946 matches found
SUSE-SU-2023:0091-1 Security update for python310-setuptools
This update for python310-setuptools fixes the following issues: - CVE-2022-40897: Fixed an excessive CPU usage that could be triggered by fetching a malicious HTML document bsc1206667...
[SECURITY] Fedora 36 Update: w3m-0.5.3-58.git20220429.fc36
The w3m program is a pager or text file viewer that can also be used as a text-mode Web browser. W3m features include the following: when reading an HTML document, you can follow links and view images using an external image viewer; its internet message mode determines the type of document from t...
Senayan Library Management System 9.2.2 Cross Site Scripting
Title: Senayan Library Management System v9.2.2 a.k.a SLIMS 9 XSS-Reflected - inserting gif - redirect to outside HTTPS server Author: nu11secur1ty Date: 12.21.2022 Vendor: https://slims.web.id/web/ Software: https://github.com/slims/slims9bulian/releases/tag/v9.2.2 Reference:...
DEBIAN-CVE-2022-0137
A heap buffer overflow in imagesetmask function of HTMLDOC before 1.9.15 allows an attacker to write outside the buffer boundaries...
HTMLDOC 缓冲区错误漏洞
HTMLDOC is an open source program that converts HTML and Markdown files to EPUB, Indexed HTML, PostScript and PDF formats. A buffer error vulnerability exists in HTMLDOC versions prior to 1.9.15, which stems from a heap buffer overflow in the imagesetmask function, which can be exploited by an...
MGASA-2022-0382 Updated epiphany packages fix security vulnerability
In GNOME Epiphany before 41.4 and 42.x before 42.2, an HTML document can trigger a client buffer overflow in ephystringshorten in the UI process via a long page title. The issue occurs because the number of bytes for a UTF-8 ellipsis character is not properly considered. CVE-2022-29536...
Updated epiphany packages fix security vulnerability
In GNOME Epiphany before 41.4 and 42.x before 42.2, an HTML document can trigger a client buffer overflow in ephystringshorten in the UI process via a long page title. The issue occurs because the number of bytes for a UTF-8 ellipsis character is not properly considered. CVE-2022-29536...
Debian DSA-5208-1 : epiphany-browser - security update
The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dsa-5208 advisory. - In GNOME Epiphany before 41.4 and 42.x before 42.2, an HTML document can trigger a client buffer overflow in ephystringshorten in the UI process via a long page title. T...
Microsoft Office Word MSDTJS
This module generates a malicious Microsoft Word document that when loaded, will leverage the remote template feature to fetch an HTML document and then use the ms-msdt scheme to execute PowerShell code. Module Options msf use exploit/windows/fileformat/word/msdtjsrce msf undefinedmsdtjsrce show...
EpicEditor XSS Vulnerability
EpicEditor through 0.2.3 has Cross-Site Scripting because of an insecure default marked.js configuration. An example attack vector is a crafted IMG element in an HTML document...
CVE-2022-29536
In GNOME Epiphany before 41.4 and 42.x before 42.2, an HTML document can trigger a client buffer overflow in ephystringshorten in the UI process via a long page title. The issue occurs because the number of bytes for a UTF-8 ellipsis character is not properly considered...
UBUNTU-CVE-2022-29536
In GNOME Epiphany before 41.4 and 42.x before 42.2, an HTML document can trigger a client buffer overflow in ephystringshorten in the UI process via a long page title. The issue occurs because the number of bytes for a UTF-8 ellipsis character is not properly considered...
CVE-2022-29536
In GNOME Epiphany before 41.4 and 42.x before 42.2, an HTML document can trigger a client buffer overflow in ephystringshorten in the UI process via a long page title. The issue occurs because the number of bytes for a UTF-8 ellipsis character is not properly considered...
CVE-2022-29536
In GNOME Epiphany before 41.4 and 42.x before 42.2, an HTML document can trigger a client buffer overflow in ephystringshorten in the UI process via a long page title. The issue occurs because the number of bytes for a UTF-8 ellipsis character is not properly considered...
CVE-2022-29536
In GNOME Epiphany before 41.4 and 42.x before 42.2, an HTML document can trigger a client buffer overflow in ephystringshorten in the UI process via a long page title. The issue occurs because the number of bytes for a UTF-8 ellipsis character is not properly considered...
CVE-2022-29536: Out-of-bounds Write
In GNOME Epiphany before 41.4 and 42.x before 42.2, an HTML document can trigger a client buffer overflow in ephystringshorten in the UI process via a long page title. The issue occurs because the number of bytes for a UTF-8 ellipsis character is not properly considered...
PT-2022-19686
Name of the Vulnerable Software and Affected Versions GNOME Epiphany versions prior to 41.4 GNOME Epiphany versions 42.x prior to 42.2 Description The issue occurs because the number of bytes for a UTF-8 ellipsis character is not properly considered, allowing an HTML document to trigger a client...
SUSE-SU-2022:14898-1 Security update for htmldoc
This update for htmldoc fixes the following issues: - CVE-2019-19630: Fixed stack-based buffer overflow in the hdstrlcpy function in string.c via a crafted HTML document bsc1158802. - CVE-2021-20308: Fixed integer overflow in imageloadgif bsc1184424. - CVE-2022-0534: Fixed stack out-of-bounds rea...
Debian DLA-2928-1 : htmldoc - LTS security update
The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2928 advisory. - Buffer overflow vulnerability in htmldoc before 1.9.12, allows attackers to cause a denial of service via a crafted BMP image to imageloadbmp. CVE-2021-40985 - A...
