Lucene search
+L

5501 matches found

OSV
OSV
added 2025/05/23 4:15 a.m.1 views

DEBIAN-CVE-2025-48708

gslibctxstashsanitizedarg in base/gslibctx.c in Artifex Ghostscript before 10.05.1 lacks argument sanitization for the case. A created PDF document includes its password in cleartext...

3.3CVSS5.2AI score0.00304EPSS
SaveExploits0References1
AlpineLinux
AlpineLinux
added 2025/05/23 4:15 a.m.12 views

CVE-2025-48708

gslibctxstashsanitizedarg in base/gslibctx.c in Artifex Ghostscript before 10.05.1 lacks argument sanitization for the case. A created PDF document includes its password in cleartext...

4CVSS4.5AI score0.00304EPSS
SaveExploits0References3
NVD
NVD
added 2025/05/23 4:15 a.m.16 views

CVE-2025-48708

gslibctxstashsanitizedarg in base/gslibctx.c in Artifex Ghostscript before 10.05.1 lacks argument sanitization for the case. A created PDF document includes its password in cleartext...

4CVSS0.00304EPSS
SaveExploits0References3
OSV
OSV
added 2025/05/23 4:15 a.m.7 views

UBUNTU-CVE-2025-48708

gslibctxstashsanitizedarg in base/gslibctx.c in Artifex Ghostscript before 10.05.1 lacks argument sanitization for the case. A created PDF document includes its password in cleartext...

4CVSS5.8AI score0.00304EPSS
SaveExploits0References4
Fedora
Fedora
added 2025/05/23 3:26 a.m.14 views

[SECURITY] Fedora 42 Update: ghostscript-10.05.1-1.fc42

This package provides useful conversion utilities based on Ghostscript softwa re, for converting PS, PDF and other document formats between each other. Ghostscript is a suite of software providing an interpreter for Adobe Systems' PostScript PS and Portable Document Format PDF page description...

4.5CVSS7AI score0.00178EPSS
SaveExploits0
CNNVD
CNNVD
added 2025/05/23 12:0 a.m.3 views

Artifex Ghostscript 安全漏洞

Artifex Ghostscript is a free software package from Artifex, Inc. based on Adobe, PostScript, and the Portable Document Format page description language. A security vulnerability exists in Artifex Ghostscript versions prior to 10.05.1, which stems from a lack of parameter cleanup that could lead ...

4CVSS6.2AI score0.00304EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2025/05/23 12:0 a.m.14 views

CVE-2025-48708

gslibctxstashsanitizedarg in base/gslibctx.c in Artifex Ghostscript before 10.05.1 lacks argument sanitization for the case. A created PDF document includes its password in cleartext...

4CVSS4.4AI score0.00304EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/05/23 12:0 a.m.11 views

Oracle Linux 9 : ghostscript (ELSA-2025-7586)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-7586 advisory. - RHEL-88966 CVE-2025-27832 ghostscript: NPDL device: Compression buffer overflow - RHEL-18397 CVE-2023-46751 ghostscript: dangling pointer in...

9.8CVSS6.8AI score0.0153EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/05/23 12:0 a.m.29 views

CVE-2025-48708

gslibctxstashsanitizedarg in base/gslibctx.c in Artifex Ghostscript before 10.05.1 lacks argument sanitization for the case. A created PDF document includes its password in cleartext...

4CVSS0.00304EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2025/05/23 12:0 a.m.11 views

CVE-2025-48708

gslibctxstashsanitizedarg in base/gslibctx.c in Artifex Ghostscript before 10.05.1 lacks argument sanitization for the case. A created PDF document includes its password in cleartext...

4CVSS5.2AI score0.00304EPSS
SaveExploits0
CVE
CVE
added 2025/05/23 12:0 a.m.121 views

CVE-2025-48708

The CVE-2025-48708 entry is confirmed to affect Artifex Ghostscript and is not a placeholder. The issue is in gs_lib_ctx_stash_sanitized_arg (base/gslibctx.c) before 10.05.1, where argument sanitization for the # case is missing, allowing a created PDF to include its password in cleartext. Affect...

4CVSS4.4AI score0.00304EPSS
SaveExploits0References3Affected Software1
RedhatCVE
RedhatCVE
added 2025/05/22 10:47 p.m.12 views

CVE-2022-29851

documentconverter in OX App Suite through 7.10.6, in a non-default configuration with ghostscript, allows OS Command Injection because file conversion may occur for an EPS document that is disguised as a PDF document...

9.8CVSS7.4AI score0.03634EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 10:28 p.m.11 views

CVE-2022-44544

Mahara 21.04 before 21.04.7, 21.10 before 21.10.5, 22.04 before 22.04.3, and 22.10 before 22.10.0 potentially allow a PDF export to trigger a remote shell if the site is running on Ubuntu and the flag -dSAFER is not set with Ghostscript...

9.8CVSS6.9AI score0.00783EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 7:23 p.m.12 views

CVE-2021-24684

The WordPress PDF Light Viewer Plugin WordPress plugin before 1.4.12 allows users with Author roles to execute arbitrary OS command on the server via OS Command Injection when invoking Ghostscript...

9CVSS7.8AI score0.04267EPSS
SaveExploits2References1
RedhatCVE
RedhatCVE
added 2025/05/22 10:55 a.m.12 views

CVE-2017-15652

Artifex Ghostscript 9.22 is affected by: Obtain Information. The impact is: obtain sensitive information. The component is: affected source code file, affected function, affected executable, affected libga imagemagick used that. The attack vector is: Someone must open a postscript file though...

5.5CVSS6.9AI score0.01297EPSS
SaveExploits1References1
Oracle linux
Oracle linux
added 2025/05/22 12:0 a.m.19 views

ghostscript security update

9.54.0-19 - RHEL-88966 CVE-2025-27832 ghostscript: NPDL device: Compression buffer overflow 9.54.0-18 - RHEL-18397 CVE-2023-46751 ghostscript: dangling pointer in gdevprnopenprinterseekable - RHEL-67048 CVE-2024-46951 ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Spac...

9.8CVSS7.4AI score0.0153EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2025/05/22 12:0 a.m.13 views

RHEL 9 : ghostscript (RHSA-2025:7586)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:7586 advisory. The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats ...

9.8CVSS7.4AI score0.00806EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2025/05/22 12:0 a.m.10 views

Oracle Linux 9 : ghostscript (ELSA-2025-7422)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-7422 advisory. - RHEL-18397 CVE-2023-46751 ghostscript: dangling pointer in gdevprnopenprinterseekable - RHEL-67048 CVE-2024-46951 ghostscript: Arbitrary Code Executi...

8.4CVSS6.7AI score0.0153EPSS
SaveExploits0References7
RedhatCVE
RedhatCVE
added 2025/05/21 8:48 p.m.9 views

CVE-2003-0207

ps2epsi creates insecure temporary files when calling ghostscript, which allows local attackers to overwrite arbitrary files...

2.1CVSS6.8AI score0.00308EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/21 6:22 p.m.12 views

CVE-1999-0155

The ghostscript command with the -dSAFER option allows remote attackers to execute commands...

7.5CVSS7.5AI score0.02844EPSS
SaveExploits0References1
Rows per page
Query Builder