9374 matches found
CVE-2021-24435
The iframe-font-preview.php file of the titan-framework does not properly escape the font-weight and font-family GET parameters before outputting them back in an href attribute, leading to Reflected Cross-Site Scripting issues...
CVE-2021-24435
CVE-2021-24435 affects WordPress Titan Framework plugin
airust (0.1.6), font (>=0.0.2, <=0.3.2) +6 more potentially affected by CVE-2021-26953 via postscript (>=0.2.5, <=0.11.1)
postscript CARGO version =0.2.5, =0.0.2, =0.0.2, =0.1.0, =0.4.3, =0.1.0, =0.0.2, =0.0.4 Source cves: CVE-2021-26953 Source advisory: OSV:GHSA-FHVC-GP6C-H2WX...
font (>=0.0.2, <=0.3.2), msdfgen (0.1.0) +2 more potentially affected by CVE-2021-28030 via truetype (>=0.3.0, <=0.22.0)
truetype CARGO version =0.3.0, =0.0.2, =0.4.3, =0.0.2, =0.0.4 Source cves: CVE-2021-28030 Source advisory: OSV:GHSA-V7Q4-97X4-4QW2...
Fedora 34 : firefox (2021-74b76e593a)
The remote Fedora 34 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-74b76e593a advisory. - Firefox incorrectly accepted a newline in a HTTP/3 header, interpretting it as two separate headers. This allowed for a header splitting attack against...
CVE-2021-31013
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Monterey 12.1, iOS 15.2 and iPadOS 15.2, macOS Big Sur 11.6.2. Processing a maliciously crafted font may result in the disclosure of process memory...
Design/Logic Flaw
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Monterey 12.1, iOS 15.2 and iPadOS 15.2, macOS Big Sur 11.6.2. Processing a maliciously crafted font may result in the disclosure of process memory...
CVE-2021-31013
CVE-2021-31013 is an out-of-bounds read in Apple’s FontParser during processing of crafted fonts, leading to potential disclosure of process memory. The Red Hat entry confirms the same description. Affected products include macOS (Big Sur 11.x and Monterey 12.x), iOS, and iPadOS (and variants ref...
CVE-2021-31013
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Monterey 12.1, iOS 15.2 and iPadOS 15.2, macOS Big Sur 11.6.2. Processing a maliciously crafted font may result in the disclosure of process memory...
PT-2021-19049 · Apple · Ios +2
Name of the Vulnerable Software and Affected Versions: macOS versions prior to 12.1 iOS versions prior to 15.2 iPadOS versions prior to 15.2 macOS Big Sur versions prior to 11.6.2 Description: An out-of-bounds read issue was addressed with improved bounds checking. Processing a maliciously crafte...
The vulnerability of the Graphics Component Font Parsing component in Windows operating systems allows a hacker to execute arbitrary code.
The vulnerability of the Graphics Component Font Parsing component in Windows operating systems is related to improper code generation. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending a specially crafted request...
Trend-spotting email techniques: How modern phishing emails hide in plain sight
With the massive volume of emails sent each day, coupled with the many methods that attackers use to blend in, identifying the unusual and malicious is more challenging than ever. An obscure Unicode character in a few emails is innocuous enough, but when a pattern of emails containing this obscur...
Trend-spotting email techniques: How modern phishing emails hide in plain sight
With the massive volume of emails sent each day, coupled with the many methods that attackers use to blend in, identifying the unusual and malicious is more challenging than ever. An obscure Unicode character in a few emails is innocuous enough, but when a pattern of emails containing this obscur...
CVE-2021-34649
The Simple Behance Portfolio WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the dark parameter in the /titan-framework/iframe-font-preview.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 0.2...
WordPress 插件跨站脚本漏洞
WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress Plugin is an open source application plugin for WordPress. A security vulnerability in WordPress Simple...
CVE-2021-34533
Windows Graphics Component Font Parsing Remote Code Execution Vulnerability...
CVE-2021-34533
Windows Graphics Component Font Parsing Remote Code Execution Vulnerability...
Remote code execution
Windows Graphics Component Font Parsing Remote Code Execution Vulnerability...