Most recent entries from all

certfr-2026-avi-0556 — De multiples vulnérabilités ont été découvertes dans les produits VMware. Elles permettent à un attaquant de provoquer…

certfr-2026-avi-0556

cnvd-2021-42397

EUVD-2026-27655

fkie_cve-2021-31811

In Apache PDFBox, a carefully crafted PDF file can trigger an OutOfMemory-Exception while loading the file. This issue affects Apache PDFBox version 2.0.23 and prior 2.0.x versions.

GHSA-fg3j-q579-v8x4 — Uncontrolled memory consumption

Affected: Maven: org.apache.pdfbox:pdfbox, Maven: org.apache.pdfbox:pdfbox-parent

In Apache PDFBox, a carefully crafted PDF file can trigger an OutOfMemory-Exception while loading the file. This issue affects Apache PDFBox version 2.0.23 and prior 2.0.x versions.

gsd-2021-31811

OESA-2021-1256 — pdfbox security update

Affected: openEuler:20.03-LTS-SP1: pdfbox

Apache PDFBox is an open source Java PDF library for working with PDF documents. This project allows creation of new PDF documents, manipulation of existing documents and the ability to extract content from documents. Apache PDFBox also includes several command line utilities. Apache PDFBox is published under the Apache License v2.0. Security Fix(es): In Apache PDFBox, a carefully crafted PDF file can trigger an OutOfMemory-Exception while loading the file. This issue affects Apache PDFBox version 2.0.23 and prior 2.0.x versions.(CVE-2021-31811)

In Apache PDFBox, a carefully crafted PDF file can trigger an infinite loop while loading the file. This issue affects Apache PDFBox version 2.0.23 and prior 2.0.x versions.(CVE-2021-31812)

RHSA-2021:3205 — Red Hat Security Advisory: Red Hat Integration Camel-K 1.4 release and security update

activemq: improper authentication allows MITM attack cxf: XSS via the styleSheetPath apache-flink: directory traversal attack allows remote file writing through the REST API groovy: OS temporary directory leads to information disclosure XStream: remote code execution due to insecure XML deserialization when relying on blocklists cron-utils: template injection allows attackers to inject arbitrary Java EL expressions leading to remote code execution XStream: Server-Side Forgery Request vulnerability can be activated when unmarshalling XStream: arbitrary file deletion on the local host when unmarshalling californium-core: DTLS - DoS vulnerability for certificate based handshakes undertow: special character in query results in server errors bouncycastle: password bypass in OpenBSDBCrypt.checkPassword utility possible kotlin: vulnerable Java API was used for temporary file and folder creation which could result in information disclosure fabric8-kubernetes-client: vulnerable to a path traversal leading to integrity and availability compromise spring-web: (re)creating the temporary storage directory could result in a privilege escalation within WebFlux application pdfbox: infinite loop while loading a crafted PDF file pdfbox: OutOfMemory-Exception while loading a crafted PDF file CXF: Denial of service vulnerability in parsing JSON via JsonMapObjectReaderWriter pdfbox: OutOfMemory-Exception while loading a crafted PDF file

UBUNTU-CVE-2021-31811

Affected: Ubuntu:16.04:LTS: libpdfbox-java, Ubuntu:18.04:LTS: libpdfbox-java, Ubuntu:18.04:LTS: libpdfbox2-java, Ubuntu:20.04:LTS: libpdfbox-java, Ubuntu:20.04:LTS: libpdfbox2-java, Ubuntu:22.04:LTS: libpdfbox-java, Ubuntu:22.04:LTS: libpdfbox2-java, Ubuntu:24.04:LTS: libpdfbox-java, Ubuntu:24.04:LTS: libpdfbox2-java, Ubuntu:25.10: libpdfbox-java and 3 more

In Apache PDFBox, a carefully crafted PDF file can trigger an OutOfMemory-Exception while loading the file. This issue affects Apache PDFBox version 2.0.23 and prior 2.0.x versions.

WID-SEC-W-2024-0156 — IBM Business Automation Workflow: Mehrere Schwachstellen

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in IBM Business Automation Workflow ausnutzen, um einen Denial of Service Angriff durchzuführen und beliebigen Code zur Ausführung zu bringen.