NI LabVIEW 安全漏洞

NI LabVIEW National Instruments LabVIEW is a graphical program compilation platform from National Instruments NI. A security vulnerability exists in NI LabVIEW that originates from improper validation of inputs to BuildFontMap in fontmgr.cpp, resulting in out-of-bounds reads that could disclose...

WordPress Goodlayers Core plugin <= 2.0.7 - Reflected Cross-Site Scripting via 'font-family' vulnerability

Reflected Cross-Site Scripting via 'font-family' vulnerability discovered by mike harris mikeyh in WordPress Plugin Goodlayers Core versions = 2.0.7...

CVE-2024-11200 Goodlayers Core <= 2.0.7 - Reflected Cross-Site Scripting via 'font-family'

The Goodlayers Core plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘font-family’ parameter in all versions up to, and including, 2.0.7 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary...

Astra Linux – Vulnerability in TeXeVe-bin

It was discovered that texlive-bin commit c515e contains a heap buffer overflow vulnerability through the function ttfLoadHDMX:ttfdump. This vulnerability allows attackers to cause a Denial of Service DoS by providing a malicious TTF file...

K000148687: qt vulnerabilities CVE-2018-21035, CVE-2015-1290, CVE-2013-0254, and CVE-2023-43114

Security Advisory Description CVE-2018-21035 In Qt through 5.14.1, the WebSocket implementation accepts up to 2GB for frames and 2GB for messages. Smaller limits cannot be configured. This makes it easier for attackers to cause a denial of service memory consumption. CVE-2015-1290 The Google V8...

CVE-2024-51798

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Surbma Surbma | Font Awesome surbma-font-awesome allows DOM-Based XSS.This issue affects Surbma | Font Awesome: from n/a through = 3.0...

CVE-2024-51798 WordPress Surbma | Font Awesome plugin <= 3.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Surbma Surbma | Font Awesome allows DOM-Based XSS.This issue affects Surbma | Font Awesome: from n/a through 3.0...

CVE-2024-51798 WordPress Surbma | Font Awesome plugin <= 3.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Surbma Surbma | Font Awesome surbma-font-awesome allows DOM-Based XSS.This issue affects Surbma | Font Awesome: from n/a through = 3.0...

CVE-2024-51798

CVE-2024-51798 affects the WordPress plugin Surbma | Font Awesome (Surbma Font Awesome) up to version 3.0. The issue is a DOM-based XSS caused by improper neutralization of input during web page generation. Impact is cross-site scripting as described; remediation is to upgrade to a patched versio...

PT-2024-10674 · Google · Android

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a missing bounds check in the analyzeAxes function of FontUtils.cpp, which can lead to a possible out of bounds read. This could...

WordPress plugin Surbma | Font Awesome 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting...

PT-2024-34321 · Elementor · Amazing Neo Icon Font For Elementor

Name of the Vulnerable Software and Affected Versions: amazing neo icon font for elementor versions 2.0.1 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for DOM-Based XSS. This means that an attacker could potentially...

WordPress plugin amazing neo icon font for elementor 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

The vulnerability of the CoolType font processing framework in Acrobat Reader software, which is used for viewing and editing PDF files, allows a perpetrator to disclose protected information.

The vulnerability of the CoolType font processing framework in Acrobat Reader software, which is used for reading and editing PDF files, involves reading data beyond the allowed range in memory. Exploiting this vulnerability can allow an attacker to disclose protected information through a...

Fedora 37 : grub2 (2022-dec4cdacd7)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-dec4cdacd7 advisory. Two font-related CVE updates CVE-2022-2601 and CVE-2022-3775. For more information, see upstream's disclosure or the patches themselves. Tenable has...

WordPress Surbma | Font Awesome plugin <= 3.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Surbma | Font Awesome versions = 3.0...

WordPress Surbma | Font Awesome Plugin <= 3.0 is vulnerable to Cross Site Scripting (XSS)

Software Surbma | Font Awesome Type Plugin Vulnerable versions = 3.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51798 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID a2bf9fc587d0 Credits SOPROBRO Required privilege...

The vulnerability of the fbcon components in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the fbcon component in the Linux operating system’s kernel is related to errors in resource management within the fbcondosetfont function. Exploiting this vulnerability can allow an attacker to cause a service failure...

[SECURITY] Fedora 40 Update: php-tcpdf-6.7.7-1.fc40

PHP class for generating PDF documents. no external libraries are required for the basic functions; all standard page formats, custom page formats, custom margins and units of measure; UTF-8 Unicode and Right-To-Left languages; TrueTypeUnicode, OpenTypeUnicode, TrueType, OpenType, Type1 and CID-0...

WordPress amazing neo icon font for elementor Plugin <= 2.0.1 is vulnerable to Cross Site Scripting (XSS)

Software amazing neo icon font for elementor Type Plugin Vulnerable versions = 2.0.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-50543 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 973c64009b42 Credits Gab Required privile...