[SECURITY] [DLA 3528-1] poppler security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3528-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk August 14, 2023 https://wiki.debian.org/LTS -...

Debian: Security Advisory (DLA-3528-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-36024

An issue was discovered in freedesktop poppler version 20.12.1, allows remote attackers to cause a denial of service DoS via crafted .pdf file to FoFiType1C::convertToType1 function...

CVE-2020-36024

An issue was discovered in freedesktop poppler version 20.12.1, allows remote attackers to cause a denial of service DoS via crafted .pdf file to FoFiType1C::convertToType1 function...

CVE-2020-36024

An issue was discovered in freedesktop poppler version 20.12.1, allows remote attackers to cause a denial of service DoS via crafted .pdf file to FoFiType1C::convertToType1 function...

CVE-2020-36024

CVE-2020-36024 affects freedesktop poppler, specifically version 20.12.1, where a NULL pointer dereference in FoFiType1C::convertToType1 can be exploited via a crafted PDF to trigger denial of service. The connected sources (MiracleLinux, Unity Linux, Debian, Rocky Linux, etc.) cite this vulnerab...

CVE-2022-36024

creationtimestamp| type| source ---|---|--- 2022-08-18 18:24:48+00:00| seen| https://t.me/cibsecurity/48358...

aa-market-manager (>=0.5.0a0 <=0.6.5a0), freem-bots (>=0.7.0 <=0.20.0) +5 more potentially affected by CVE-2022-36024 via py-cord (>=2.0.0 <=2.0.0rc1)

py-cord PYPI version =2.0.0, =0.5.0a0, =0.7.0, =0.1.0, =0.2.1 - marsbots-eden =0.1.0 - music-cord =2.0.2 - pycord-paging =1.0.0 - pydrocsid =2.2.0 Source cves: CVE-2022-36024 Source advisory: OSV:PYSEC-2022-43146...

CVE-2022-36024 Bots using py-cord as discord api wrapper are vulnerable to shutdowns through remote code execution

py-cord is a an API wrapper for Discord written in Python. Bots creating using py-cord version 2.0.0 are vulnerable to remote shutdown if they are added to the server with the application.commands scope without the bot scope. Currently, it appears that all public bots that use slash commands are...

CVE-2022-36024

CVE-2022-36024 affects py-cord, a Python Discord API wrapper used by bots. In version 2.0.0, bots added to a server with the application.commands scope without the bot scope are vulnerable to remote shutdown. The issue appears to affect public bots using slash commands. Remediation: upgrade to ve...

aa-market-manager (>=0.5.0a0 <=0.6.5a0), freem-bots (>=0.7.0 <=0.20.0) +5 more potentially affected by CVE-2022-36024 via py-cord (>=2.0.0 <=2.0.0rc1)

py-cord PYPI version =2.0.0, =0.5.0a0, =0.7.0, =0.1.0, =0.2.1 - marsbots-eden =0.1.0 - music-cord =2.0.2 - pycord-paging =1.0.0 - pydrocsid =2.2.0 Source cves: CVE-2022-36024 Source advisory: OSV:GHSA-QMHJ-M29V-GVMR...

CVE-2021-36024

Magento Commerce versions 2.4.2 and earlier, 2.4.2-p1 and earlier and 2.3.7 and earlier are affected by an Improper Neutralization of Special Elements Used In A Command via the Data collection endpoint. An attacker with admin privileges can upload a specially crafted file to achieve remote code...