Lucene search
+L

5494 matches found

Debian CVE
Debian CVE
added 2022/08/19 10:46 p.m.50 views

CVE-2020-27792

A heap-based buffer overwrite vulnerability was found in GhostScript's lp8000printpage function in the gdevlp8k.c file. This flaw allows an attacker to trick a user into opening a crafted PDF file, triggering the heap buffer overflow that could lead to memory corruption or a denial of service...

7.1CVSS7.1AI score0.00446EPSS
SaveExploits0
Cvelist
Cvelist
added 2022/08/19 10:46 p.m.25 views

CVE-2020-27792 Ghostscript: heap buffer over write vulnerability in ghostscript's lp8000_print_page() in gdevlp8k.c

A heap-based buffer overwrite vulnerability was found in GhostScript's lp8000printpage function in the gdevlp8k.c file. This flaw allows an attacker to trick a user into opening a crafted PDF file, triggering the heap buffer overflow that could lead to memory corruption or a denial of service...

7.1CVSS6.9AI score0.00446EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2022/08/19 12:0 a.m.4 views

Artifex Software Ghostscript 缓冲区错误漏洞

Artifex Software Ghostscript is an open source parser for Postscript a page description language and programming language used in the electronics industry and desktop publishing from Artifex Software, Inc. The product displays Postscript files and prints Postscript files on non-Postscript printer...

7.1CVSS7.4AI score0.00446EPSS
SaveExploits0References11
Positive Technologies
Positive Technologies
added 2022/08/18 12:0 a.m.6 views

PT-2022-37189 · Git +1 · Ghostscript

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a stack-buffer-underflow read error. Technical details about the crash include the functions gs type2 interpret, copied type1 gly...

6.8AI score
SaveExploits0References2
OpenVAS
OpenVAS
added 2022/08/18 12:0 a.m.20 views

Huawei EulerOS: Security Advisory for ghostscript (EulerOS-SA-2022-2220)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.8AI score0.0112EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2022/08/18 12:0 a.m.19 views

Huawei EulerOS: Security Advisory for ghostscript (EulerOS-SA-2022-2266)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.8AI score0.0112EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2022/08/17 12:0 a.m.43 views

EulerOS 2.0 SP5 : ghostscript (EulerOS-SA-2022-2266)

According to the versions of the ghostscript packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Artifex Ghostscript through 9.26 mishandles .completefont. NOTE: this issue exists because of an incomplete fix for CVE-2019-3839...

7.8CVSS7.5AI score0.01756EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2022/08/17 12:0 a.m.33 views

EulerOS 2.0 SP8 : ghostscript (EulerOS-SA-2022-2220)

According to the versions of the ghostscript packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Artifex Ghostscript through 9.26 mishandles .completefont. NOTE: this issue exists because of an incomplete fix for CVE-2019-3839...

7.8CVSS7.5AI score0.01756EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2022/08/14 12:0 a.m.4 views

PT-2022-37183 · Git +1 · Ghostscript

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read error. Technical details include a crash state involving functions such as pdfi read cff dict and pdf...

6.8AI score
SaveExploits0References2
OpenVAS
OpenVAS
added 2022/08/11 12:0 a.m.31 views

Fedora: Security Advisory for ghostscript (FEDORA-2022-d287230630)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

5.5CVSS5.9AI score0.01428EPSS
SaveExploits1References2
Fedora
Fedora
added 2022/08/10 1:28 a.m.45 views

[SECURITY] Fedora 35 Update: ghostscript-9.56.1-1.fc35

This package provides useful conversion utilities based on Ghostscript softwa re, for converting PS, PDF and other document formats between each other. Ghostscript is a suite of software providing an interpreter for Adobe Systems' PostScript PS and Portable Document Format PDF page description...

5.5CVSS5.9AI score0.01428EPSS
SaveExploits1
Github Security Blog
Github Security Blog
added 2022/07/26 12:0 a.m.30 views

Moodle PostScript Code Injection

The vulnerability was found in Moodle, occurs due to improper input validation when parsing PostScript code. An omitted execution parameter results in a remote code execution risk for sites running GhostScript versions older than 9.50. Successful exploitation of this vulnerability may result in...

9.8CVSS7.5AI score0.08422EPSS
SaveExploits1References7Affected Software1
OSV
OSV
added 2022/07/26 12:0 a.m.27 views

GHSA-XP2F-9MX3-3C6P Moodle PostScript Code Injection

The vulnerability was found in Moodle, occurs due to improper input validation when parsing PostScript code. An omitted execution parameter results in a remote code execution risk for sites running GhostScript versions older than 9.50. Successful exploitation of this vulnerability may result in...

9.8CVSS9.6AI score0.08422EPSS
SaveExploits1References7
Veracode
Veracode
added 2022/07/25 10:1 p.m.115 views

Remote Code Execution (RCE)

Moodle is vulnerable to Remote Code Execution. Due to an omitted execution parameter in the GhostScript command, an attacker is able to run code on the system by parsing PostScript code...

9.8CVSS9.2AI score0.08422EPSS
SaveExploits1References8Affected Software1
NVD
NVD
added 2022/07/25 4:15 p.m.25 views

CVE-2022-35649

The vulnerability was found in Moodle, occurs due to improper input validation when parsing PostScript code. An omitted execution parameter results in a remote code execution risk for sites running GhostScript versions older than 9.50. Successful exploitation of this vulnerability may result in...

9.8CVSS0.08422EPSS
SaveExploits1References5
ATTACKERKB
ATTACKERKB
added 2022/07/25 4:15 p.m.4 views

CVE-2022-35649

The vulnerability was found in Moodle, occurs due to improper input validation when parsing PostScript code. An omitted execution parameter results in a remote code execution risk for sites running GhostScript versions older than 9.50. Successful exploitation of this vulnerability may result in...

9.8CVSS7AI score0.08422EPSS
SaveExploits1References8
Prion
Prion
added 2022/07/25 4:15 p.m.32 views

Input validation

The vulnerability was found in Moodle, occurs due to improper input validation when parsing PostScript code. An omitted execution parameter results in a remote code execution risk for sites running GhostScript versions older than 9.50. Successful exploitation of this vulnerability may result in...

7.5CVSS9.7AI score0.08422EPSS
SaveExploits1References5Affected Software2
OSV
OSV
added 2022/07/25 4:15 p.m.4 views

UBUNTU-CVE-2022-35649

The vulnerability was found in Moodle, occurs due to improper input validation when parsing PostScript code. An omitted execution parameter results in a remote code execution risk for sites running GhostScript versions older than 9.50. Successful exploitation of this vulnerability may result in...

9.8CVSS6.5AI score0.08422EPSS
SaveExploits1References7
UbuntuCve
UbuntuCve
added 2022/07/25 4:15 p.m.55 views

CVE-2022-35649

The vulnerability was found in Moodle, occurs due to improper input validation when parsing PostScript code. An omitted execution parameter results in a remote code execution risk for sites running GhostScript versions older than 9.50. Successful exploitation of this vulnerability may result in...

9.8CVSS6.9AI score0.08422EPSS
SaveExploits1References6
OSV
OSV
added 2022/07/25 3:27 p.m.22 views

CVE-2022-35649

The vulnerability was found in Moodle, occurs due to improper input validation when parsing PostScript code. An omitted execution parameter results in a remote code execution risk for sites running GhostScript versions older than 9.50. Successful exploitation of this vulnerability may result in...

7.5AI score
SaveExploits0References7
Rows per page
Query Builder