98 matches found
Google Chrome < 84.0.4147.125 Multiple Vulnerabilities
The version of Google Chrome installed on the remote Windows host is prior to 84.0.4147.125. It is, therefore, affected by multiple vulnerabilities as referenced in the 202008stable-channel-update-for-desktop advisory. - Use after free in offline mode in Google Chrome on iOS prior to 84.0.4147.12...
CVE-2019-13966
In iTop through 2.6.0, an XSS payload can be delivered in certain fields such as icon of the XML file used to build the dashboard. This is similar to CVE-2015-6544 which is only about the dashboard title...
CVE-2019-6544
CVE-2019-6544 affects GE Communicator before 4.0.517. A service runs with SYSTEM privileges, enabling an unprivileged user to perform certain administrative actions and potentially execute scheduled scripts with SYSTEM privileges. Impact and exploitability are context-dependent: some advisories i...
CVE-2016-6544
getgps data in iTrack Easy can be modified without authentication by setting the data using the parametercmd:setothergps. This vulnerability can be exploited to alter the GPS data of a lost device...
CVE-2016-6544 iTrack Easy's getgps data can be modified without authentication
getgps data in iTrack Easy can be modified without authentication by setting the data using the parametercmd:setothergps. This vulnerability can be exploited to alter the GPS data of a lost device...
CVE-2016-6544
CVE-2016-6544 affects iTrack Easy and concerns a missing authentication for a critical function: the getgps data can be modified by setting the parameter cmd:setothergps, enabling an unauthenticated attacker to alter GPS data of a lost device. The connected documents confirm the root cause is lac...
[ASA-201805-12] zathura-pdf-mupdf: multiple issues
Arch Linux Security Advisory ASA-201805-12 ========================================== Severity: High Date : 2018-05-16 CVE-ID : CVE-2018-5686 CVE-2018-6187 CVE-2018-6192 CVE-2018-6544 CVE-2018-1000051 Package : zathura-pdf-mupdf Type : multiple issues Remote : Yes Link :...
[ASA-201805-8] llpp: multiple issues
Arch Linux Security Advisory ASA-201805-8 ========================================= Severity: High Date : 2018-05-10 CVE-ID : CVE-2018-5686 CVE-2018-6187 CVE-2018-6192 CVE-2018-6544 CVE-2018-1000051 Package : llpp Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-690...
[SECURITY] [DSA 4152-1] mupdf security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4152-1 [email protected] https://www.debian.org/security/ Luciano Bello March 27, 2018 https://www.debian.org/security/faq -...
[SECURITY] [DSA 4152-1] mupdf security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4152-1 [email protected] https://www.debian.org/security/ Luciano Bello March 27, 2018 https://www.debian.org/security/faq -...
Fedora 27 : mupdf (2018-da6f76b446)
CVE-2018-6192 CVE-2018-6544 CVE-2018-1000051 CVE-2018-6187 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...
Fedora Update for mupdf FEDORA-2018-da6f76b446
The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2015-6544
Cross-site scripting XSS vulnerability in application/dashboard.class.inc.php in Combodo iTop before 2.2.0-2459 allows remote attackers to inject arbitrary web script or HTML via a dashboard title...
CVE-2015-6544
CVE-2015-6544 affects Combodo iTop
openSUSE Security Update : mupdf (openSUSE-2018-149)
This update for mupdf fixes several issues. These security issues were fixed : - CVE-2018-6187: Prevent heap-based buffer overflow in the dopdfsavedocument function. Remote attackers could leverage the vulnerability to cause a denial of service via a crafted pdf file bsc1077407. - CVE-2018-6544:...
CVE-2018-6544
pdfloadobjstm in pdf/pdf-xref.c in Artifex MuPDF 1.12.0 could reference the object stream recursively and therefore run out of error stack, which allows remote attackers to cause a denial of service via a crafted PDF document...
CVE-2018-6544
pdfloadobjstm in pdf/pdf-xref.c in Artifex MuPDF 1.12.0 could reference the object stream recursively and therefore run out of error stack, which allows remote attackers to cause a denial of service via a crafted PDF document...
CVE-2018-6544
MuPDF 1.12.0 (Artifex MuPDF) contains CVE-2018-6544 in pdf_load_obj_stm (pdf/pdf-xref.c): object streams can be referenced recursively, causing exhaustion of the error stack and enabling a remote denial of service via a crafted PDF. Multiple Arch Linux advisories (ASA-201805-4/5/6/7/8) describe t...
CVE-2018-6544
pdfloadobjstm in pdf/pdf-xref.c in Artifex MuPDF 1.12.0 could reference the object stream recursively and therefore run out of error stack, which allows remote attackers to cause a denial of service via a crafted PDF document...