xpdf xpdf
productUScpe:2.3:a:xpdf:xpdf:*:*:*:*:*:*:*:*
A product tracked in the threat graph; the vulnerabilities below are known to affect it.
0
KEV-listed
0
critical
by severity
0critical20high5medium1low
updated 2026-10-28
01
vulnerabilities (26)
Related CVEs.
| ID | severity | exploitable |
|---|---|---|
| CVE-2003-0434US | high7.5 | Exploit |
| CVE-2004-0888US | high10.0 | — |
| CVE-2005-0064US | high7.5 | — |
| CVE-2007-4352US | high7.6 | — |
| CVE-2004-1125US | high9.3 | — |
| CVE-2007-5392US | high9.3 | — |
| CVE-2007-5393US | high9.3 | — |
| CVE-2007-0104US | medium6.8 | — |
| CVE-2004-0889US | high10.0 | — |
| CVE-2005-3192US | high7.5 | — |
| CVE-2005-3627US | high7.5 | — |
| CVE-2006-0301US | high7.5 | — |
| CVE-2005-3628US | high7.5 | — |
| CVE-2005-3191US | medium5.1 | — |
| CVE-2005-3193US | medium5.1 | — |
| CVE-2005-3625US | high10.0 | — |
| CVE-2009-4035US | high9.3 | — |
| CVE-2005-3626US | medium5.0 | — |
| CVE-2006-0746US | high7.5 | — |
| CVE-2005-0206US | high7.5 | — |
| CVE-2000-0727US | high7.6 | — |
| CVE-2005-3624US | medium5.0 | — |
| CVE-2006-1244US | high7.6 | — |
| CVE-2002-1384US | high7.2 | — |
| CVE-2005-2097US | low2.1 | — |
| CVE-2000-0728US | high7.2OT elevated | — |
02
weaknesses (8)
The flaw types (CWEs) most of these CVEs share.
- CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer10 CVEs
- CWE-190Integer Overflow or Wraparound4 CVEs
- CWE-20Improper Input Validation3 CVEs
- CWE-200Exposure of Sensitive Information to an Unauthorized Actor2 CVEs
- CWE-399CWE-3992 CVEs
- CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')2 CVEs
- CWE-129Improper Validation of Array Index1 CVEs
- CWE-189CWE-1891 CVEs
03
sources (1)
Which sources assert this record, and when.
- USNVD / CVE26 CVEs
scry
Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.
Free scan