3518 matches found
DEBIAN-CVE-2024-30204
In Emacs before 29.3, LaTeX preview is enabled by default for e-mail attachments...
AZL-37106 CVE-2024-30204 affecting package emacs for versions less than 29.3
In Emacs before 29.3, LaTeX preview is enabled by default for e-mail attachments...
CVE-2024-30204
In Emacs before 29.3, LaTeX preview is enabled by default for e-mail attachments...
CVE-2024-30204
In Emacs before 29.3, LaTeX preview is enabled by default for e-mail attachments...
UBUNTU-CVE-2024-30204
In Emacs before 29.3, LaTeX preview is enabled by default for e-mail attachments...
Emacs 安全漏洞
Gnu emacs is a family of text editors in the American GNU community. Gnu emacs suffers from a security vulnerability that stems from enabling LaTeX preview for email attachments by default. No details of the vulnerability are provided at this time...
CVE-2024-30204
In Emacs before 29.3, LaTeX preview is enabled by default for e-mail attachments...
CVE-2024-30204
CVE-2024-30204 (Emacs) affects Emacs before 29.3, where LaTeX preview is enabled by default for e‑mail attachments, potentially enabling denial of service. Connected advisories from multiple vendors confirm the issue and recommend upgrading Emacs to a version including the fix (≥29.3). In practic...
PT-2024-23253 · Emacs +7 · Emacs +7
Name of the Vulnerable Software and Affected Versions: Emacs versions prior to 29.3 Description: The issue is related to LaTeX preview being enabled by default for e-mail attachments in Emacs. This could potentially allow attackers to execute remote code. There is no information provided about th...
CVE-2024-30204
In Emacs before 29.3, LaTeX preview is enabled by default for e-mail attachments...
PT-2024-2371 · Phpmyfaq · Phpmyfaq
Name of the Vulnerable Software and Affected Versions: phpMyFAQ versions 8.1 and later Description: The issue is related to the lack of protection for the web page structure, allowing an attacker to conduct cross-site scripting XSS attacks using specially crafted .html files. An attacker with adm...
PT-2024-22799 · Phpmyfaq · Phpmyfaq
Name of the Vulnerable Software and Affected Versions: phpMyFAQ versions prior to 3.2.6 Description: There is a Path Traversal vulnerability in Attachments that allows attackers with admin rights to upload malicious files to other locations of the web root. This issue can be exploited by remote...
CVE-2024-30204
In Emacs before 29.3, LaTeX preview is enabled by default for e-mail attachments...
The vulnerability of the Kiwi TCMS testing system lies in its ability to allow unlimited loading of dangerous types of files. This allows attackers to upload arbitrary attachments to testing plans and test scenarios.
The vulnerability of the Kiwi TCMS testing system lies in its ability to load files of a malicious nature without limitation. Exploiting this vulnerability allows an attacker to upload arbitrary attachments to testing plans and test scenarios remotely...
The vulnerability of the Kiwi TCMS testing system lies in the lack of measures to protect the website structure. This allows attackers to upload arbitrary attachments to testing plans and test scenarios.
The vulnerability of the Kiwi TCMS testing system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to upload arbitrary attachments to testing plans and test scenarios...
PT-2024-22317
Name of the Vulnerable Software and Affected Versions WeasyPrint versions 61.0 through 61.1 Description WeasyPrint helps web developers to create PDF documents. Since version 61.0, there's a vulnerability which allows attaching content of arbitrary files and URLs to a generated PDF document, even...
Fedora: Security Advisory for jakarta-saaj (FEDORA-2024-129d8ca6fc)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 40 Update: jakarta-saaj-3.0.0-6.fc40
Jakarta SOAP with Attachments defines an API enabling developers to produce and consume messages conforming to the SOAP 1.1, SOAP 1.2, and SOAP Attachments Feature...
[SECURITY] Fedora 40 Update: jakarta-xml-ws-4.0.0-6.fc40
Jakarta XML Web Services defines a means for implementing XML-Based Web Services based on Jakarta SOAP with Attachments and Jakarta Web Services Metadata...
BIT-SUITECRM-2021-45903
A persistent cross-site scripting XSS issue in the web interface of SuiteCRM before 7.10.35, and 7.11.x and 7.12.x before 7.12.2, allows a remote attacker to introduce arbitrary JavaScript via attachments upload, a different vulnerability than CVE-2021-39267 and CVE-2021-39268...