Read the docs

Aspose

Records9All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high7CVSS 7.0–8.9

Exploited now

Aspose records in CISA KEV

No Aspose vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Aspose.pdf For C++ 3 records MEDIUM Aspose.cells 2 records MEDIUM Aspose.words 1 record MEDIUM

Records

9 records

TI-2015-08114 CVE-2015-20124 · GHSA-4mm5-3w53-cwh2

Path traversal in Aspose Importer & Exporter WordPress plugin

Priority HIGH 77

Aspose Importer & Exporter plugin for WordPress before 3.0 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files via the unsanitized 'file' parameter.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00498 Published 2026-10-20 Fixed in 3.0 CWE-22
TI-2015-08113 CVE-2015-20123 · GHSA-fv35-wmpq-m6x4

Path traversal in Aspose Doc Exporter WordPress plugin lets attackers read files

Priority HIGH 77

Aspose Doc Exporter plugin for WordPress before 2.0 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files by passing unsanitized paths to readfile().

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00412 Published 2026-10-20 Fixed in 2.0 CWE-22
TI-2019-03528 CVE-2019-5067 · GHSA-4pg2-m5v4-8fpj

Use after free in Talos Aspose

Priority MEDIUM 48

An uninitialized memory access vulnerability exists in the way Aspose.PDF 19.2 for C++ handles invalid parent object pointers.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03443 Published 2019-09-18 No fix listed CWE-416
TI-2019-03527 CVE-2019-5066 · GHSA-jqg4-p627-84cf

Use after free in Talos Aspose

Priority MEDIUM 47

An exploitable use-after-free vulnerability exists in the way LZW-compressed streams are processed in Aspose.PDF 19.2 for C++.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02395 Published 2019-09-18 No fix listed CWE-416
TI-2019-03504 CVE-2019-5041 · GHSA-q4jc-m3mv-qhjx

Stack-based buffer overflow in Aspose

Priority MEDIUM 44

An exploitable Stack Based Buffer Overflow vulnerability exists in the EnumMetaInfo function of Aspose Aspose.Words library, version 18.11.0.0.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.03282 Published 2019-08-21 No fix listed CWE-121
TI-2019-03496 CVE-2019-5033 · GHSA-745w-9xh6-2w6f

Out-of-bounds read in Aspose

Priority MEDIUM 44

An exploitable out-of-bounds read vulnerability exists in the Number record parser of Aspose Aspose.Cells 19.1.0 library.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0314 Published 2019-08-21 No fix listed CWE-125
TI-2019-03495 CVE-2019-5032 · GHSA-h5jq-fppj-8wrr

Out-of-bounds read in Aspose

Priority MEDIUM 44

An exploitable out-of-bounds read vulnerability exists in the LabelSst record parser of Aspose Aspose.Cells 19.1.0 library.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0314 Published 2019-08-21 No fix listed CWE-125
TI-2015-08115 CVE-2015-20125 · GHSA-p7cr-5mhm-8gc2

Path traversal in Aspose PDF Exporter WordPress plugin lets attackers read files

Priority MEDIUM 44

Aspose PDF Exporter plugin for WordPress before 2.0 contains a path traversal vulnerability that allows unauthenticated attackers to download files through the unsanitized 'file' parameter passed to readfile().

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00412 Published 2026-10-20 Fixed in 2.0 CWE-22
TI-2019-03505 CVE-2019-5042 · GHSA-cf89-rm5v-j67r

Use after free in Talos Aspose.PDF for C++

Priority MEDIUM 42

An exploitable Use-After-Free vulnerability exists in the way FunctionType 0 PDF elements are processed in Aspose.PDF 19.2 for C++.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02078 Published 2019-09-18 No fix listed CWE-416
Open these records in search →