CVE-2023-32366: Out-of-bounds Write

An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.7.5, macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, iOS 15.7.4 and iPadOS 15.7.4, macOS Monterey 12.6.4. Processing a font file may lead to arbitrary code execution...

Apple macOS Ventura Security Vulnerability

Apple macOS Ventura is a desktop operating system from Apple Inc. in the United States. A security vulnerability exists in Apple macOS Ventura version 13.3, which stems from the handling of font files that may lead to arbitrary code execution...

Apple Multiple Products Code Execution Vulnerability

Apple iOS, iPadOS, macOS, tvOS, and watchOS contain an unspecified vulnerability that allows for code execution when processing a font file...

CVE-2023-6600 OMGF | GDPR/DSGVO Compliant, Faster Google Fonts. Easy. <= 5.7.9 - Missing Authorization to Unauthenticated Directory Deletion and Cross-Site Scripting

The OMGF | GDPR/DSGVO Compliant, Faster Google Fonts. Easy. plugin for WordPress is vulnerable to unauthorized modification of data and Stored Cross-Site Scripting due to a missing capability check on the updatesettings function hooked via admininit in all versions up to, and including, 5.7.9. Th...

PT-2024-5150 · Artifex +3 · Artifex Ghostscript +3

Name of the Vulnerable Software and Affected Versions: Artifex Ghostscript versions prior to 10.03.0 Description: The issue is related to a stack-based buffer overflow in the Ghostscript software, which can be exploited via the CIDFSubstPath and CIDFSubstFont parameters. This can potentially allo...

OPENSUSE-SU-2023:0411-1 Security update for putty

This update for putty fixes the following issues: putty is updated to release 0.80 Fix CVE-2023-48795 boo1218128 - Update to release 0.79 Terminal mouse tracking: support for mouse movements which are not drags, and support for horizontal scroll events e.g. generated by trackpads. Fixed: PuTTY...

PT-2023-8654 · Adobe · Reader +2

Name of the Vulnerable Software and Affected Versions: Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier Adobe Acrobat 2020 and Adobe Reader 2020 Description: The issue is related to an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. This...

Essential Real Estate < 4.4.0 - Subscriber+ Stored XSS

Description The plugin does not apply proper capability checks on its AJAX actions, which among other things, allow attackers with a subscriber account to conduct Stored XSS attacks. 1. Login with a subscriber account, and visit https://vulnerable-site.tld/wp-admin/profile.php?action=delete 2...

CVE-2023-49751

Cross-Site Request Forgery CSRF vulnerability in Ciprian Popescu Block for Font Awesome.This issue affects Block for Font Awesome: from n/a through 1.4.0...

CVE-2023-49751

Cross-Site Request Forgery CSRF vulnerability in Ciprian Popescu Block for Font Awesome.This issue affects Block for Font Awesome: from n/a through 1.4.0...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Ciprian Popescu Block for Font Awesome.This issue affects Block for Font Awesome: from n/a through 1.4.0...

CVE-2023-49751

CVE-2023-49751 is a CSRF vulnerability in WordPress Block for Font Awesome (Block for Font Awesome) affecting versions

CVE-2023-49751 WordPress Block for Font Awesome Plugin <= 1.4.0 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Ciprian Popescu Block for Font Awesome.This issue affects Block for Font Awesome: from n/a through 1.4.0...

PT-2023-31327 · Unknown · Block For Font Awesome

Name of the Vulnerable Software and Affected Versions: Ciprian Popescu Block for Font Awesome versions 1.4.0 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. It affects the Block for Font Awesome plugin, allowing an attacker to perform unintended actions on a...

WordPress Plugin Block for Font Awesome Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blogs on PHP and MySQL servers.WordPress plugin is an...

CVE-2023-49751: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Ciprian Popescu Block for Font Awesome.This issue affects Block for Font Awesome: from n/a through 1.4.0...

Medium: python-pillow

Issue Overview: An issue was discovered in Pillow before 10.0.0. It is a Denial of Service that uncontrollably allocates memory to process a given task, potentially causing a service to crash by having it run out of memory. This occurs for truetype in ImageFont when textlength in an ImageDraw...

PT-2023-35633 · Git +1 · Harfbuzz

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow read issue has been identified, potentially causing a crash. The crash type is specified as Heap-buffer-overflow READ 2. The crash...

Block for Font Awesome < 1.4.1 -Settings Update via CSRF

Description The plugin does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...