https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 05:43:23 +0000 https://cve.radiocsirt.org/vuln/bdu:2020-02659 bdu:2020-02659 https://cve.radiocsirt.org/vuln/bdu:2020-02659 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0556 certfr-2026-avi-0556 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0556 https://cve.radiocsirt.org/vuln/cnvd-2018-20305 cnvd-2018-20305 https://cve.radiocsirt.org/vuln/cnvd-2018-20305 https://cve.radiocsirt.org/vuln/euvd-2026-164249 EUVD-2026-164249 https://cve.radiocsirt.org/vuln/euvd-2026-164249 https://cve.radiocsirt.org/vuln/fkie_cve-2018-11797 <p>In Apache PDFBox 1.8.0 to 1.8.15 and 2.0.0RC1 to 2.0.11, a carefully crafted PDF file can trigger an extremely long running computation when parsing the page tree.</p> <p>In Apache PDFBox 1.8.0 to 1.8.15 and 2.0.0RC1 to 2.0.11, a carefully crafted PDF file can trigger an extremely long running computation when parsing the page tree.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-11797 https://cve.radiocsirt.org/vuln/ghsa-gx96-vgf7-hwfg <p><strong>Affected:</strong> Maven: org.apache.pdfbox:pdfbox</p> <p>In Apache PDFBox 1.8.0 to 1.8.15 and 2.0.0RC1 to 2.0.11, a carefully crafted PDF file can trigger an extremely long running computation when parsing the page tree.</p> <p><strong>Affected:</strong> Maven: org.apache.pdfbox:pdfbox</p> <p>In Apache PDFBox 1.8.0 to 1.8.15 and 2.0.0RC1 to 2.0.11, a carefully crafted PDF file can trigger an extremely long running computation when parsing the page tree.</p> https://cve.radiocsirt.org/vuln/ghsa-gx96-vgf7-hwfg https://cve.radiocsirt.org/vuln/gsd-2018-11797 gsd-2018-11797 https://cve.radiocsirt.org/vuln/gsd-2018-11797 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10622-1 <p>apache-pdfbox-2.0.23-1.3 on GA media</p> <p>apache-pdfbox-2.0.23-1.3 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:10622-1 https://cve.radiocsirt.org/vuln/rhsa-2020:3192 <p>netty: Infinite loop vulnerability when handling renegotiation using SslProvider.OpenSsl elasticsearch: Information exposure via _cluster/settings API pdfbox: unbounded computation in parser resulting in a denial of service vertx: WebSocket HTTP upgrade implementation holds the entire http request in memory before the handshake dom4j: XML Injection in Class: Element. Methods: addElement, addAttribute which can impact the integrity of XML documents mina-core: Retaining an open socket in close_notify SSL-TLS leading to Information disclosure. spring-data-jpa: Additional information exposure with Spring Data JPA derived queries HTTP/2: large amount of data requests leads to denial of service hawtio: server side request forgery via initial /proxy/ substring of a URI apache-commons-beanutils: does not suppresses the class property in PropertyUtilsBean by default jackson-mapper-asl: XML external entity similar to CVE-2016-3720 jackson-databind: polymorphic typing issue allows attacker to read arbitrary local files on the server. xml-security: Apache Santuario potentially loads XML parsing code from an untrusted source cxf: OpenId Connect token service does not properly validate the clientId jackson-databind: Serialization gadgets in com.zaxxer.hikari.HikariConfig undertow: possible Denial Of Service (DOS) in Undertow HTTP server listening on HTTPS jackson-databind: Serialization gadgets in classes of the commons-configuration package jackson-databind: Serialization gadgets in clas…</p> <p>netty: Infinite loop vulnerability when handling renegotiation using SslProvider.OpenSsl elasticsearch: Information exposure via _cluster/settings API pdfbox: unbounded computation in parser resulting in a denial of service vertx: WebSocket HTTP upgrade implementation holds the entire http request in memory before the handshake dom4j: XML Injection in Class: Element. Methods: addElement, addAttribute which can impact the integrity of XML documents mina-core: Retaining an open socket in close_notify SSL-TLS leading to Information disclosure. spring-data-jpa: Additional information exposure with Spring Data JPA derived queries HTTP/2: large amount of data requests leads to denial of service hawtio: server side request forgery via initial /proxy/ substring of a URI apache-commons-beanutils: does not suppresses the class property in PropertyUtilsBean by default jackson-mapper-asl: XML external entity similar to CVE-2016-3720 jackson-databind: polymorphic typing issue allows attacker to read arbitrary local files on the server. xml-security: Apache Santuario potentially loads XML parsing code from an untrusted source cxf: OpenId Connect token service does not properly validate the clientId jackson-databind: Serialization gadgets in com.zaxxer.hikari.HikariConfig undertow: possible Denial Of Service (DOS) in Undertow HTTP server listening on HTTPS jackson-databind: Serialization gadgets in classes of the commons-configuration package jackson-databind: Serialization gadgets in clas…</p> https://cve.radiocsirt.org/vuln/rhsa-2020:3192 https://cve.radiocsirt.org/vuln/suse-su-2018:3318-1 <p>Security update for apache-pdfbox</p> <p>Security update for apache-pdfbox</p> https://cve.radiocsirt.org/vuln/suse-su-2018:3318-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-11797 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: libpdfbox-java, Ubuntu:18.04:LTS: libpdfbox-java, Ubuntu:18.04:LTS: libpdfbox2-java</p> <p>In Apache PDFBox 1.8.0 to 1.8.15 and 2.0.0RC1 to 2.0.11, a carefully crafted PDF file can trigger an extremely long running computation when parsing the page tree.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: libpdfbox-java, Ubuntu:18.04:LTS: libpdfbox-java, Ubuntu:18.04:LTS: libpdfbox2-java</p> <p>In Apache PDFBox 1.8.0 to 1.8.15 and 2.0.0RC1 to 2.0.11, a carefully crafted PDF file can trigger an extremely long running computation when parsing the page tree.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-11797