TI-2024-37414 CVE-2024-56527 · GHSA-qx95-cwh6-9mvq
Cross-site scripting in Tecnick tcpdf
Priority MEDIUM 40
An issue was discovered in TCPDF before 6.8.0.
Vulnerabilities
9 records
TI-2024-37409 CVE-2024-56522 · GHSA-w95c-7994-ghpr
Type confusion in Tecnick tcpdf
Priority MEDIUM 40
An issue was discovered in TCPDF before 6.8.0.
TI-2024-37408 CVE-2024-56521 · GHSA-9mgx-552f-59p6
Improper certificate validation in Tecnick tcpdf
Priority MEDIUM 50
An issue was discovered in TCPDF before 6.8.0.
TI-2024-37406 CVE-2024-56519 · GHSA-4p8j-vhjm-6pvw
Cross-site scripting in Tecnick tcpdf
Priority MEDIUM 40
An issue was discovered in TCPDF before 6.8.0.
TI-2024-34223 CVE-2024-51058 · GHSA-rmv2-8jjc-23xw
Local File Inclusion (LFI) vulnerability has been discovered in TCPDF 6.7.5.
Priority LOW 29
Local File Inclusion (LFI) vulnerability has been discovered in TCPDF 6.7.5.
TI-2024-15092 CVE-2024-22641
TCPDF version 6.6.5 and before is vulnerable to ReDoS (Regular Expression Denial of…
Priority HIGH 72
TCPDF version 6.6.5 and before is vulnerable to ReDoS (Regular Expression Denial of Service) if parsing an untrusted SVG file.
TI-2024-15091 CVE-2024-22640 · GHSA-mx3p-fhpw-x6rv
TCPDF version <=6.6.5 is vulnerable to ReDoS (Regular Expression Denial of Service) if…
Priority MEDIUM 42
TCPDF version <=6.6.5 is vulnerable to ReDoS (Regular Expression Denial of Service) if parsing an untrusted HTML page with a crafted color.
TI-2024-21382 CVE-2024-32489 · GHSA-g9wg-98c2-qv3v
TCPDF before 6.7.4 mishandles calls that use HTML syntax.
Priority LOW 28
TCPDF before 6.7.4 mishandles calls that use HTML syntax.
TI-2017-03998 CVE-2017-6100 · GHSA-xv34-wq27-w2wm
tcpdf before 6.2.0 uploads files from the server generating PDF-files to an external FTP.
Priority LOW 36
tcpdf before 6.2.0 uploads files from the server generating PDF-files to an external FTP.