İçeriğe atla
Noroxi

qpdf project kayıtları

qpdf project üreticisine ait 19 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
0
Düzeltme kaydı olan
%100
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 17
  2. 18
  3. 21
  4. 22
  5. 23
  6. 24

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

19 kayıt
  • CVE-2017-12595
    32İzleyin

    The tokenizer in QPDF 6.0.0 and 7.0.b1 is recursive for arrays and dictionaries, which allows remote attackers to cause a denial of service

    YüksekCVSS 7,8İstismar yokEPSS %1

    qpdf project · qpdf27 Ağu 2017

  • CVE-2018-9918
    32İzleyin

    libqpdf.a in QPDF through 8.0.2 mishandles certain "expected dictionary key but found non-name object" cases, allowing remote attackers to c

    YüksekCVSS 7,8İstismar yokEPSS %1

    qpdf project · qpdf10 Nis 2018

  • CVE-2022-34503
    26İzleyin

    QPDF v8.4.2 was discovered to contain a heap buffer overflow via the function QPDF::processXRefStream.

    OrtaCVSS 6,5İstismar yokEPSS %0

    qpdf project · qpdf22 Tem 2022

  • CVE-2017-9210
    22İzleyin

    libqpdf.a in QPDF 6.0.0 allows remote attackers to cause a denial of service (infinite recursion and stack consumption) via a crafted PDF do

    OrtaCVSS 5,5İstismar yokEPSS %1

    qpdf project · qpdf23 May 2017

  • CVE-2017-9209
    22İzleyin

    libqpdf.a in QPDF 6.0.0 allows remote attackers to cause a denial of service (infinite recursion and stack consumption) via a crafted PDF do

    OrtaCVSS 5,5İstismar yokEPSS %1

    qpdf project · qpdf23 May 2017

  • CVE-2017-9208
    22İzleyin

    libqpdf.a in QPDF 6.0.0 allows remote attackers to cause a denial of service (infinite recursion and stack consumption) via a crafted PDF do

    OrtaCVSS 5,5İstismar yokEPSS %1

    qpdf project · qpdf23 May 2017

  • CVE-2021-36978
    22İzleyin

    QPDF 9.x through 9.1.1 and 10.x through 10.0.4 has a heap-based buffer overflow in Pl_ASCII85Decoder::write (called from Pl_AES_PDF::flush a

    OrtaCVSS 5,5İstismar yokEPSS %1

    qpdf project · qpdf20 Tem 2021

  • CVE-2017-11626
    22İzleyin

    A stack-consumption vulnerability was found in libqpdf in QPDF 6.0.0, which allows attackers to cause a denial of service via a crafted file

    OrtaCVSS 5,5İstismar yokEPSS %1

    qpdf project · qpdf25 Tem 2017

  • CVE-2017-11625
    22İzleyin

    A stack-consumption vulnerability was found in libqpdf in QPDF 6.0.0, which allows attackers to cause a denial of service via a crafted file

    OrtaCVSS 5,5İstismar yokEPSS %1

    qpdf project · qpdf25 Tem 2017

  • CVE-2017-11624
    22İzleyin

    A stack-consumption vulnerability was found in libqpdf in QPDF 6.0.0, which allows attackers to cause a denial of service via a crafted file

    OrtaCVSS 5,5İstismar yokEPSS %1

    qpdf project · qpdf25 Tem 2017

  • CVE-2017-11627
    22İzleyin

    A stack-consumption vulnerability was found in libqpdf in QPDF 6.0.0, which allows attackers to cause a denial of service via a crafted file

    OrtaCVSS 5,5İstismar yokEPSS %1

    qpdf project · qpdf25 Tem 2017

  • CVE-2017-18183
    22İzleyin

    An issue was discovered in QPDF before 7.0.0.

    OrtaCVSS 5,5İstismar yokEPSS %1

    qpdf project · qpdf13 Şub 2018

  • CVE-2017-18186
    22İzleyin

    An issue was discovered in QPDF before 7.0.0.

    OrtaCVSS 5,5İstismar yokEPSS %1

    qpdf project · qpdf13 Şub 2018

  • CVE-2015-9252
    22İzleyin

    An issue was discovered in QPDF before 7.0.0.

    OrtaCVSS 5,5İstismar yokEPSS %1

    qpdf project · qpdf13 Şub 2018

  • CVE-2017-18185
    22İzleyin

    An issue was discovered in QPDF before 7.0.0.

    OrtaCVSS 5,5İstismar yokEPSS %1

    qpdf project · qpdf13 Şub 2018

  • CVE-2017-18184
    22İzleyin

    An issue was discovered in QPDF before 7.0.0.

    OrtaCVSS 5,5İstismar yokEPSS %0

    qpdf project · qpdf13 Şub 2018

  • CVE-2024-24246
    22İzleyin

    Heap Buffer Overflow vulnerability in qpdf 11.9.0 allows attackers to crash the application via the std::__shared_count() function at /bits/

    OrtaCVSS 5,5İstismar yokEPSS %0

    qpdf project · qpdf29 Şub 2024

  • CVE-2021-25786
    21İzleyin

    An issue was discovered in QPDF version 10.0.4, allows remote attackers to execute arbitrary code via crafted .pdf file to Pl_ASCII85Decoder

    OrtaCVSS 5,3İstismar yokEPSS %0

    qpdf project · qpdf11 Ağu 2023

  • CVE-2018-18020
    13İzleyin

    In QPDF 8.2.1, in libqpdf/QPDFWriter.cc, QPDFWriter::unparseObject and QPDFWriter::unparseChild have recursive calls for a long time, which

    DüşükCVSS 3,3İstismar yokEPSS %1

    qpdf project · qpdf6 Eki 2018