Lucene search
K

5485 matches found

Tenable Nessus
Tenable Nessus
added 2021/09/14 12:0 a.m.38 views

EulerOS 2.0 SP2 : ghostscript (EulerOS-SA-2021-2372)

According to the versions of the ghostscript packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The PS Interpreter in Ghostscript 9.18 and 9.20 allows remote attackers to execute arbitrary code via crafted userparams.CVE-2016-7976 -...

8.8CVSS7.4AI score0.23453EPSS
Exploits4References9
Veracode
Veracode
added 2021/09/11 11:12 a.m.31 views

Remote Code Execution (RCE)

ghostscript:edge is vulnerable to Remote Code Execution. An attacker is able to inject malicious code on the system in the context of the ghostscript interpreter...

9.9CVSS3.6AI score0.83913EPSS
Exploits0References4Affected Software4
OpenVAS
OpenVAS
added 2021/09/11 12:0 a.m.17 views

Debian: Security Advisory (DSA-4972-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.9CVSS9.5AI score0.83913EPSS
Exploits0References4
OpenVAS
OpenVAS
added 2021/09/11 12:0 a.m.21 views

Ubuntu: Security Advisory (USN-5075-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.9CVSS9.5AI score0.83913EPSS
Exploits0References2
Debian
Debian
added 2021/09/10 12:16 p.m.30 views

[SECURITY] [DSA 4972-1] ghostscript security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4972-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso September 10, 2021 https://www.debian.org/security/faq -...

1.8AI score0.83913EPSS
Exploits0
Debian
Debian
added 2021/09/10 12:16 p.m.47 views

[SECURITY] [DSA 4972-1] ghostscript security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4972-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso September 10, 2021 https://www.debian.org/security/faq -...

9.9CVSS9.5AI score0.83913EPSS
Exploits0
OSV
OSV
added 2021/09/10 11:57 a.m.3 views

USN-5075-1 ghostscript vulnerability

It was discovered that Ghostscript incorrectly handled certain PostScript files. If a user or automated system were tricked into processing a specially crafted file, a remote attacker could possibly use this issue to access arbitrary files, execute arbitrary code, or cause a denial of service...

9.9CVSS7.5AI score0.83913EPSS
Exploits0References2
Ubuntu
Ubuntu
added 2021/09/10 11:57 a.m.113 views

USN-5075-1: Ghostscript vulnerability

It was discovered that Ghostscript incorrectly handled certain PostScript files. If a user or automated system were tricked into processing a specially crafted file, a remote attacker could possibly use this issue to access arbitrary files, execute arbitrary code, or cause a denial of service...

9.9CVSS8.6AI score0.83913EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2021/09/10 10:57 a.m.56 views

CVE-2021-3781

A trivial sandbox enabled with the -dSAFER option escape flaw was found in the ghostscript interpreter by injecting a specially crafted pipe command. This flaw allows a specially crafted document to execute arbitrary commands on the system in the context of the ghostscript interpreter. The highes...

9.9CVSS3.1AI score0.83913EPSS
Exploits0References4
CNNVD
CNNVD
added 2021/09/10 12:0 a.m.2 views

Artifex Software Ghostscript 操作系统命令注入漏洞

Artifex Software Ghostscript is an open source parser for Postscript a page description language and programming language used in the electronics industry and desktop publishing from Artifex Software, Inc. The product can display Postscript files and print them on non-Postscript printers. An...

9.9CVSS8.7AI score0.83913EPSS
Exploits0References13
Tenable Nessus
Tenable Nessus
added 2021/09/10 12:0 a.m.74 views

Ubuntu 20.04 LTS : Ghostscript vulnerability (USN-5075-1)

The remote Ubuntu 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5075-1 advisory. It was discovered that Ghostscript incorrectly handled certain PostScript files. If a user or automated system were tricked into processing a specially crafted...

9.9CVSS8.5AI score0.83913EPSS
Exploits0References2
OSV
OSV
added 2021/09/10 12:0 a.m.26 views

DSA-4972-1 ghostscript - security update

Bulletin has no description...

9.9CVSS9.3AI score0.83913EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2021/09/10 12:0 a.m.34 views

Debian DSA-4972-1 : ghostscript - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dsa-4972 advisory. It was discovered that Ghostscript, the GPL PostScript/PDF interpreter, does not properly validate access for the %pipe%, %handle% and %printer% io devices, which could...

9.9CVSS8.3AI score0.83913EPSS
Exploits0References6
UbuntuCve
UbuntuCve
added 2021/09/08 1:28 a.m.44 views

CVE-2021-3781

A trivial sandbox enabled with the -dSAFER option escape flaw was found in the ghostscript interpreter by injecting a specially crafted pipe command. This flaw allows a specially crafted document to execute arbitrary commands on the system in the context of the ghostscript interpreter. The highes...

9.9CVSS7.3AI score0.83913EPSS
Exploits0References2
OSV
OSV
added 2021/09/08 1:28 a.m.0 views

UBUNTU-CVE-2021-3781

A trivial sandbox enabled with the -dSAFER option escape flaw was found in the ghostscript interpreter by injecting a specially crafted pipe command. This flaw allows a specially crafted document to execute arbitrary commands on the system in the context of the ghostscript interpreter. The highes...

9.9CVSS7.5AI score0.83913EPSS
Exploits0References3
CNVD
CNVD
added 2021/09/08 12:0 a.m.6 views

GhostScript remote command execution vulnerability

GhostScript is an interpreter used for PostScript language and PDF files, and many software components rely on it to complete the corresponding functions, and thus will also be affected by the Ghostscript vulnerability. ghostScript remote command execution vulnerability, an attacker can use the...

2.9AI score
Exploits0
Positive Technologies
Positive Technologies
added 2021/09/08 12:0 a.m.3 views

PT-2021-8068 · Unknown +5 · Ghostscript +5

Name of the Vulnerable Software and Affected Versions: Ghostscript affected versions not specified Description: A trivial sandbox escape flaw was found in the ghostscript interpreter by injecting a specially crafted pipe command. This flaw allows a specially crafted document to execute arbitrary...

9.9CVSS6.9AI score0.96968EPSS
Exploits32References105
Tenable Nessus
Tenable Nessus
added 2021/07/21 12:0 a.m.70 views

EulerOS Virtualization 3.0.2.2 : ghostscript (EulerOS-SA-2021-2135)

According to the versions of the ghostscript package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Ghostscript is a set of software that provides a PostScriptinterpreter, a set of C procedures the Ghostscript library,...

7.8CVSS8AI score0.0275EPSS
Exploits2References4
OpenVAS
OpenVAS
added 2021/07/07 12:0 a.m.16 views

Huawei EulerOS: Security Advisory for ghostscript (EulerOS-SA-2021-2089)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS6.9AI score0.0275EPSS
Exploits10References2
OpenVAS
OpenVAS
added 2021/07/07 12:0 a.m.22 views

Huawei EulerOS: Security Advisory for ghostscript (EulerOS-SA-2021-2135)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.8AI score0.0275EPSS
Exploits2References2
Rows per page
Query Builder