Lucene search
+L

963 matches found

OpenVAS
OpenVAS
•added 2021/03/05 12:00 a.m.•29 views

Huawei EulerOS: Security Advisory for cairo (EulerOS-SA-2021-1428)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS5.8AI score0.01824EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2021/03/05 12:00 a.m.•22 views

Huawei EulerOS: Security Advisory for cairo (EulerOS-SA-2021-1547)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS6.9AI score0.01714EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2021/03/05 12:00 a.m.•33 views

Huawei EulerOS: Security Advisory for cairo (EulerOS-SA-2021-1461)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS6.3AI score0.02124EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2021/03/04 12:00 a.m.•33 views

EulerOS Virtualization for ARM 64 3.0.6.0 : cairo (EulerOS-SA-2021-1547)

According to the version of the cairo packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - cairo 1.16.0, in cairoftapplyvariations in cairo-ft-font.c, would free memory using a free function incompatible with...

6.5CVSS6.7AI score0.01714EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2021/02/13 12:00 a.m.•0 views

PT-2021-28083

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash caused by a bad-cast in the cairo truetype index to ucs4 function, which is called by cairo sub font glyph lookup unicode a...

5.8AI score
SaveExploits0References2
OSS-Fuzz
OSS-Fuzz
•added 2021/02/11 11:25 a.m.•28 views

poppler:annot_fuzzer: Bad-cast to tt_cmap_t' (aka 'struct _tt_cmap')_cairo_truetype_index_to_ucs4 in _cairo_sub_font_glyph_lookup_unicode

Project: https://anongit.freedesktop.org/git/poppler/poppler.git https://gitlab.freedesktop.org/poppler/poppler.git https://gitlab.freedesktop.org/ceyhunalp/poppler.git Detailed Report: https://oss-fuzz.com/testcase?key=6220717165248512 Project: poppler Fuzzing Engine: libFuzzer Fuzz Target:...

5.9AI score
SaveExploits0
OSS-Fuzz
OSS-Fuzz
•added 2021/02/06 2:28 p.m.•7 views

poppler:pdf_draw_fuzzer: Heap-buffer-overflow in _cairo_image_info_get_jpx_info

Project: https://anongit.freedesktop.org/git/poppler/poppler.git https://gitlab.freedesktop.org/poppler/poppler.git https://gitlab.freedesktop.org/ceyhunalp/poppler.git Detailed Report: https://oss-fuzz.com/testcase?key=5014860603719680 Project: poppler Fuzzing Engine: honggfuzz Fuzz Target:...

5.9AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2021/02/05 12:00 a.m.•35 views

EulerOS 2.0 SP9 : cairo (EulerOS-SA-2021-1243)

According to the version of the cairo package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - cairo 1.16.0, in cairoftapplyvariations in cairo-ft-font.c, would free memory using a free function incompatible with WebKit's fastMalloc, leading to...

6.5CVSS6.9AI score0.01714EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2021/02/05 12:00 a.m.•20 views

Huawei EulerOS: Security Advisory for cairo (EulerOS-SA-2021-1181)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS5.8AI score0.01824EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2021/02/05 12:00 a.m.•18 views

Huawei EulerOS: Security Advisory for cairo (EulerOS-SA-2021-1262)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS6.9AI score0.01714EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2021/02/05 12:00 a.m.•16 views

Huawei EulerOS: Security Advisory for cairo (EulerOS-SA-2021-1243)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS6.9AI score0.01714EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2021/02/05 12:00 a.m.•31 views

EulerOS 2.0 SP9 : cairo (EulerOS-SA-2021-1262)

According to the version of the cairo package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - cairo 1.16.0, in cairoftapplyvariations in cairo-ft-font.c, would free memory using a free function incompatible with WebKit's fastMalloc, leading to...

6.5CVSS6.9AI score0.01714EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2021/02/04 12:00 a.m.•28 views

EulerOS 2.0 SP5 : cairo (EulerOS-SA-2021-1181)

According to the version of the cairo packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Cairo version 1.15.4 is vulnerable to a NULL pointer dereference related to the FTLoadGlyph and FTRenderGlyph resulting in an application...

5.5CVSS5.9AI score0.01824EPSS
SaveExploits0References2
Mageia
Mageia
•added 2021/01/14 3:13 p.m.•57 views

Updated cairo packages fix a security vulnerability

LibreOffice slideshow aborts with stack smashing in cairo’s compositeboxes CVE-2020-35492...

7.8CVSS6.9AI score0.01102EPSS
SaveExploits0References2
OSV
OSV
•added 2021/01/14 3:13 p.m.•13 views

MGASA-2021-0028 Updated cairo packages fix a security vulnerability

LibreOffice slideshow aborts with stack smashing in cairo’s compositeboxes CVE-2020-35492...

7.8CVSS6.8AI score0.01102EPSS
SaveExploits0References3
OpenVAS
OpenVAS
•added 2021/01/11 12:00 a.m.•12 views

Debian: Security Advisory (DLA-2518-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS6.8AI score0.01102EPSS
SaveExploits0References4
OSS-Fuzz
OSS-Fuzz
•added 2021/01/08 3:59 p.m.•6 views

poppler:pdf_draw_fuzzer: Bad-cast to tt_cmap_t' (aka 'struct _tt_cmap')_cairo_truetype_index_to_ucs4 in _cairo_sub_font_glyph_lookup_unicode

Project: https://anongit.freedesktop.org/git/poppler/poppler.git https://gitlab.freedesktop.org/poppler/poppler.git https://gitlab.freedesktop.org/ceyhunalp/poppler.git Detailed Report: https://oss-fuzz.com/testcase?key=5408145941856256 Project: poppler Fuzzing Engine: libFuzzer Fuzz Target:...

5.9AI score
SaveExploits0
Prion
Prion
•added 2021/01/06 5:15 p.m.•29 views

Design/Logic Flaw

CairoSVG is a Python pypi package. CairoSVG is an SVG converter based on Cairo. In CairoSVG before version 2.5.1, there is a regular expression denial of service REDoS vulnerability. When processing SVG files, the python package CairoSVG uses two regular expressions which are vulnerable to Regula...

4.3CVSS5.4AI score0.01368EPSS
SaveExploits1References4Affected Software1
UbuntuCve
UbuntuCve
•added 2021/01/06 5:15 p.m.•37 views

CVE-2021-21236

CairoSVG is a Python pypi package. CairoSVG is an SVG converter based on Cairo. In CairoSVG before version 2.5.1, there is a regular expression denial of service REDoS vulnerability. When processing SVG files, the python package CairoSVG uses two regular expressions which are vulnerable to Regula...

5.7CVSS6.7AI score0.01368EPSS
SaveExploits1References6
attackerkb
attackerkb
•added 2021/01/06 5:15 p.m.•12 views

CVE-2021-21236

CairoSVG is a Python pypi package. CairoSVG is an SVG converter based on Cairo. In CairoSVG before version 2.5.1, there is a regular expression denial of service REDoS vulnerability. When processing SVG files, the python package CairoSVG uses two regular expressions which are vulnerable to Regula...

5.7CVSS6.6AI score0.01368EPSS
SaveExploits1References5Affected Software1
Rows per page
Query Builder