Lucene search
+L

2570 matches found

CNNVD
CNNVD
added 2022/08/16 12:00 a.m.13 views

OTFCC 缓冲区错误漏洞

OTFCC is a C library and utility program from Caryll Open Source. It is used to parse and write OpenType font files. A security vulnerability exists in OTFCC version 0.10.4, which stems from a heap buffer overflow in the /release-x64/otfccdump+0x6c08a6 file...

9.8CVSS7.1AI score0.01113EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/08/16 12:00 a.m.13 views

OTFCC 缓冲区错误漏洞

OTFCC is a C library and utility program from Caryll Open Source. It is used to parse and write OpenType font files. A security vulnerability exists in OTFCC version 0.10.4, which stems from a heap buffer overflow in the /release-x64/otfccdump+0x6c0414 file...

9.8CVSS7.1AI score0.01113EPSS
SaveExploits1References2
Zero Day Initiative
Zero Day Initiative
added 2022/07/28 12:00 a.m.38 views

Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS5.1AI score0.004EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/07/28 12:00 a.m.33 views

Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

3.3CVSS3.6AI score0.00349EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/07/14 12:00 a.m.29 views

Adobe InCopy Font Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe InCopy. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of embedd...

7.8CVSS5.8AI score0.00495EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/07/14 12:00 a.m.28 views

Adobe InCopy Font Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe InCopy. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of embedd...

7.8CVSS5.8AI score0.00495EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/07/14 12:00 a.m.27 views

Adobe InCopy Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe InCopy. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...

3.3CVSS3.4AI score0.00349EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/07/14 12:00 a.m.36 views

Adobe InDesign Font Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe InDesign. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS5.6AI score0.00495EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/07/14 12:00 a.m.27 views

Adobe InDesign Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe InDesign. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS5.1AI score0.00345EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/07/14 12:00 a.m.32 views

Adobe InDesign Font Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe InDesign. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS5.6AI score0.00495EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/07/13 12:00 a.m.84 views

Adobe Acrobat Reader DC Font Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS4.6AI score0.0432EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/07/13 12:00 a.m.36 views

Adobe Acrobat Reader DC Font Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS4.8AI score0.06219EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/07/13 12:00 a.m.36 views

Adobe Acrobat Reader DC Font Parsing Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

3.3CVSS3.2AI score0.03207EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/07/13 12:00 a.m.31 views

Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

3.3CVSS3.6AI score0.03144EPSS
SaveExploits0References1
Rockylinux
Rockylinux
added 2022/06/28 8:39 a.m.19 views

gnome-control-center bug fix and enhancement update

An update is available for gnome-control-center. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The gnome-control-center package contains configuration utilitie...

0.9AI score
SaveExploits0
CNVD
CNVD
added 2022/06/27 12:00 a.m.25 views

HarfBuzz Denial of Service Vulnerability (CNVD-2022-76501)

HarfBuzz is a text engine for OpenType fonts. HarfBuzz v4.3.0 is vulnerable to a denial of service vulnerability caused by an integer overflow in the hb-ot-shape-fallback.cc component, which can be exploited to cause a denial of service DoS via an unspecified vector...

4.3CVSS3.1AI score0.01189EPSS
SaveExploits1Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/06/20 8:22 p.m.6 views

Malicious code in mapbox-studio-pro-fonts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fe184c4c51f61f287036c394d47e1acee2fa5b397efde30a69df40abfe963bfa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/06/20 8:22 p.m.7 views

Malicious code in mapbox-studio-default-fonts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2f89940d67ecc912beb4510d0c28e80d664a00e725782dbeeb3c20882e75df42 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
added 2022/06/20 8:22 p.m.22 views

MAL-2022-4476 Malicious code in mapbox-studio-pro-fonts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fe184c4c51f61f287036c394d47e1acee2fa5b397efde30a69df40abfe963bfa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSV
OSV
added 2022/06/20 8:22 p.m.32 views

MAL-2022-4475 Malicious code in mapbox-studio-default-fonts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2f89940d67ecc912beb4510d0c28e80d664a00e725782dbeeb3c20882e75df42 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
Rows per page
Query Builder