podofo project kayıtları
podofo project üreticisine ait 63 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 2
- Düzeltme kaydı olan
- %82,5
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-476 NULL Pointer Dereference21
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer10
- CWE-787 Out-of-bounds Write6
- CWE-125 Out-of-bounds Read6
- CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')4
- CWE-674 Uncontrolled Recursion3
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
63 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
40Planlayın | CVE-2015-8981İstismar yok | Heap-based buffer overflow in the PdfParser::ReadXRefSubsection function in base/PdfParser.cpp in PoDoFo allows attackers to have unspecifiepodofo project · podofo · CWE-119 | Kritik9,8 | — | %2,6 | 16 Mar 2017 |
40Planlayın | CVE-2019-9687İstismar yok | PoDoFo 0.9.6 has a heap-based buffer overflow in PdfString::ConvertUTF16toUTF8 in base/PdfString.cpp.podofo project · podofo · CWE-787 | Kritik9,8 | — | %2,2 | 11 Mar 2019 |
40Planlayın | CVE-2017-8378İstismar yok | Heap-based buffer overflow in the PdfParser::ReadObjects function in base/PdfParser.cpp in PoDoFo 0.9.5 allows remote attackers to cause a dpodofo project · podofo · CWE-119 | Kritik9,8 | — | %2,1 | 30 Nis 2017 |
37İzleyin | CVE-2018-8002Kavram kanıtı | In PoDoFo 0.9.5, there exists an infinite loop vulnerability in PdfParserObject::ParseFileComplete() in PdfParserObject.cpp which may resultpodofo project · podofo · CWE-835 | Yüksek8,8 | — | %8,0 | 9 Mar 2018 |
36İzleyin | CVE-2018-8000İstismar yok | In PoDoFo 0.9.5, there exists a heap-based buffer overflow vulnerability in PoDoFo::PdfTokenizer::GetNextToken() in PdfTokenizer.cpp, a relapodofo project · podofo · CWE-787 | Yüksek8,8 | — | %2,8 | 9 Mar 2018 |
36İzleyin | CVE-2019-9199İstismar yok | PoDoFo::Impose::PdfTranslator::setSource() in pdftranslator.cpp in PoDoFo 0.9.6 has a NULL pointer dereference that can (for example) be tripodofo project · podofo · CWE-476 | Yüksek8,8 | — | %2,5 | 26 Şub 2019 |
36İzleyin | CVE-2017-8787İstismar yok | The PoDoFo::PdfXRefStreamParserObject::ReadXRefStreamEntry function in base/PdfXRefStreamParserObject.cpp:224 in PoDoFo 0.9.5 allows remote podofo project · podofo · CWE-125 | Yüksek8,8 | — | %1,8 | 5 May 2017 |
35İzleyin | CVE-2018-19532İstismar yok | A NULL pointer dereference vulnerability exists in the function PdfTranslator::setTarget() in pdftranslator.cpp of PoDoFo 0.9.6, while creatpodofo project · podofo · CWE-476 | Yüksek8,8 | — | %1,6 | 25 Kas 2018 |
35İzleyin | CVE-2018-20751İstismar yok | An issue was discovered in crop_page in PoDoFo 0.9.6.podofo project · podofo · CWE-476 | Yüksek8,8 | — | %1,6 | 4 Şub 2019 |
35İzleyin | CVE-2023-31568İstismar yok | Podofo v0.10.0 was discovered to contain a heap buffer overflow via the component PoDoFo::PdfEncryptRC4::PdfEncryptRC4.podofo project · podofo · CWE-787 | Yüksek8,8 | — | %0,7 | 10 May 2023 |
35İzleyin | CVE-2023-31567İstismar yok | Podofo v0.10.0 was discovered to contain a heap buffer overflow via the component PoDoFo::PdfEncryptAESV3::PdfEncryptAESV3.podofo project · podofo · CWE-787 | Yüksek8,8 | — | %0,7 | 10 May 2023 |
35İzleyin | CVE-2023-31566İstismar yok | Podofo v0.10.0 was discovered to contain a heap-use-after-free via the component PoDoFo::PdfEncrypt::IsMetadataEncrypted().podofo project · podofo · CWE-416 | Yüksek8,8 | — | %0,7 | 10 May 2023 |
32İzleyin | CVE-2017-5886İstismar yok | Heap-based buffer overflow in the PoDoFo::PdfTokenizer::GetNextToken function in PdfTokenizer.cpp in PoDoFo 0.9.4 allows remote attackers topodofo project · podofo · CWE-119 | Yüksek7,8 | — | %1,6 | 1 Mar 2017 |
32İzleyin | CVE-2025-46205İstismar yok | A heap-use-after free in the PdfTokenizer::ReadDictionary function of podofo v0.10.0 to v0.10.5 allows attackers to cause a Denial of Servicpodofo project · podofo · CWE-416 | Yüksek8,1 | — | %0,3 | 1 Eki 2025 |
31İzleyin | CVE-2017-6844İstismar yok | Buffer overflow in the PoDoFo::PdfParser::ReadXRefSubsection function in PdfParser.cpp in PoDoFo 0.9.4 allows remote attackers to have unspepodofo project · podofo · CWE-119 | Yüksek7,8 | — | %1,5 | 15 Mar 2017 |
31İzleyin | CVE-2017-6843İstismar yok | Heap-based buffer overflow in the PoDoFo::PdfVariant::DelayedLoad function in PdfVariant.h in PoDoFo 0.9.4 allows remote attackers to have upodofo project · podofo · CWE-119 | Yüksek7,8 | — | %1,5 | 15 Mar 2017 |
31İzleyin | CVE-2017-5853İstismar yok | Integer overflow in base/PdfParser.cpp in PoDoFo 0.9.4 allows remote attackers to have unspecified impact via a crafted file.podofo project · podofo · CWE-190 | Yüksek7,8 | — | %1,3 | 1 Mar 2017 |
31İzleyin | CVE-2018-5308İstismar yok | PoDoFo 0.9.5 does not properly validate memcpy arguments in the PdfMemoryOutputStream::Write function (base/PdfOutputStream.cpp).podofo project · podofo · CWE-476 | Yüksek7,8 | — | %1,3 | 9 Oca 2018 |
31İzleyin | CVE-2018-8001İstismar yok | In PoDoFo 0.9.5, there exists a heap-based buffer over-read vulnerability in UnescapeName() in PdfName.cpp.podofo project · podofo · CWE-125 | Yüksek7,8 | — | %1,2 | 9 Mar 2018 |
31İzleyin | CVE-2018-12983İstismar yok | A stack-based buffer over-read in the PdfEncryptMD5Base::ComputeEncryptionKey() function in PdfEncrypt.cpp in PoDoFo 0.9.6-rc1 could be levepodofo project · podofo · CWE-125 | Yüksek7,8 | — | %0,9 | 29 Haz 2018 |
31İzleyin | CVE-2021-30472İstismar yok | A flaw was found in PoDoFo 0.9.7.podofo project · podofo · CWE-119 | Yüksek7,8 | — | %0,7 | 26 May 2021 |
27İzleyin | CVE-2017-7994İstismar yok | The function TextExtractor::ExtractText in TextExtractor.cpp:77 in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (NULL ppodofo project · podofo · CWE-476 | Orta6,5 | — | %2,6 | 21 Nis 2017 |
27İzleyin | CVE-2018-14320İstismar yok | This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of PoDoFo.podofo project · podofo · CWE-119 | Orta6,5 | — | %2,3 | 17 Eyl 2018 |
26İzleyin | CVE-2018-20797İstismar yok | An issue was discovered in PoDoFo 0.9.6.podofo project · podofo · CWE-119 | Orta6,5 | — | %1,3 | 27 Şub 2019 |
26İzleyin | CVE-2018-11256İstismar yok | An issue was discovered in PoDoFo 0.9.5.podofo project · podofo · CWE-476 | Orta6,5 | — | %1,3 | 18 May 2018 |
- CVE-2015-898140Planlayın
Heap-based buffer overflow in the PdfParser::ReadXRefSubsection function in base/PdfParser.cpp in PoDoFo allows attackers to have unspecifie
KritikCVSS 9,8İstismar yokEPSS %2podofo project · podofo16 Mar 2017
- CVE-2019-968740Planlayın
PoDoFo 0.9.6 has a heap-based buffer overflow in PdfString::ConvertUTF16toUTF8 in base/PdfString.cpp.
KritikCVSS 9,8İstismar yokEPSS %2podofo project · podofo11 Mar 2019
- CVE-2017-837840Planlayın
Heap-based buffer overflow in the PdfParser::ReadObjects function in base/PdfParser.cpp in PoDoFo 0.9.5 allows remote attackers to cause a d
KritikCVSS 9,8İstismar yokEPSS %2podofo project · podofo30 Nis 2017
- CVE-2018-800237İzleyin
In PoDoFo 0.9.5, there exists an infinite loop vulnerability in PdfParserObject::ParseFileComplete() in PdfParserObject.cpp which may result
YüksekCVSS 8,8Kavram kanıtıEPSS %8podofo project · podofo9 Mar 2018
- CVE-2018-800036İzleyin
In PoDoFo 0.9.5, there exists a heap-based buffer overflow vulnerability in PoDoFo::PdfTokenizer::GetNextToken() in PdfTokenizer.cpp, a rela
YüksekCVSS 8,8İstismar yokEPSS %2podofo project · podofo9 Mar 2018
- CVE-2019-919936İzleyin
PoDoFo::Impose::PdfTranslator::setSource() in pdftranslator.cpp in PoDoFo 0.9.6 has a NULL pointer dereference that can (for example) be tri
YüksekCVSS 8,8İstismar yokEPSS %2podofo project · podofo26 Şub 2019
- CVE-2017-878736İzleyin
The PoDoFo::PdfXRefStreamParserObject::ReadXRefStreamEntry function in base/PdfXRefStreamParserObject.cpp:224 in PoDoFo 0.9.5 allows remote
YüksekCVSS 8,8İstismar yokEPSS %1podofo project · podofo5 May 2017
- CVE-2018-1953235İzleyin
A NULL pointer dereference vulnerability exists in the function PdfTranslator::setTarget() in pdftranslator.cpp of PoDoFo 0.9.6, while creat
YüksekCVSS 8,8İstismar yokEPSS %1podofo project · podofo25 Kas 2018
- CVE-2018-2075135İzleyin
An issue was discovered in crop_page in PoDoFo 0.9.6.
YüksekCVSS 8,8İstismar yokEPSS %1podofo project · podofo4 Şub 2019
- CVE-2023-3156835İzleyin
Podofo v0.10.0 was discovered to contain a heap buffer overflow via the component PoDoFo::PdfEncryptRC4::PdfEncryptRC4.
YüksekCVSS 8,8İstismar yokEPSS %0podofo project · podofo10 May 2023
- CVE-2023-3156735İzleyin
Podofo v0.10.0 was discovered to contain a heap buffer overflow via the component PoDoFo::PdfEncryptAESV3::PdfEncryptAESV3.
YüksekCVSS 8,8İstismar yokEPSS %0podofo project · podofo10 May 2023
- CVE-2023-3156635İzleyin
Podofo v0.10.0 was discovered to contain a heap-use-after-free via the component PoDoFo::PdfEncrypt::IsMetadataEncrypted().
YüksekCVSS 8,8İstismar yokEPSS %0podofo project · podofo10 May 2023
- CVE-2017-588632İzleyin
Heap-based buffer overflow in the PoDoFo::PdfTokenizer::GetNextToken function in PdfTokenizer.cpp in PoDoFo 0.9.4 allows remote attackers to
YüksekCVSS 7,8İstismar yokEPSS %1podofo project · podofo1 Mar 2017
- CVE-2025-4620532İzleyin
A heap-use-after free in the PdfTokenizer::ReadDictionary function of podofo v0.10.0 to v0.10.5 allows attackers to cause a Denial of Servic
YüksekCVSS 8,1İstismar yokEPSS %0podofo project · podofo1 Eki 2025
- CVE-2017-684431İzleyin
Buffer overflow in the PoDoFo::PdfParser::ReadXRefSubsection function in PdfParser.cpp in PoDoFo 0.9.4 allows remote attackers to have unspe
YüksekCVSS 7,8İstismar yokEPSS %1podofo project · podofo15 Mar 2017
- CVE-2017-684331İzleyin
Heap-based buffer overflow in the PoDoFo::PdfVariant::DelayedLoad function in PdfVariant.h in PoDoFo 0.9.4 allows remote attackers to have u
YüksekCVSS 7,8İstismar yokEPSS %1podofo project · podofo15 Mar 2017
- CVE-2017-585331İzleyin
Integer overflow in base/PdfParser.cpp in PoDoFo 0.9.4 allows remote attackers to have unspecified impact via a crafted file.
YüksekCVSS 7,8İstismar yokEPSS %1podofo project · podofo1 Mar 2017
- CVE-2018-530831İzleyin
PoDoFo 0.9.5 does not properly validate memcpy arguments in the PdfMemoryOutputStream::Write function (base/PdfOutputStream.cpp).
YüksekCVSS 7,8İstismar yokEPSS %1podofo project · podofo9 Oca 2018
- CVE-2018-800131İzleyin
In PoDoFo 0.9.5, there exists a heap-based buffer over-read vulnerability in UnescapeName() in PdfName.cpp.
YüksekCVSS 7,8İstismar yokEPSS %1podofo project · podofo9 Mar 2018
- CVE-2018-1298331İzleyin
A stack-based buffer over-read in the PdfEncryptMD5Base::ComputeEncryptionKey() function in PdfEncrypt.cpp in PoDoFo 0.9.6-rc1 could be leve
YüksekCVSS 7,8İstismar yokEPSS %0podofo project · podofo29 Haz 2018
- CVE-2021-3047231İzleyin
A flaw was found in PoDoFo 0.9.7.
YüksekCVSS 7,8İstismar yokEPSS %0podofo project · podofo26 May 2021
- CVE-2017-799427İzleyin
The function TextExtractor::ExtractText in TextExtractor.cpp:77 in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (NULL p
OrtaCVSS 6,5İstismar yokEPSS %2podofo project · podofo21 Nis 2017
- CVE-2018-1432027İzleyin
This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of PoDoFo.
OrtaCVSS 6,5İstismar yokEPSS %2podofo project · podofo17 Eyl 2018
- CVE-2018-2079726İzleyin
An issue was discovered in PoDoFo 0.9.6.
OrtaCVSS 6,5İstismar yokEPSS %1podofo project · podofo27 Şub 2019
- CVE-2018-1125626İzleyin
An issue was discovered in PoDoFo 0.9.5.
OrtaCVSS 6,5İstismar yokEPSS %1podofo project · podofo18 May 2018