11733 matches found
OpenJDK: Unexpected exception thrown during regular expression processing in Nashorn (Scripting, 8223518)
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Scripting. Supported versions that are affected are Java SE: 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple...
OpenJDK: Missing restrictions on use of custom SocketImpl (Networking, 8218573)
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Networking. Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multip...
OpenJDK: Excessive memory allocation in CMap when reading TrueType font (2D, 8225597)
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: 2D. Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple...
CVE-2019-2762
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: Utilities. Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Easily exploitable vulnerability allows unauthenticated attacker with network access via...
The vulnerability of LibreOffice and Apache OpenOffice office programs lies in their automatic opening of embedded content, which allows attackers to compromise the integrity, confidentiality, and accessibility of protected information.
The vulnerability of LibreOffice and Apache OpenOffice desktop software relates to the automatic opening of embedded content. Exploiting this vulnerability can allow a malicious actor to compromise the integrity, confidentiality, and accessibility of protected information...
Unspecified vulnerability in wolfSSL (CNVD-2020-01645)
wolfSSL formerly known as CyaSSL is the United States wolfSSL company for embedded systems developers to use a small, portable embedded SSL programming library. A security vulnerability exists in wolfSSL versions prior to 4.3.0, which can be exploited by an attacker to perform a side-channel atta...
CVE-2019-11045
In PHP versions 7.2.x below 7.2.26, 7.3.x below 7.3.13 and 7.4.0, PHP DirectoryIterator class accepts filenames with embedded \0 byte and treats them as terminating at that byte. This could lead to security vulnerabilities, e.g. in applications checking paths that the code is allowed to access...
UBUNTU-CVE-2019-11045
In PHP versions 7.2.x below 7.2.26, 7.3.x below 7.3.13 and 7.4.0, PHP DirectoryIterator class accepts filenames with embedded \0 byte and treats them as terminating at that byte. This could lead to security vulnerabilities, e.g. in applications checking paths that the code is allowed to access...
CVE-2019-11045 DirectoryIterator class silently truncates after a null byte
In PHP versions 7.2.x below 7.2.26, 7.3.x below 7.3.13 and 7.4.0, PHP DirectoryIterator class accepts filenames with embedded \0 byte and treats them as terminating at that byte. This could lead to security vulnerabilities, e.g. in applications checking paths that the code is allowed to access...
CVE-2019-11045
Removed by vendor...
CVE-2019-11045
In PHP versions 7.2.x below 7.2.26, 7.3.x below 7.3.13 and 7.4.0, PHP DirectoryIterator class accepts filenames with embedded \0 byte and treats them as terminating at that byte. This could lead to security vulnerabilities, e.g. in applications checking paths that the code is allowed to access...
CVE-2012-5639
LibreOffice and OpenOffice automatically open embedded content...
CVE-2012-5639
LibreOffice and OpenOffice automatically open embedded content...
DEBIAN-CVE-2012-5639
LibreOffice and OpenOffice automatically open embedded content...
CVE-2012-5639
LibreOffice and OpenOffice automatically open embedded content...
Code injection
LibreOffice and OpenOffice automatically open embedded content...
UBUNTU-CVE-2012-5639
LibreOffice and OpenOffice automatically open embedded content...
CVE-2012-5639
LibreOffice and OpenOffice automatically open embedded content...
CVE-2012-5639
CVE-2012-5639 affects OpenOffice/LibreOffice where embedded content is opened automatically without a warning. Public references in Nessus/NCSC suggest OpenOffice has received fixes in OpenOffice 4.1.15, addressing this and related CVEs (e.g., CVE-2023-47804, CVE-2023-1183, CVE-2022-43680). The p...