Filtered by vendor Pdfpatcher
Subscriptions
Filtered by product Pdfpatcher
Subscriptions
Total
2 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2025-63917 | 1 Pdfpatcher | 1 Pdfpatcher | 2025-11-20 | 7.1 High |
| PDFPatcher thru 1.1.3.4663 executable's XML bookmark import functionality does not restrict XML external entity (XXE) references. The application uses .NET's XmlDocument class without disabling external entity resolution, enabling attackers to: Read arbitrary files from the victim's filesystem, exfiltrate sensitive data via out-of-band (OOB) HTTP requests, perform SSRF attacks against internal network resources, or cause a denial of service via entity expansion attacks. | ||||
| CVE-2025-63918 | 1 Pdfpatcher | 1 Pdfpatcher | 2025-11-18 | 6.2 Medium |
| PDFPatcher executable does not validate user-supplied file paths, allowing directory traversal attacks allowing attackers to upload arbitrary files to arbitrary locations. | ||||
Page 1 of 1.