dompdf project kayıtları
dompdf project üreticisine ait 18 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 1 · %5,6
- Pre-auth RCE
- 4
- Düzeltme kaydı olan
- %100
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-20 Improper Input Validation3
- CWE-400 Uncontrolled Resource Consumption2
- CWE-203 Observable Discrepancy1
- CWE-209 Generation of Error Message Containing Sensitive Information1
- CWE-436 Interpretation Conflict1
- CWE-502 Deserialization of Untrusted Data1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
18 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
64Bu hafta | CVE-2022-28368Silahlaştırılmış | Dompdf 1.2.1 allows remote code execution via a .php file in the src:url field of an @font-face Cascading Style Sheets (CSS) statement (withdompdf project · dompdf · CWE-79 | Kritik9,8 | — | %82,4 | 2 Nis 2022 |
40Planlayın | CVE-2023-23924Kavram kanıtı | URI validation failure on SVG parsing in Dompdfdompdf project · dompdf · CWE-551 | Kritik9,8 | — | %3,6 | 31 Oca 2023 |
40Planlayın | CVE-2023-24813İstismar yok | URI validation failure on SVG parsing. Bypass of CVE-2023-23924dompdf project · dompdf · CWE-436 | Kritik9,8 | — | %2,5 | 7 Şub 2023 |
39İzleyin | CVE-2021-3838İstismar yok | PHAR Deserialization in dompdf/dompdfdompdf project · dompdf · CWE-502 | Kritik9,8 | — | %1,4 | 15 Kas 2024 |
39İzleyin | CVE-2021-3902İstismar yok | Improper Restriction of XML External Entity Reference in dompdf/dompdfdompdf project · dompdf · CWE-611 | Kritik9,8 | — | %1,0 | 15 Kas 2024 |
36İzleyin | CVE-2014-5013İstismar yok | DOMPDF before 0.6.2 allows remote code execution, a related issue to CVE-2014-2383.dompdf project · dompdf | Yüksek8,8 | — | %4,5 | 10 Oca 2020 |
32İzleyin | CVE-2022-41343Kavram kanıtı | registerFont in FontMetrics.php in Dompdf before 2.0.1 allows remote file inclusion because a URI validation failure does not halt font regidompdf project · dompdf · CWE-552 | Yüksek7,5 | — | %6,0 | 25 Eyl 2022 |
30İzleyin | CVE-2023-50262İstismar yok | Dompdf possible DoS caused by infinite recursion when parsing SVG imagesdompdf project · dompdf · CWE-20 | Yüksek7,5 | — | %1,5 | 13 Ara 2023 |
26İzleyin | CVE-2014-5011İstismar yok | DOMPDF before 0.6.2 allows Information Disclosure.dompdf project · dompdf · CWE-200 | Orta6,5 | — | %1,5 | 10 Oca 2020 |
26İzleyin | CVE-2014-5012İstismar yok | DOMPDF before 0.6.2 allows denial of service.dompdf project · dompdf | Orta6,5 | — | %1,2 | 10 Oca 2020 |
25İzleyin | CVE-2026-59942İstismar yok | Dompdf: Denial of Service (DoS) via Resource Exhaustion using Oversized Image Bitmapsdompdf project · dompdf · CWE-400 | Orta6,3 | — | %0,9 | 28 Tem 2026 |
25İzleyin | CVE-2026-59941Kavram kanıtı | Dompdf: Uncontrolled resource consumption based on declared BMP dimensionsdompdf project · dompdf · CWE-400 | Orta6,3 | — | %0,6 | 28 Tem 2026 |
25İzleyin | CVE-2026-56722İstismar yok | Dompdf: Local file read due to improper file path validation in SVG images encoded as data-URIdompdf project · dompdf · CWE-20 | Orta6,3 | — | %0,4 | 28 Tem 2026 |
25İzleyin | CVE-2026-59943İstismar yok | Dompdf: Embedded SVG images can leak existence of files and directories within the filesystemdompdf project · dompdf · CWE-209 | Orta6,3 | — | %0,4 | 28 Tem 2026 |
21İzleyin | CVE-2022-2400İstismar yok | External Control of File Name or Path in dompdf/dompdfdompdf project · dompdf · CWE-73 | Orta5,3 | — | %1,2 | 18 Tem 2022 |
21İzleyin | CVE-2022-0085İstismar yok | Server-Side Request Forgery (SSRF) in dompdf/dompdfdompdf project · dompdf · CWE-918 | Orta5,3 | — | %1,0 | 28 Haz 2022 |
9İzleyin | CVE-2026-55555İstismar yok | Dompdf: File existence oracle via font-face stylesheet declarationdompdf project · dompdf · CWE-203 | Düşük2,3 | — | %0,5 | 28 Tem 2026 |
9İzleyin | CVE-2026-55554İstismar yok | Dompdf: Chroot Validation Bypassdompdf project · dompdf · CWE-20 | Düşük2,3 | — | %0,5 | 28 Tem 2026 |
- CVE-2022-2836864Bu hafta
Dompdf 1.2.1 allows remote code execution via a .php file in the src:url field of an @font-face Cascading Style Sheets (CSS) statement (with
KritikCVSS 9,8SilahlaştırılmışEPSS %82dompdf project · dompdf2 Nis 2022
- CVE-2023-2392440Planlayın
URI validation failure on SVG parsing in Dompdf
KritikCVSS 9,8Kavram kanıtıEPSS %4dompdf project · dompdf31 Oca 2023
- CVE-2023-2481340Planlayın
URI validation failure on SVG parsing. Bypass of CVE-2023-23924
KritikCVSS 9,8İstismar yokEPSS %2dompdf project · dompdf7 Şub 2023
- CVE-2021-383839İzleyin
PHAR Deserialization in dompdf/dompdf
KritikCVSS 9,8İstismar yokEPSS %1dompdf project · dompdf15 Kas 2024
- CVE-2021-390239İzleyin
Improper Restriction of XML External Entity Reference in dompdf/dompdf
KritikCVSS 9,8İstismar yokEPSS %1dompdf project · dompdf15 Kas 2024
- CVE-2014-501336İzleyin
DOMPDF before 0.6.2 allows remote code execution, a related issue to CVE-2014-2383.
YüksekCVSS 8,8İstismar yokEPSS %4dompdf project · dompdf10 Oca 2020
- CVE-2022-4134332İzleyin
registerFont in FontMetrics.php in Dompdf before 2.0.1 allows remote file inclusion because a URI validation failure does not halt font regi
YüksekCVSS 7,5Kavram kanıtıEPSS %6dompdf project · dompdf25 Eyl 2022
- CVE-2023-5026230İzleyin
Dompdf possible DoS caused by infinite recursion when parsing SVG images
YüksekCVSS 7,5İstismar yokEPSS %1dompdf project · dompdf13 Ara 2023
- CVE-2014-501126İzleyin
DOMPDF before 0.6.2 allows Information Disclosure.
OrtaCVSS 6,5İstismar yokEPSS %1dompdf project · dompdf10 Oca 2020
- CVE-2014-501226İzleyin
DOMPDF before 0.6.2 allows denial of service.
OrtaCVSS 6,5İstismar yokEPSS %1dompdf project · dompdf10 Oca 2020
- CVE-2026-5994225İzleyin
Dompdf: Denial of Service (DoS) via Resource Exhaustion using Oversized Image Bitmaps
OrtaCVSS 6,3İstismar yokEPSS %1dompdf project · dompdf28 Tem 2026
- CVE-2026-5994125İzleyin
Dompdf: Uncontrolled resource consumption based on declared BMP dimensions
OrtaCVSS 6,3Kavram kanıtıEPSS %1dompdf project · dompdf28 Tem 2026
- CVE-2026-5672225İzleyin
Dompdf: Local file read due to improper file path validation in SVG images encoded as data-URI
OrtaCVSS 6,3İstismar yokEPSS %0dompdf project · dompdf28 Tem 2026
- CVE-2026-5994325İzleyin
Dompdf: Embedded SVG images can leak existence of files and directories within the filesystem
OrtaCVSS 6,3İstismar yokEPSS %0dompdf project · dompdf28 Tem 2026
- CVE-2022-240021İzleyin
External Control of File Name or Path in dompdf/dompdf
OrtaCVSS 5,3İstismar yokEPSS %1dompdf project · dompdf18 Tem 2022
- CVE-2022-008521İzleyin
Server-Side Request Forgery (SSRF) in dompdf/dompdf
OrtaCVSS 5,3İstismar yokEPSS %1dompdf project · dompdf28 Haz 2022
- CVE-2026-555559İzleyin
Dompdf: File existence oracle via font-face stylesheet declaration
DüşükCVSS 2,3İstismar yokEPSS %1dompdf project · dompdf28 Tem 2026
- CVE-2026-555549İzleyin
Dompdf: Chroot Validation Bypass
DüşükCVSS 2,3İstismar yokEPSS %0dompdf project · dompdf28 Tem 2026