<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Tue, 29 Sep 2026 21:10:33 +0000</lastBuildDate>
    <item>
      <title>CERTFR-2019-AVI-023 — De multiples vulnérabilités ont été découvertes dans Oracle Sun Systems.
Certaines d'entre elles permettent à un attaqu…</title>
      <link>https://vulnerability.circl.lu/vuln/CERTFR-2019-AVI-023</link>
      <description>CERTFR-2019-AVI-023</description>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/CERTFR-2019-AVI-023</guid>
    </item>
    <item>
      <title>cnvd-2018-14229</title>
      <link>https://vulnerability.circl.lu/vuln/cnvd-2018-14229</link>
      <description>cnvd-2018-14229</description>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cnvd-2018-14229</guid>
    </item>
    <item>
      <title>fkie_cve-2018-13988</title>
      <link>https://vulnerability.circl.lu/vuln/fkie_cve-2018-13988</link>
      <description>&lt;p&gt;Poppler through 0.62 contains an out of bounds read vulnerability due to an incorrect memory access that is not mapped in its memory space, as demonstrated by pdfunite. This can result in memory corruption and denial of service. This may be exploitable when a victim opens a specially crafted PDF file.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;Poppler through 0.62 contains an out of bounds read vulnerability due to an incorrect memory access that is not mapped in its memory space, as demonstrated by pdfunite. This can result in memory corruption and denial of service. This may be exploitable when a victim opens a specially crafted PDF file.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/fkie_cve-2018-13988</guid>
    </item>
    <item>
      <title>GHSA-hj59-vghc-34x7</title>
      <link>https://vulnerability.circl.lu/vuln/ghsa-hj59-vghc-34x7</link>
      <description>&lt;p&gt;Poppler through 0.62 contains an out of bounds read vulnerability due to an incorrect memory access that is not mapped in its memory space, as demonstrated by pdfunite. This can result in memory corruption and denial of service. This may be exploitable when a victim opens a specially crafted PDF file.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;Poppler through 0.62 contains an out of bounds read vulnerability due to an incorrect memory access that is not mapped in its memory space, as demonstrated by pdfunite. This can result in memory corruption and denial of service. This may be exploitable when a victim opens a specially crafted PDF file.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/ghsa-hj59-vghc-34x7</guid>
    </item>
    <item>
      <title>gsd-2018-13988</title>
      <link>https://vulnerability.circl.lu/vuln/gsd-2018-13988</link>
      <description>gsd-2018-13988</description>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/gsd-2018-13988</guid>
    </item>
    <item>
      <title>openSUSE-SU-2021:3854-1 — Security update for poppler</title>
      <link>https://vulnerability.circl.lu/vuln/opensuse-su-2021:3854-1</link>
      <description>&lt;p&gt;Security update for poppler&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;Security update for poppler&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/opensuse-su-2021:3854-1</guid>
    </item>
    <item>
      <title>RHSA-2018:3140 — Red Hat Security Advisory: GNOME security, bug fix, and enhancement update</title>
      <link>https://vulnerability.circl.lu/vuln/rhsa-2018:3140</link>
      <description>&lt;p&gt;freetype: a heap-based buffer over-read in T1_Get_Private_Dict in type1/t1parse.c leading to crash freetype: mishandling ps_parser_skip_PS_token in an FT_New_Memory_Face operation in skip_comment, psaux/psobjs.c, leads to a buffer over-read gdk-pixbuf2: Heap overflow in the gdk_pixbuf__jpeg_image_load_increment function poppler: Infinite recursion in fofi/FoFiType1C.cc:FoFiType1C::cvtGlyph() function allows denial of service webkitgtk: memory corruption processing maliciously crafted web content webkitgtk: memory corruption processing maliciously crafted web content webkitgtk: memory corruption processing maliciously crafted web content libgxps: heap based buffer over read in ft_font_face_hash function of gxps-fonts.c libgxps: Stack-based buffer overflow in calling glib in gxps_images_guess_content_type of gcontenttype.c poppler: NULL pointer dereference in Annot.h:AnnotPath::getCoordsLength() allows for denial of service via crafted PDF webkitgtk: Improper TLS certificate verification for WebSocket connections webkitgtk: WebSockets don&amp;#39;t use system proxy settings libsoup: Crash in soup_cookie_jar.c:get_cookies() on empty hostnames poppler: out of bounds read in pdfunite accountsservice: insufficient path check in user_change_icon_file_authorized_cb() in user.c&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;freetype: a heap-based buffer over-read in T1_Get_Private_Dict in type1/t1parse.c leading to crash freetype: mishandling ps_parser_skip_PS_token in an FT_New_Memory_Face operation in skip_comment, psaux/psobjs.c, leads to a buffer over-read gdk-pixbuf2: Heap overflow in the gdk_pixbuf__jpeg_image_load_increment function poppler: Infinite recursion in fofi/FoFiType1C.cc:FoFiType1C::cvtGlyph() function allows denial of service webkitgtk: memory corruption processing maliciously crafted web content webkitgtk: memory corruption processing maliciously crafted web content webkitgtk: memory corruption processing maliciously crafted web content libgxps: heap based buffer over read in ft_font_face_hash function of gxps-fonts.c libgxps: Stack-based buffer overflow in calling glib in gxps_images_guess_content_type of gcontenttype.c poppler: NULL pointer dereference in Annot.h:AnnotPath::getCoordsLength() allows for denial of service via crafted PDF webkitgtk: Improper TLS certificate verification for WebSocket connections webkitgtk: WebSockets don&amp;#39;t use system proxy settings libsoup: Crash in soup_cookie_jar.c:get_cookies() on empty hostnames poppler: out of bounds read in pdfunite accountsservice: insufficient path check in user_change_icon_file_authorized_cb() in user.c&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/rhsa-2018:3140</guid>
    </item>
    <item>
      <title>SUSE-SU-2021:3854-1 — Security update for poppler</title>
      <link>https://vulnerability.circl.lu/vuln/suse-su-2021:3854-1</link>
      <description>&lt;p&gt;Security update for poppler&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;Security update for poppler&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/suse-su-2021:3854-1</guid>
    </item>
    <item>
      <title>UBUNTU-CVE-2018-13988</title>
      <link>https://vulnerability.circl.lu/vuln/ubuntu-cve-2018-13988</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Ubuntu:14.04:LTS: poppler, Ubuntu:16.04:LTS: poppler, Ubuntu:18.04:LTS: poppler&lt;/p&gt;
&lt;p&gt;Poppler through 0.62 contains an out of bounds read vulnerability due to an incorrect memory access that is not mapped in its memory space, as demonstrated by pdfunite. This can result in memory corruption and denial of service. This may be exploitable when a victim opens a specially crafted PDF file.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Ubuntu:14.04:LTS: poppler, Ubuntu:16.04:LTS: poppler, Ubuntu:18.04:LTS: poppler&lt;/p&gt;
&lt;p&gt;Poppler through 0.62 contains an out of bounds read vulnerability due to an incorrect memory access that is not mapped in its memory space, as demonstrated by pdfunite. This can result in memory corruption and denial of service. This may be exploitable when a victim opens a specially crafted PDF file.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/ubuntu-cve-2018-13988</guid>
    </item>
    <item>
      <title>WID-SEC-W-2023-1853 — poppler: Schwachstelle ermöglicht Denial of Service</title>
      <link>https://vulnerability.circl.lu/vuln/wid-sec-w-2023-1853</link>
      <description>&lt;p&gt;Ein entfernter, anonymer Angreifer kann eine Schwachstelle in poppler ausnutzen, um einen Denial of Service Angriff durchzuführen.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;Ein entfernter, anonymer Angreifer kann eine Schwachstelle in poppler ausnutzen, um einen Denial of Service Angriff durchzuführen.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/wid-sec-w-2023-1853</guid>
    </item>
  </channel>
</rss>
