14 matches found
CVE-2025-13283
creationtimestamp| type| source ---|---|--- 2025-11-17 04:32:43+00:00| seen| https://infosec.exchange/users/offseq/statuses/115563165229460729...
CVE-2024-13283
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal Facets allows Cross-Site Scripting XSS.This issue affects Facets: from 0.0.0 before 2.0.9...
CVE-2024-13283 Facets - Critical - Cross Site Scripting - SA-CONTRIB-2024-047
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal Facets allows Cross-Site Scripting XSS.This issue affects Facets: from 0.0.0 before 2.0.9...
SUSE: Security Advisory (SUSE-SU-2023:0494-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2023:0480-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE-SU-2023:0496-1 Security update for poppler
This update for poppler fixes the following issues: - CVE-2019-13283: Fixed heap-based buffer over-read that could be triggered by sending a crafted PDF document to the pdftotext tool bsc1140877...
SUSE-SU-2023:0494-1 Security update for poppler
This update for poppler fixes the following issues: - CVE-2022-38784: Fixed integer overflow in the JBIG2 decoder bsc1202692. - CVE-2019-13283: Fixed heap-based buffer over-read that could be triggered by sending a crafted PDF document to the pdftotext tool bsc1140877...
SUSE SLES15 / openSUSE 15 Security Update : poppler (SUSE-SU-2023:0480-1)
The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:0480-1 advisory. - In Xpdf 4.01.01, a heap-based buffer over-read could be triggered in strncpy from FoFiType1::parse in...
SUSE-SU-2023:0480-1 Security update for poppler
This update for poppler fixes the following issues: - CVE-2022-38784: Fixed integer overflow in the JBIG2 decoder bsc1202692. - CVE-2019-13283: Fixed heap-based buffer over-read that could be triggered by sending a crafted PDF document to the pdftotext tool bsc1140877...
CVE-2020-13283
CVE-2020-13283 affects GitLab installations prior to 13.0.12, 13.1.6, and 13.2.3. A cross-site scripting (XSS) vulnerability exists in the issues list via the milestone title, caused by insufficient validation of client-side data in the web application. The issue can permit execution of malicious...
CVE-2019-13283
creationtimestamp| type| source ---|---|--- 2019-07-04 23:00:01+00:00| seen| https://t.me/cveNotify/208...
CVE-2019-13283
CVE-2019-13283 affects Xpdf 4.01.01 and is a heap-based over-read in FoFiType1::parse (FoFiType1.cc) triggered by crafted PDFs; the source string length isn’t validated before a fixed-length strncpy copy, enabling potential Denial of Service or information leakage via crafted PDFs (pdftotext). Re...
CVE-2018-13283
CVE-2018-13283 affects the Synology SSL VPN Client before 1.2.5-0226. A vulnerability in client.cgi allows remote attackers to perform man-in-the-middle attacks using manipulated command, hostname, or port parameters. Impact per NVD is high (CVSS v3.0: 7.4) with high confidentiality and integrity...
CVE-2017-13283
CVE-2017-13283 affects Android devices via a flaw in the Bluetooth stack: in avrc_ctrl_pars_vendor_rsp of bluetooth avrcp_ctrl, there is a possible out-of-bounds write on the stack due to a missing bounds check. This could enable remote code execution with no privileges or user interaction requir...