14574 matches found
Debian dla-3620 : gir1.2-poppler-0.18 - security update
The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3620 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3620-1 [email protected]...
Qualcomm Embedded Software Use-After-Free
The vulnerability of embedded software developed for Qualcomm chips lies in the lack of utilization of the assert function. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
WordPress Plugin Embedded Calendly Cross-Site Scripting Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...
Qualcomm data modems Data Access
The vulnerability of embedded Qualcomm data modems is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to gain access to read, modify, add, or delete data remotely...
Qualcomm Pointer Overflow
The vulnerability of microprogramming software in embedded Qualcomm chips is related to the pointer shifting beyond the allocated memory space. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Adobe Bridge Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Bridge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...
Adobe Bridge Font Parsing Use-After-Free Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Bridge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...
October 10, 2023—KB5031427 (Security-only update)
None None...
October 10, 2023—KB5031419 (Monthly Rollup)
None None...
October 10, 2023—KB5031442 (Monthly Rollup)
None None...
October 10, 2023—KB5031408 (Monthly Rollup)
None None...
October 10, 2023—KB5031407 (Security-only update)
None None...
Denial Of Service (DoS)
libpoppler is vulnerable to Denial of Service DoS. The vulnerability is due to the PDFDoc::replacePageDict inPDFDoc.cc, which allows an attacker to cause an application crash by saving an embedded file...
October 10, 2023-Security and Quality Rollup for .NET Framework 3.5.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Embedded 7 Standard and Windows Server 2008 R2 SP1 (KB5031226)
October 10, 2023-Security and Quality Rollup for .NET Framework 3.5.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Embedded 7 Standard and Windows Server 2008 R2 SP1 KB5031226 Applies to: Microsoft .NET Framework 3.5.1 Microsoft .NET Framework 4.6.2 Microsoft .NET Framework 4.7 Microsoft .NET...
Dell EMC AppSync Access Control Error Vulnerability
Dell EMC AppSync is a replication data management software from Dell, Inc. It provides a simple self-service, SLA-driven approach to protecting, recovering and cloning critical Microsoft and Oracle applications and VMware environments. An Access Control Error vulnerability exists in Dell EMC...
embedded in Qualcomm products Data Compromise
The vulnerability of embedded Qualcomm software relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information through calls to the IOCTL munmap command...
SUSE SLED15: libpoppler-cpp0 / libpoppler-cpp0-32bit / libpoppler-devel / etc (SUSE-SU-2023:3947-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:3947-1 advisory. - CVE-2022-37050: Fixed denial-of-service via savePageAs in PDFDoc.c bsc1214622. - CVE-2022-3705...
PT-2023-5953 · Qualcomm · Qualcomm Embedded Platform
Name of the Vulnerable Software and Affected Versions: Qualcomm embedded platform affected versions not specified Description: The issue is related to a transient Denial of Service DOS in the modem when triggering a camping on a 5G cell. It is also associated with a software vulnerability in...
CVE-2023-32458
Dell AppSync, versions 4.4.0.0 to 4.6.0.0 including Service Pack releases, contains an improper access control vulnerability in Embedded Service Enabler component. A local malicious user could potentially exploit this vulnerability during installation leading to a privilege escalation...
Improper access control
Dell AppSync, versions 4.4.0.0 to 4.6.0.0 including Service Pack releases, contains an improper access control vulnerability in Embedded Service Enabler component. A local malicious user could potentially exploit this vulnerability during installation leading to a privilege escalation...