CVE-2023-5200 | Medium | 6.4 | 2023-10-20 | The flowpaper plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'flipbook' shortcode in versions up to, and including, 2.0.3 due to insuffi… |
CVE-2023-40197 | Medium | 6.5 | 2023-09-04 | Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Devaldi Ltd flowpaper plugin <= 1.9.9 versions. |
CVE-2020-23879 | High | 7.5 | 2021-11-10 | pdf2json v0.71 was discovered to contain a NULL pointer dereference in the component ObjectStream::getObject. |
CVE-2020-23878 | Critical | 9.8 | 2021-11-10 | pdf2json v0.71 was discovered to contain a stack buffer overflow in the component XRef::fetch. |
CVE-2020-19475 | Medium | 5.5 | 2021-07-21 | An issue has been found in function CCITTFaxStream::lookChar in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an invalid write of siz… |
CVE-2020-19474 | Medium | 5.5 | 2021-07-21 | An issue has been found in function Gfx::doShowText in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an Use After Free . |
CVE-2020-19473 | Medium | 5.5 | 2021-07-21 | An issue has been found in function DCTStream::decodeImage in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an uncaught floating poin… |
CVE-2020-19472 | Medium | 5.5 | 2021-07-21 | An issue has been found in function DCTStream::readHuffSym in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an invalid read of size 2… |
CVE-2020-19471 | Medium | 5.5 | 2021-07-21 | An issue has been found in function DCTStream::decodeImage in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an invalid read of size 4… |
CVE-2020-19470 | Medium | 5.5 | 2021-07-21 | An issue has been found in function DCTStream::getChar in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to a NULL pointer dereference (i… |
CVE-2020-19469 | Medium | 5.5 | 2021-07-21 | An issue has been found in function DCTStream::reset in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an invalid write of size 8 . |
CVE-2020-19468 | Medium | 5.5 | 2021-07-21 | An issue has been found in function EmbedStream::getChar in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to a null pointer derefenrece… |
CVE-2020-19467 | Medium | 5.5 | 2021-07-21 | An issue has been found in function DCTStream::transformDataUnit in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an Illegal Use Afte… |
CVE-2020-19466 | Medium | 5.5 | 2021-07-21 | An issue has been found in function DCTStream::transformDataUnit in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an invalid read of… |
CVE-2020-19465 | Medium | 5.5 | 2021-07-21 | An issue has been found in function ObjectStream::getObject in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an invalid read of size… |
CVE-2020-19464 | Medium | 5.5 | 2021-07-21 | An issue has been found in function XRef::fetch in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to a stack overflow . |
CVE-2020-19463 | Medium | 5.5 | 2021-07-21 | An issue has been found in function vfprintf in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to a stack overflow. |
CVE-2020-18750 | High | 7.8 | 2021-02-05 | Buffer overflow in pdf2json 0.69 allows local users to execute arbitrary code by converting a crafted PDF file. |
CVE-2018-11686 | Critical | 9.8 | 2019-07-03 | The Publish Service in FlexPaper (later renamed FlowPaper) 2.3.6 allows remote code execution via setup.php and change_config.php. |
CVE-2018-14947 | High | 8.8 | 2018-08-05 | An issue has been found in PDF2JSON 0.69. XmlFontAccu::CSStyle in XmlFonts.cc has Mismatched Memory Management Routines (operator new [] versus operator delete… |
CVE-2018-14946 | High | 8.8 | 2018-08-05 | An issue has been found in PDF2JSON 0.69. The HtmlString class in ImgOutputDev.cc has Mismatched Memory Management Routines (malloc versus operator delete). |
CVE-2014-9678 | Medium | 6.1 | 2017-10-17 | FlexPaperViewer.swf in Flexpaper before 2.3.1 allows remote attackers to conduct content-spoofing attacks via the Swfile parameter. |
CVE-2014-9677 | Medium | 6.1 | 2017-10-17 | Cross-site scripting (XSS) vulnerability in FlexPaperViewer.swf in Flexpaper before 2.3.1 allows remote attackers to inject arbitrary web script or HTML via th… |