Lucene search
K

5485 matches found

Positive Technologies
Positive Technologies
added 2022/08/14 12:0 a.m.2 views

PT-2022-37183 · Git +1 · Ghostscript

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read error. Technical details include a crash state involving functions such as pdfi read cff dict and pdf...

6.8AI score
Exploits0References2
OpenVAS
OpenVAS
added 2022/08/11 12:0 a.m.30 views

Fedora: Security Advisory for ghostscript (FEDORA-2022-d287230630)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

5.5CVSS5.9AI score0.0139EPSS
Exploits1References2
Fedora
Fedora
added 2022/08/10 1:28 a.m.41 views

[SECURITY] Fedora 35 Update: ghostscript-9.56.1-1.fc35

This package provides useful conversion utilities based on Ghostscript softwa re, for converting PS, PDF and other document formats between each other. Ghostscript is a suite of software providing an interpreter for Adobe Systems' PostScript PS and Portable Document Format PDF page description...

5.5CVSS5.9AI score0.0139EPSS
Exploits1
Github Security Blog
Github Security Blog
added 2022/07/26 12:0 a.m.26 views

Moodle PostScript Code Injection

The vulnerability was found in Moodle, occurs due to improper input validation when parsing PostScript code. An omitted execution parameter results in a remote code execution risk for sites running GhostScript versions older than 9.50. Successful exploitation of this vulnerability may result in...

9.8CVSS7.5AI score0.06318EPSS
Exploits1References7Affected Software1
OSV
OSV
added 2022/07/26 12:0 a.m.18 views

GHSA-XP2F-9MX3-3C6P Moodle PostScript Code Injection

The vulnerability was found in Moodle, occurs due to improper input validation when parsing PostScript code. An omitted execution parameter results in a remote code execution risk for sites running GhostScript versions older than 9.50. Successful exploitation of this vulnerability may result in...

9.8CVSS9.6AI score0.06318EPSS
Exploits1References7
Veracode
Veracode
added 2022/07/25 10:1 p.m.108 views

Remote Code Execution (RCE)

Moodle is vulnerable to Remote Code Execution. Due to an omitted execution parameter in the GhostScript command, an attacker is able to run code on the system by parsing PostScript code...

9.8CVSS9.2AI score0.06318EPSS
Exploits1References8Affected Software1
ATTACKERKB
ATTACKERKB
added 2022/07/25 4:15 p.m.3 views

CVE-2022-35649

The vulnerability was found in Moodle, occurs due to improper input validation when parsing PostScript code. An omitted execution parameter results in a remote code execution risk for sites running GhostScript versions older than 9.50. Successful exploitation of this vulnerability may result in...

9.8CVSS7AI score0.06318EPSS
Exploits1References8
NVD
NVD
added 2022/07/25 4:15 p.m.21 views

CVE-2022-35649

The vulnerability was found in Moodle, occurs due to improper input validation when parsing PostScript code. An omitted execution parameter results in a remote code execution risk for sites running GhostScript versions older than 9.50. Successful exploitation of this vulnerability may result in...

9.8CVSS0.06318EPSS
Exploits1References5
OSV
OSV
added 2022/07/25 4:15 p.m.20 views

CVE-2022-35649

The vulnerability was found in Moodle, occurs due to improper input validation when parsing PostScript code. An omitted execution parameter results in a remote code execution risk for sites running GhostScript versions older than 9.50. Successful exploitation of this vulnerability may result in...

9.8CVSS7.5AI score
Exploits0References5
UbuntuCve
UbuntuCve
added 2022/07/25 4:15 p.m.52 views

CVE-2022-35649

The vulnerability was found in Moodle, occurs due to improper input validation when parsing PostScript code. An omitted execution parameter results in a remote code execution risk for sites running GhostScript versions older than 9.50. Successful exploitation of this vulnerability may result in...

9.8CVSS6.9AI score0.06318EPSS
Exploits1References6
Prion
Prion
added 2022/07/25 4:15 p.m.26 views

Input validation

The vulnerability was found in Moodle, occurs due to improper input validation when parsing PostScript code. An omitted execution parameter results in a remote code execution risk for sites running GhostScript versions older than 9.50. Successful exploitation of this vulnerability may result in...

7.5CVSS9.7AI score0.06318EPSS
Exploits1References5Affected Software2
OSV
OSV
added 2022/07/25 4:15 p.m.0 views

UBUNTU-CVE-2022-35649

The vulnerability was found in Moodle, occurs due to improper input validation when parsing PostScript code. An omitted execution parameter results in a remote code execution risk for sites running GhostScript versions older than 9.50. Successful exploitation of this vulnerability may result in...

9.8CVSS6.5AI score0.06318EPSS
Exploits1References7
CVE
CVE
added 2022/07/25 3:27 p.m.202 views

CVE-2022-35649

CVE-2022-35649 affects Moodle via improper input validation when parsing PostScript code, enabling remote code execution on GhostScript

9.8CVSS9.5AI score0.06318EPSS
Exploits1References5Affected Software1
Cvelist
Cvelist
added 2022/07/25 3:27 p.m.37 views

CVE-2022-35649

The vulnerability was found in Moodle, occurs due to improper input validation when parsing PostScript code. An omitted execution parameter results in a remote code execution risk for sites running GhostScript versions older than 9.50. Successful exploitation of this vulnerability may result in...

9.8AI score0.06318EPSS
Exploits1References5
OSV
OSV
added 2022/07/15 11:3 a.m.2 views

OESA-2022-1754 ghostscript security update

Ghostscript is an interpreter for PostScript™ and Portable Document Format PDF files. Ghostscript consists of a PostScript interpreter layer, and a graphics library. Security Fixes: A NULL pointer dereference vulnerability was found in Ghostscript, which occurs when it tries to render a large...

5.5CVSS6.9AI score0.0139EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2022/06/22 12:0 a.m.3 views

PT-2022-6323 · Canonical · Ubuntu

Name of the Vulnerable Software and Affected Versions: Mahara versions 21.04 through 21.04.6 Mahara versions 21.10 through 21.10.4 Mahara versions 22.04 through 22.04.2 Mahara version 22.10.0 Description: The vulnerability exists due to the lack of protection of the web page structure in the PDF...

10CVSS9.3AI score0.00762EPSS
Exploits0References8
Veracode
Veracode
added 2022/06/18 5:24 p.m.22 views

Denial Of Service (DoS)

ghostscript is vulnerable to denial of service. The vulnerability exists due to a NULL pointer dereference allowing an attacker to crash the system when rendering a large number of bits in memory...

5.5CVSS5.6AI score0.0139EPSS
Exploits1References9Affected Software1
NVD
NVD
added 2022/06/16 6:15 p.m.17 views

CVE-2022-2085

A NULL pointer dereference vulnerability was found in Ghostscript, which occurs when it tries to render a large number of bits in memory. When allocating a buffer device, it relies on an initdeviceprocs defined for the device that uses it as a prototype that depends upon the number of bits per...

5.5CVSS0.0139EPSS
Exploits1References6
OSV
OSV
added 2022/06/16 6:15 p.m.1 views

DEBIAN-CVE-2022-2085

A NULL pointer dereference vulnerability was found in Ghostscript, which occurs when it tries to render a large number of bits in memory. When allocating a buffer device, it relies on an initdeviceprocs defined for the device that uses it as a prototype that depends upon the number of bits per...

5.5CVSS6.3AI score0.0139EPSS
Exploits1References1
OSV
OSV
added 2022/06/16 6:15 p.m.8 views

CVE-2022-2085

A NULL pointer dereference vulnerability was found in Ghostscript, which occurs when it tries to render a large number of bits in memory. When allocating a buffer device, it relies on an initdeviceprocs defined for the device that uses it as a prototype that depends upon the number of bits per...

5.5CVSS6.7AI score
Exploits0References6
Rows per page
Query Builder