tcpdf project kayıtları
tcpdf project üreticisine ait 9 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %100
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2
- CWE-295 Improper Certificate Validation1
- CWE-434 Unrestricted Upload of File with Dangerous Type1
- CWE-552 Files or Directories Accessible to External Parties1
- CWE-668 Exposure of Resource to Wrong Sphere1
- CWE-80 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
9 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2024-56521İstismar yok | An issue was discovered in TCPDF before 6.8.0.tcpdf project · tcpdf · CWE-295 | Kritik9,8 | — | %0,7 | 27 Ara 2024 |
30İzleyin | CVE-2017-6100İstismar yok | tcpdf before 6.2.0 uploads files from the server generating PDF-files to an external FTP.tcpdf project · tcpdf · CWE-668 | Yüksek7,5 | — | %1,4 | 23 Şub 2017 |
30İzleyin | CVE-2024-22640Kavram kanıtı | TCPDF version <=6.6.5 is vulnerable to ReDoS (Regular Expression Denial of Service) if parsing an untrusted HTML page with a crafted color.tcpdf project · tcpdf · CWE-1333 | Yüksek7,5 | — | %1,3 | 19 Nis 2024 |
30İzleyin | CVE-2024-22641Kavram kanıtı | TCPDF version 6.6.5 and before is vulnerable to ReDoS (Regular Expression Denial of Service) if parsing an untrusted SVG file.tcpdf project · tcpdf · CWE-434 | Yüksek7,5 | — | %1,1 | 28 May 2024 |
30İzleyin | CVE-2024-56527İstismar yok | An issue was discovered in TCPDF before 6.8.0.tcpdf project · tcpdf · CWE-79 | Yüksek7,5 | — | %0,7 | 27 Ara 2024 |
30İzleyin | CVE-2024-56519İstismar yok | An issue was discovered in TCPDF before 6.8.0.tcpdf project · tcpdf · CWE-79 | Yüksek7,5 | — | %0,6 | 27 Ara 2024 |
30İzleyin | CVE-2024-56522İstismar yok | An issue was discovered in TCPDF before 6.8.0.tcpdf project · tcpdf · CWE-843 | Yüksek7,5 | — | %0,6 | 27 Ara 2024 |
24İzleyin | CVE-2024-51058İstismar yok | Local File Inclusion (LFI) vulnerability has been discovered in TCPDF 6.7.5.tcpdf project · tcpdf · CWE-552 | Orta6,2 | — | %0,8 | 26 Kas 2024 |
24İzleyin | CVE-2024-32489İstismar yok | TCPDF before 6.7.4 mishandles calls that use HTML syntax.tcpdf project · tcpdf · CWE-80 | Orta6,1 | — | %0,5 | 15 Nis 2024 |
- CVE-2024-5652139İzleyin
An issue was discovered in TCPDF before 6.8.0.
KritikCVSS 9,8İstismar yokEPSS %0tcpdf project · tcpdf27 Ara 2024
- CVE-2017-610030İzleyin
tcpdf before 6.2.0 uploads files from the server generating PDF-files to an external FTP.
YüksekCVSS 7,5İstismar yokEPSS %1tcpdf project · tcpdf23 Şub 2017
- CVE-2024-2264030İzleyin
TCPDF version <=6.6.5 is vulnerable to ReDoS (Regular Expression Denial of Service) if parsing an untrusted HTML page with a crafted color.
YüksekCVSS 7,5Kavram kanıtıEPSS %1tcpdf project · tcpdf19 Nis 2024
- CVE-2024-2264130İzleyin
TCPDF version 6.6.5 and before is vulnerable to ReDoS (Regular Expression Denial of Service) if parsing an untrusted SVG file.
YüksekCVSS 7,5Kavram kanıtıEPSS %1tcpdf project · tcpdf28 May 2024
- CVE-2024-5652730İzleyin
An issue was discovered in TCPDF before 6.8.0.
YüksekCVSS 7,5İstismar yokEPSS %0tcpdf project · tcpdf27 Ara 2024
- CVE-2024-5651930İzleyin
An issue was discovered in TCPDF before 6.8.0.
YüksekCVSS 7,5İstismar yokEPSS %0tcpdf project · tcpdf27 Ara 2024
- CVE-2024-5652230İzleyin
An issue was discovered in TCPDF before 6.8.0.
YüksekCVSS 7,5İstismar yokEPSS %0tcpdf project · tcpdf27 Ara 2024
- CVE-2024-5105824İzleyin
Local File Inclusion (LFI) vulnerability has been discovered in TCPDF 6.7.5.
OrtaCVSS 6,2İstismar yokEPSS %0tcpdf project · tcpdf26 Kas 2024
- CVE-2024-3248924İzleyin
TCPDF before 6.7.4 mishandles calls that use HTML syntax.
OrtaCVSS 6,1İstismar yokEPSS %0tcpdf project · tcpdf15 Nis 2024