102 matches found
Xpdf Stack Depletion Vulnerability
Xpdf is a free PDF viewer and toolkit that includes a text extractor, image converter, HTML converter and more. A stack consumption vulnerability exists in the FoFiType1C::getOp function in Xpdf 4.02. The vulnerability stems from a failure to correctly reference a subroutine in a Type 1C font...
CVE-2020-35376
Xpdf 4.02 allows stack consumption because of an incorrect subroutine reference in a Type 1C font charstring, related to the FoFiType1C::getOp function...
CVE-2020-35376
Xpdf 4.02 allows stack consumption because of an incorrect subroutine reference in a Type 1C font charstring, related to the FoFiType1C::getOp function...
Design/Logic Flaw
Xpdf 4.02 allows stack consumption because of an incorrect subroutine reference in a Type 1C font charstring, related to the FoFiType1C::getOp function...
CVE-2020-35376
Xpdf 4.02 allows stack consumption because of an incorrect subroutine reference in a Type 1C font charstring, related to the FoFiType1C::getOp function...
CVE-2020-35376
Xpdf 4.02 allows stack consumption because of an incorrect subroutine reference in a Type 1C font charstring, related to the FoFiType1C::getOp function...
CVE-2020-35376
Xpdf 4.02 allows stack consumption because of an incorrect subroutine reference in a Type 1C font charstring, related to the FoFiType1C::getOp function...
CVE-2020-35376
CVE-2020-35376 affects Xpdf 4.02, where FoFiType1C::getOp() misreferences a subroutine in a Type 1C font string, causing stack consumption. The Gentoo GLSA (GLSA-202405-18) recommends upgrading to Xpdf 4.04 or newer to fix the vulnerability. No exploitation details are provided in the connected d...
Xpdf 缓冲区错误漏洞
Xpdf is a free PDF viewer and toolkit that includes a text extractor, image converter, HTML converter and more. A stack consumption vulnerability exists in the FoFiType1C::getOp function in Xpdf 4.02. The vulnerability stems from a failure to correctly reference a subroutine in a Type 1C font...
Security fix for the ALT Linux 8 package postgresql11-1C version 11.10-alt0.M80P.1
Nov. 17, 2020 Alexei Takaseev 11.10-alt0.M80P.1 - 11.10 Fixes CVE-2020-25694, CVE-2020-25695, CVE-2020-25696 - Re-applay patch from 1C...
Security fix for the ALT Linux 9 package postgresql12-1C version 12.5-alt1
Nov. 16, 2020 Alexei Takaseev 12.5-alt1 - 12.5 Fixes CVE-2020-25694, CVE-2020-25695, CVE-2020-25696 - Re-applay patch from 1C...
1c-yar.ru Cross Site Scripting vulnerability OBB-1466611
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
kapitanhotels.1c-hotel.online Cross Site Scripting vulnerability OBB-1458095
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Security fix for the ALT Linux 8 package postgresql11-1C version 11.9-alt0.M80P.1
11.9-alt0.M80P.1 built Aug. 20, 2020 Alexei Takaseev in task 256188 Aug. 12, 2020 Alexei Takaseev - 11.9 Fixes CVE-2020-14349, CVE-2020-14350...
Mail.ru: Bitbucket public repo leaking credentials from the 1C Enterprise system used by Samokat
Application configuration data related to Samokat project was leaked on github.com...
Security fix for the ALT Linux 9 package postgresql12-1C version 11.9-alt1
Aug. 12, 2020 Alexei Takaseev 11.9-alt1 - 11.9 Fixes CVE-2020-14349, CVE-2020-14350...
Mail.ru: Открытая админка 1C эмулятора
Staging testing versions of 1C-emulator and Adminer interfaces was available from external network without authentication on geekbrains.ru. This interfaces had no access to production data...
Security fix for the ALT Linux 8 package postgresql11-1C version 11.5-alt0.M80P.4
11.5-alt0.M80P.4 built Feb. 25, 2020 Alexei Takaseev in task 245913 Feb. 12, 2020 Alexei Takaseev - Fix priv checks for ALTER <object DEPENDS ON EXTENSION Fixes CVE-2020-1720...