE-2023-2664
In Xpdf 4.04 (and previous versions), a PDF object loop in the embedded file tree leads to infinite recursion and a stack overflow.
Xpdfreader Xpdf
5.4
CVSSv3
CVE-2023-43871
A File upload vulnerability in WBCE v.1.6.1 allows a local malicious user to upload a pdf file with hidden Cross Site Scripting (XSS).
Wbce Wbce Cms 1.6.1
5.4
CVSSv3
CVE-2023-43872
A File upload vulnerability in CMSmadesimple v.2.2.18 allows a local malicious user to upload a pdf file with hidden Cross Site Scripting (XSS).
Cmsmadesimple Cms Made Simple 2.2.18
5.5
CVSSv3
CVE-2023-36464
pypdf is an open source, pure-python PDF library. In affected versions an attacker may craft a PDF which leads to an infinite loop if `__parse_content_stream` is executed. That is, for example, the case if the user extracted text from such a PDF. This issue was introduced in pull...
Pypdf2 Project Pypdf2
Pypdf Project Pypdf
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-33572
CVE-2024-24919
CVE-2024-0230
CVE-2024-32714
HTML injection
local file inclusion
CVE-2024-31098
CVE-2024-31244
privilege
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
8
NEXT »