Science-miner

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Science-miner records in CISA KEV

No Science-miner vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

5 records in Pdf2xml · all components

TI-2020-14701 CVE-2020-23877 · GHSA-j82r-h9wj-xwjh

MEDIUM 46

pdf2xml v2.0 was discovered to contain a stack buffer overflow in the component getObjectStream.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01762 Published 2021-11-10 No fix listed CWE-787

TI-2020-14699 CVE-2020-23874 · GHSA-pfrf-467v-cphj

MEDIUM 46

pdf2xml v2.0 was discovered to contain a heap-buffer overflow in the function TextPage::addAttributsNode.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02131 Published 2021-11-10 No fix listed CWE-787

TI-2020-14698 CVE-2020-23873 · GHSA-62fg-499r-jwch

MEDIUM 46

pdf2xml v2.0 was discovered to contain a heap-buffer overflow in the function TextPage::dump.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02131 Published 2021-11-10 No fix listed CWE-787

TI-2020-14700 CVE-2020-23876 · GHSA-5cqv-55pw-mrcp

LOW 36

pdf2xml v2.0 was discovered to contain a memory leak in the function TextPage::testLinkedText.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01406 Published 2021-11-10 No fix listed CWE-401

TI-2020-14697 CVE-2020-23872 · GHSA-52x5-63xf-5w3p

LOW 36

A NULL pointer dereference in the function TextPage::restoreState of pdf2xml v2.0 allows attackers to cause a denial of service (DoS).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01406 Published 2021-11-10 No fix listed CWE-476