| 0 |
|
| 1 |
|
| 2 |
| url |
VCID-1uur-1hg7-c3gp |
| vulnerability_id |
VCID-1uur-1hg7-c3gp |
| summary |
Multiple vulnerabilities have been found in Poppler, allowing
remote attackers to execute arbitrary code or cause a Denial of Service
condition. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2013-4474 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.25399 |
| scoring_system |
epss |
| scoring_elements |
0.96337 |
| published_at |
2026-06-11T12:55:00Z |
|
| 1 |
| value |
0.25399 |
| scoring_system |
epss |
| scoring_elements |
0.96348 |
| published_at |
2026-06-12T12:55:00Z |
|
| 2 |
| value |
0.25399 |
| scoring_system |
epss |
| scoring_elements |
0.9635 |
| published_at |
2026-06-13T12:55:00Z |
|
| 3 |
| value |
0.25399 |
| scoring_system |
epss |
| scoring_elements |
0.96353 |
| published_at |
2026-06-14T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2013-4474 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
|
| fixed_packages |
|
| aliases |
CVE-2013-4474
|
| risk_score |
0.4 |
| exploitability |
2.0 |
| weighted_severity |
0.2 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-1uur-1hg7-c3gp |
|
| 3 |
|
| 4 |
| url |
VCID-2c88-4eqr-13hz |
| vulnerability_id |
VCID-2c88-4eqr-13hz |
| summary |
A flaw was found in Poppler's Splash backend. A remote attacker could exploit this vulnerability by crafting a malicious PDF file that, when rendered, triggers an integer overflow in the `tilingPatternFill` function. This overflow leads to an undersized heap memory allocation, allowing a subsequent out-of-bounds write. Successful exploitation could result in arbitrary code execution, information disclosure, or denial of service within the context of the application processing the PDF. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2026-10118 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00136 |
| scoring_system |
epss |
| scoring_elements |
0.33463 |
| published_at |
2026-06-14T12:55:00Z |
|
| 1 |
| value |
0.00136 |
| scoring_system |
epss |
| scoring_elements |
0.33285 |
| published_at |
2026-06-11T12:55:00Z |
|
| 2 |
| value |
0.00136 |
| scoring_system |
epss |
| scoring_elements |
0.33467 |
| published_at |
2026-06-12T12:55:00Z |
|
| 3 |
| value |
0.00136 |
| scoring_system |
epss |
| scoring_elements |
0.33488 |
| published_at |
2026-06-13T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2026-10118 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
|
| 17 |
|
| 18 |
|
|
| fixed_packages |
|
| aliases |
CVE-2026-10118
|
| risk_score |
3.5 |
| exploitability |
0.5 |
| weighted_severity |
7.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-2c88-4eqr-13hz |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
|
| 17 |
|
| 18 |
|
| 19 |
|
| 20 |
|
| 21 |
|
| 22 |
|
| 23 |
| url |
VCID-8qpz-9suz-nkas |
| vulnerability_id |
VCID-8qpz-9suz-nkas |
| summary |
Poppler and various KDE components are vulnerable to multiple memory
management issues possibly resulting in the execution of arbitrary code. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2007-5392 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.06485 |
| scoring_system |
epss |
| scoring_elements |
0.91299 |
| published_at |
2026-06-11T12:55:00Z |
|
| 1 |
| value |
0.06485 |
| scoring_system |
epss |
| scoring_elements |
0.91329 |
| published_at |
2026-06-12T12:55:00Z |
|
| 2 |
| value |
0.06485 |
| scoring_system |
epss |
| scoring_elements |
0.91337 |
| published_at |
2026-06-13T12:55:00Z |
|
| 3 |
| value |
0.06485 |
| scoring_system |
epss |
| scoring_elements |
0.91334 |
| published_at |
2026-06-14T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2007-5392 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
|
|
| fixed_packages |
|
| aliases |
CVE-2007-5392
|
| risk_score |
0.1 |
| exploitability |
0.5 |
| weighted_severity |
0.1 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-8qpz-9suz-nkas |
|
| 24 |
|
| 25 |
| url |
VCID-91re-rv3x-rqas |
| vulnerability_id |
VCID-91re-rv3x-rqas |
| summary |
In xpdf, the xref table contains an infinite loop which allows remote attackers to cause a denial of service (application crash) in xpdf-based PDF viewers. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2010-0207 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00443 |
| scoring_system |
epss |
| scoring_elements |
0.63774 |
| published_at |
2026-06-11T12:55:00Z |
|
| 1 |
| value |
0.00443 |
| scoring_system |
epss |
| scoring_elements |
0.63876 |
| published_at |
2026-06-12T12:55:00Z |
|
| 2 |
| value |
0.00443 |
| scoring_system |
epss |
| scoring_elements |
0.6389 |
| published_at |
2026-06-13T12:55:00Z |
|
| 3 |
| value |
0.00443 |
| scoring_system |
epss |
| scoring_elements |
0.63888 |
| published_at |
2026-06-14T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2010-0207 |
|
| 2 |
|
| 3 |
|
|
| fixed_packages |
|
| aliases |
CVE-2010-0207
|
| risk_score |
null |
| exploitability |
0.5 |
| weighted_severity |
0.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-91re-rv3x-rqas |
|
| 26 |
|
| 27 |
|
| 28 |
|
| 29 |
|
| 30 |
|
| 31 |
|
| 32 |
|
| 33 |
|
| 34 |
|
| 35 |
|
| 36 |
|
| 37 |
|
| 38 |
|
| 39 |
|
| 40 |
|
| 41 |
|
| 42 |
| url |
VCID-dj26-nk4s-7bfg |
| vulnerability_id |
VCID-dj26-nk4s-7bfg |
| summary |
In Poppler 0.59.0, memory corruption occurs in a call to Object::dictLookup() in Object.h after a repeating series of Gfx::display, Gfx::go, Gfx::execOp, Gfx::opFill, Gfx::doPatternFill, Gfx::doTilingPatternFill and Gfx::drawForm calls (aka a Gfx.cc infinite loop), a different vulnerability than CVE-2017-14519. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2017-14929 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00192 |
| scoring_system |
epss |
| scoring_elements |
0.41013 |
| published_at |
2026-06-11T12:55:00Z |
|
| 1 |
| value |
0.00192 |
| scoring_system |
epss |
| scoring_elements |
0.41179 |
| published_at |
2026-06-12T12:55:00Z |
|
| 2 |
| value |
0.00192 |
| scoring_system |
epss |
| scoring_elements |
0.412 |
| published_at |
2026-06-13T12:55:00Z |
|
| 3 |
| value |
0.00192 |
| scoring_system |
epss |
| scoring_elements |
0.4119 |
| published_at |
2026-06-14T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2017-14929 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
|
| fixed_packages |
|
| aliases |
CVE-2017-14929
|
| risk_score |
1.5 |
| exploitability |
0.5 |
| weighted_severity |
3.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-dj26-nk4s-7bfg |
|
| 43 |
|
| 44 |
| url |
VCID-e83m-gvkw-tkch |
| vulnerability_id |
VCID-e83m-gvkw-tkch |
| summary |
In Xpdf 4.01.01, a buffer over-read could be triggered in FoFiType1C::convertToType1 in fofi/FoFiType1C.cc when the index number is larger than the charset array bounds. It can, for example, be triggered by sending a crafted PDF document to the pdftops tool. It allows an attacker to use a crafted pdf file to cause Denial of Service or an information leak, or possibly have unspecified other impact. |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2019-12957 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00279 |
| scoring_system |
epss |
| scoring_elements |
0.51661 |
| published_at |
2026-06-11T12:55:00Z |
|
| 1 |
| value |
0.00279 |
| scoring_system |
epss |
| scoring_elements |
0.5179 |
| published_at |
2026-06-12T12:55:00Z |
|
| 2 |
| value |
0.00279 |
| scoring_system |
epss |
| scoring_elements |
0.51802 |
| published_at |
2026-06-13T12:55:00Z |
|
| 3 |
| value |
0.00279 |
| scoring_system |
epss |
| scoring_elements |
0.51787 |
| published_at |
2026-06-14T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2019-12957 |
|
| 1 |
|
|
| fixed_packages |
|
| aliases |
CVE-2019-12957
|
| risk_score |
null |
| exploitability |
0.5 |
| weighted_severity |
0.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-e83m-gvkw-tkch |
|
| 45 |
|
| 46 |
|
| 47 |
|
| 48 |
|
| 49 |
|
| 50 |
|
| 51 |
|
| 52 |
|
| 53 |
|
| 54 |
| url |
VCID-g84a-z8t1-8ud2 |
| vulnerability_id |
VCID-g84a-z8t1-8ud2 |
| summary |
The Adobe PDF specification 1.3, as implemented by (a) xpdf 3.0.1 patch 2, (b) kpdf in KDE before 3.5.5, (c) poppler before 0.5.4, and other products, allows remote attackers to have an unknown impact, possibly including denial of service (infinite loop), arbitrary code execution, or memory corruption, via a PDF file with a (1) crafted catalog dictionary or (2) a crafted Pages attribute that references an invalid page tree node. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2007-0104 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.16563 |
| scoring_system |
epss |
| scoring_elements |
0.95064 |
| published_at |
2026-06-11T12:55:00Z |
|
| 1 |
| value |
0.16563 |
| scoring_system |
epss |
| scoring_elements |
0.9508 |
| published_at |
2026-06-12T12:55:00Z |
|
| 2 |
| value |
0.16563 |
| scoring_system |
epss |
| scoring_elements |
0.95081 |
| published_at |
2026-06-13T12:55:00Z |
|
| 3 |
| value |
0.16563 |
| scoring_system |
epss |
| scoring_elements |
0.95083 |
| published_at |
2026-06-14T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2007-0104 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
|
| fixed_packages |
|
| aliases |
CVE-2007-0104
|
| risk_score |
0.1 |
| exploitability |
0.5 |
| weighted_severity |
0.1 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-g84a-z8t1-8ud2 |
|
| 55 |
|
| 56 |
|
| 57 |
|
| 58 |
|
| 59 |
|
| 60 |
|
| 61 |
| url |
VCID-j3mq-jrnz-aqec |
| vulnerability_id |
VCID-j3mq-jrnz-aqec |
| summary |
The JBIG2Stream::readSymbolDictSeg function in Poppler before 0.10.4 allows remote attackers to cause a denial of service (crash) via a PDF file that triggers a parsing error, which is not properly handled by JBIG2SymbolDict::~JBIG2SymbolDict and triggers an invalid memory dereference. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2009-0756 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.14855 |
| scoring_system |
epss |
| scoring_elements |
0.94674 |
| published_at |
2026-06-11T12:55:00Z |
|
| 1 |
| value |
0.14855 |
| scoring_system |
epss |
| scoring_elements |
0.94692 |
| published_at |
2026-06-12T12:55:00Z |
|
| 2 |
| value |
0.14855 |
| scoring_system |
epss |
| scoring_elements |
0.94699 |
| published_at |
2026-06-13T12:55:00Z |
|
| 3 |
| value |
0.14855 |
| scoring_system |
epss |
| scoring_elements |
0.94701 |
| published_at |
2026-06-14T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2009-0756 |
|
| 2 |
|
| 3 |
|
| 4 |
|
|
| fixed_packages |
|
| aliases |
CVE-2009-0756
|
| risk_score |
0.2 |
| exploitability |
2.0 |
| weighted_severity |
0.1 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-j3mq-jrnz-aqec |
|
| 62 |
|
| 63 |
|
| 64 |
|
| 65 |
|
| 66 |
|
| 67 |
|
| 68 |
| url |
VCID-kvrd-wcyy-wugd |
| vulnerability_id |
VCID-kvrd-wcyy-wugd |
| summary |
Multiple vulnerabilities have been discovered in Xpdf, GPdf, CUPS and
Poppler potentially resulting in the execution of arbitrary code. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2005-3191 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.03031 |
| scoring_system |
epss |
| scoring_elements |
0.8695 |
| published_at |
2026-06-11T12:55:00Z |
|
| 1 |
| value |
0.03031 |
| scoring_system |
epss |
| scoring_elements |
0.86996 |
| published_at |
2026-06-12T12:55:00Z |
|
| 2 |
| value |
0.03031 |
| scoring_system |
epss |
| scoring_elements |
0.87006 |
| published_at |
2026-06-13T12:55:00Z |
|
| 3 |
| value |
0.03031 |
| scoring_system |
epss |
| scoring_elements |
0.87002 |
| published_at |
2026-06-14T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2005-3191 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
|
| fixed_packages |
|
| aliases |
CVE-2005-3191
|
| risk_score |
null |
| exploitability |
0.5 |
| weighted_severity |
0.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-kvrd-wcyy-wugd |
|
| 69 |
|
| 70 |
| url |
VCID-maks-dh3b-s3ar |
| vulnerability_id |
VCID-maks-dh3b-s3ar |
| summary |
PDFKit and ImageKits are vulnerable to an integer overflow and a stack
overflow allowing for the user-assisted execution of arbitrary code. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2007-3387 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.25208 |
| scoring_system |
epss |
| scoring_elements |
0.96315 |
| published_at |
2026-06-11T12:55:00Z |
|
| 1 |
| value |
0.25208 |
| scoring_system |
epss |
| scoring_elements |
0.96326 |
| published_at |
2026-06-12T12:55:00Z |
|
| 2 |
| value |
0.25208 |
| scoring_system |
epss |
| scoring_elements |
0.96328 |
| published_at |
2026-06-13T12:55:00Z |
|
| 3 |
| value |
0.25208 |
| scoring_system |
epss |
| scoring_elements |
0.96331 |
| published_at |
2026-06-14T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2007-3387 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
|
| 17 |
|
|
| fixed_packages |
|
| aliases |
CVE-2007-3387
|
| risk_score |
0.1 |
| exploitability |
0.5 |
| weighted_severity |
0.2 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-maks-dh3b-s3ar |
|
| 71 |
|
| 72 |
|
| 73 |
|
| 74 |
| url |
VCID-myqv-mjx7-67hj |
| vulnerability_id |
VCID-myqv-mjx7-67hj |
| summary |
Multiple vulnerabilities have been discovered in Xpdf, GPdf, CUPS and
Poppler potentially resulting in the execution of arbitrary code. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2005-3193 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.03031 |
| scoring_system |
epss |
| scoring_elements |
0.8695 |
| published_at |
2026-06-11T12:55:00Z |
|
| 1 |
| value |
0.03031 |
| scoring_system |
epss |
| scoring_elements |
0.86996 |
| published_at |
2026-06-12T12:55:00Z |
|
| 2 |
| value |
0.03031 |
| scoring_system |
epss |
| scoring_elements |
0.87006 |
| published_at |
2026-06-13T12:55:00Z |
|
| 3 |
| value |
0.03031 |
| scoring_system |
epss |
| scoring_elements |
0.87002 |
| published_at |
2026-06-14T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2005-3193 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
|
| fixed_packages |
|
| aliases |
CVE-2005-3193
|
| risk_score |
null |
| exploitability |
0.5 |
| weighted_severity |
0.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-myqv-mjx7-67hj |
|
| 75 |
|
| 76 |
|
| 77 |
|
| 78 |
| url |
VCID-nuce-p2rd-4qg4 |
| vulnerability_id |
VCID-nuce-p2rd-4qg4 |
| summary |
xpdf and kpdf do not properly validate the "loca" table in PDF files, which allows local users to cause a denial of service (disk consumption and hang) via a PDF file with a "broken" loca table, which causes a large temporary file to be created when xpdf attempts to reconstruct the information. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2005-2097 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00072 |
| scoring_system |
epss |
| scoring_elements |
0.22026 |
| published_at |
2026-06-11T12:55:00Z |
|
| 1 |
| value |
0.00072 |
| scoring_system |
epss |
| scoring_elements |
0.22217 |
| published_at |
2026-06-12T12:55:00Z |
|
| 2 |
| value |
0.00072 |
| scoring_system |
epss |
| scoring_elements |
0.22228 |
| published_at |
2026-06-13T12:55:00Z |
|
| 3 |
| value |
0.00072 |
| scoring_system |
epss |
| scoring_elements |
0.22205 |
| published_at |
2026-06-14T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2005-2097 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
|
| fixed_packages |
|
| aliases |
CVE-2005-2097
|
| risk_score |
null |
| exploitability |
0.5 |
| weighted_severity |
0.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-nuce-p2rd-4qg4 |
|
| 79 |
|
| 80 |
|
| 81 |
|
| 82 |
|
| 83 |
|
| 84 |
|
| 85 |
|
| 86 |
|
| 87 |
|
| 88 |
|
| 89 |
|
| 90 |
|
| 91 |
|
| 92 |
|
| 93 |
|
| 94 |
|
| 95 |
|
| 96 |
|
| 97 |
|
| 98 |
|
| 99 |
|
| 100 |
| url |
VCID-u7rb-fd7b-yyfr |
| vulnerability_id |
VCID-u7rb-fd7b-yyfr |
| summary |
Multiple vulnerabilities have been discovered in Xpdf, GPdf, CUPS and
Poppler potentially resulting in the execution of arbitrary code. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2005-3192 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.12279 |
| scoring_system |
epss |
| scoring_elements |
0.94021 |
| published_at |
2026-06-11T12:55:00Z |
|
| 1 |
| value |
0.12279 |
| scoring_system |
epss |
| scoring_elements |
0.94041 |
| published_at |
2026-06-12T12:55:00Z |
|
| 2 |
| value |
0.12279 |
| scoring_system |
epss |
| scoring_elements |
0.94046 |
| published_at |
2026-06-13T12:55:00Z |
|
| 3 |
| value |
0.12279 |
| scoring_system |
epss |
| scoring_elements |
0.94048 |
| published_at |
2026-06-14T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2005-3192 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
|
| fixed_packages |
|
| aliases |
CVE-2005-3192
|
| risk_score |
0.1 |
| exploitability |
0.5 |
| weighted_severity |
0.1 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-u7rb-fd7b-yyfr |
|
| 101 |
|
| 102 |
| url |
VCID-upj3-4jjw-17aj |
| vulnerability_id |
VCID-upj3-4jjw-17aj |
| summary |
The FormWidgetChoice::loadDefaults function in Poppler before 0.10.4 allows remote attackers to cause a denial of service (crash) via a PDF file with an invalid Form Opt entry. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2009-0755 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.24435 |
| scoring_system |
epss |
| scoring_elements |
0.96232 |
| published_at |
2026-06-11T12:55:00Z |
|
| 1 |
| value |
0.24435 |
| scoring_system |
epss |
| scoring_elements |
0.96243 |
| published_at |
2026-06-12T12:55:00Z |
|
| 2 |
| value |
0.24435 |
| scoring_system |
epss |
| scoring_elements |
0.96246 |
| published_at |
2026-06-13T12:55:00Z |
|
| 3 |
| value |
0.24435 |
| scoring_system |
epss |
| scoring_elements |
0.96248 |
| published_at |
2026-06-14T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2009-0755 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
|
| fixed_packages |
|
| aliases |
CVE-2009-0755
|
| risk_score |
0.4 |
| exploitability |
2.0 |
| weighted_severity |
0.2 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-upj3-4jjw-17aj |
|
| 103 |
|
| 104 |
|
| 105 |
|
| 106 |
|
| 107 |
|
| 108 |
|
| 109 |
|
| 110 |
| url |
VCID-wrr1-g4pm-57am |
| vulnerability_id |
VCID-wrr1-g4pm-57am |
| summary |
Poppler and various KDE components are vulnerable to multiple memory
management issues possibly resulting in the execution of arbitrary code. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2007-4352 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.25229 |
| scoring_system |
epss |
| scoring_elements |
0.96317 |
| published_at |
2026-06-11T12:55:00Z |
|
| 1 |
| value |
0.25229 |
| scoring_system |
epss |
| scoring_elements |
0.96328 |
| published_at |
2026-06-12T12:55:00Z |
|
| 2 |
| value |
0.25229 |
| scoring_system |
epss |
| scoring_elements |
0.9633 |
| published_at |
2026-06-13T12:55:00Z |
|
| 3 |
| value |
0.25229 |
| scoring_system |
epss |
| scoring_elements |
0.96333 |
| published_at |
2026-06-14T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2007-4352 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
|
|
| fixed_packages |
|
| aliases |
CVE-2007-4352
|
| risk_score |
0.1 |
| exploitability |
0.5 |
| weighted_severity |
0.2 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-wrr1-g4pm-57am |
|
| 111 |
|
| 112 |
|
| 113 |
|
| 114 |
|
| 115 |
|
| 116 |
|
| 117 |
|
| 118 |
|
| 119 |
|
| 120 |
|
| 121 |
|
| 122 |
|
| 123 |
|
| 124 |
|
| 125 |
|
| 126 |
| url |
VCID-zmkr-y4ax-9ffc |
| vulnerability_id |
VCID-zmkr-y4ax-9ffc |
| summary |
Poppler and various KDE components are vulnerable to multiple memory
management issues possibly resulting in the execution of arbitrary code. |
| references |
| 0 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
|
| 17 |
|
| 18 |
|
| 19 |
|
| 20 |
|
|
| fixed_packages |
|
| aliases |
CVE-2007-5393
|
| risk_score |
0.1 |
| exploitability |
0.5 |
| weighted_severity |
0.1 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-zmkr-y4ax-9ffc |
|
| 127 |
|
| 128 |
|