https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 18:40:38 +0000 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0957 certfr-2025-avi-0957 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0957 https://cve.radiocsirt.org/vuln/euvd-2026-249274 EUVD-2026-249274 https://cve.radiocsirt.org/vuln/euvd-2026-249274 https://cve.radiocsirt.org/vuln/fkie_cve-2025-54869 <p>FPDI is a collection of PHP classes that facilitate reading pages from existing PDF documents and using them as templates in FPDF. In versions 2.6.2 and below, any application that uses FPDI to process user-supplied PDF files is at risk, causing a Denial of Service (DoS) vulnerability. An attacker can upload a small, malicious PDF file that will cause the server-side script to crash due to memory exhaustion. Repeated attacks can lead to sustained service unavailability. This issue is fixed in version 2.6.3.</p> <p>FPDI is a collection of PHP classes that facilitate reading pages from existing PDF documents and using them as templates in FPDF. In versions 2.6.2 and below, any application that uses FPDI to process user-supplied PDF files is at risk, causing a Denial of Service (DoS) vulnerability. An attacker can upload a small, malicious PDF file that will cause the server-side script to crash due to memory exhaustion. Repeated attacks can lead to sustained service unavailability. This issue is fixed in version 2.6.3.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-54869 https://cve.radiocsirt.org/vuln/ghsa-jxhh-4648-vpp3 <p><strong>Affected:</strong> Packagist: setasign/fpdi</p> <p>### Impact This is a significant Denial of Service (DoS) vulnerability. Any application that uses FPDI to process user-supplied PDF files is at risk. An attacker can upload a small, malicious PDF file that will cause the server-side script to crash due to memory exhaustion. Repeated attacks can lead to sustained service unavailability.</p> <p>### Patches Fixed as of version 2.6.4</p> <p>### Workarounds No.</p> <p><strong>Affected:</strong> Packagist: setasign/fpdi</p> <p>### Impact This is a significant Denial of Service (DoS) vulnerability. Any application that uses FPDI to process user-supplied PDF files is at risk. An attacker can upload a small, malicious PDF file that will cause the server-side script to crash due to memory exhaustion. Repeated attacks can lead to sustained service unavailability.</p> <p>### Patches Fixed as of version 2.6.4</p> <p>### Workarounds No.</p> https://cve.radiocsirt.org/vuln/ghsa-jxhh-4648-vpp3 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-54869 <p><strong>Affected:</strong> Ubuntu:22.04:LTS: icingaweb2-module-pdfexport, Ubuntu:24.04:LTS: icingaweb2-module-pdfexport, Ubuntu:25.10: icingaweb2-module-pdfexport, Ubuntu:26.04:LTS: icingaweb2-module-pdfexport</p> <p>FPDI is a collection of PHP classes that facilitate reading pages from existing PDF documents and using them as templates in FPDF. In versions 2.6.2 and below, any application that uses FPDI to process user-supplied PDF files is at risk, causing a Denial of Service (DoS) vulnerability. An attacker can upload a small, malicious PDF file that will cause the server-side script to crash due to memory exhaustion. Repeated attacks can lead to sustained service unavailability. This issue is fixed in version 2.6.3.</p> <p><strong>Affected:</strong> Ubuntu:22.04:LTS: icingaweb2-module-pdfexport, Ubuntu:24.04:LTS: icingaweb2-module-pdfexport, Ubuntu:25.10: icingaweb2-module-pdfexport, Ubuntu:26.04:LTS: icingaweb2-module-pdfexport</p> <p>FPDI is a collection of PHP classes that facilitate reading pages from existing PDF documents and using them as templates in FPDF. In versions 2.6.2 and below, any application that uses FPDI to process user-supplied PDF files is at risk, causing a Denial of Service (DoS) vulnerability. An attacker can upload a small, malicious PDF file that will cause the server-side script to crash due to memory exhaustion. Repeated attacks can lead to sustained service unavailability. This issue is fixed in version 2.6.3.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-54869 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2272 <p>Ein Angreifer kann mehrere Schwachstellen in Moodle ausnutzen, um Sicherheitsvorkehrungen zu umgehen, und um Informationen offenzulegen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Moodle ausnutzen, um Sicherheitsvorkehrungen zu umgehen, und um Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2272