Artifex Software Ghostscript Buffer Overflow Vulnerability (CNVD-2020-46260)

Artifex Software Ghostscript is an open source parser for Postscript a page description language and programming language used in the electronics industry and desktop publishing from Artifex Software, Inc. The product can display Postscript files as well as print Postscript files on non-PostScrip...

Linux kernel buffer overflow vulnerability (CNVD-2020-43614)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A buffer overflow vulnerability exists in vgaconscrollbackupdate in the Linux kernel. The vulnerability stems from a networked system or product performing operations ...

QEMU Input Validation Error Vulnerability

QEMU Quick Emulator is a set of simulation processor software by French software developer Fabrice Bellard. The software is fast, cross-platform and other characteristics. An input validation error vulnerability exists in QEMU versions 4.0.1 through 4.2.0. The vulnerability originates from a...

Linux kernel resource management error vulnerability (CNVD-2020-41820)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A resource management error vulnerability exists in the Linux kernel. The vulnerability arises from mismanagement of system resources e.g., memory, disk space, files,...

Schneider Electric Vijeo Designer Basic and Vijeo Designer Code Issue Vulnerability

Schneider Electric Vijeo Designer Basic is a suite of programming and design software for HMIs Human Machine Interfaces from Schneider Electric, France. A code issue vulnerability exists in Schneider Electric Vijeo Designer Basic 1.1 HotFix 15 and earlier and Vijeo Designer 6.9 SP9 and earlier. T...

Eaton HMiSoft VU3 Buffer Overflow Vulnerability

Eaton HMiSoft VU3 is a set of HMI programming software from Eaton Corporation. A buffer overflow vulnerability exists in Eaton HMiSoft VU3. The vulnerability originates when a networked system or product performs an operation on memory without properly validating data boundaries, resulting in an...

class-transformer input validation error vulnerability

class-transformer is a package that can transform/serialize/deserialize JavaScript objects to class constructors. An input validation error vulnerability exists in class-transformer. The vulnerability stems from a networked system or product that does not properly validate input data. No details ...

Xfig fig2dev Input Validation Error Vulnerability

Xfig fig2dev is a tool for printing and exporting .fig format files. An input validation error vulnerability exists in the 'makearrow' function of the arrow.c file in Xfig fig2dev version 3.2.7b. The vulnerability stems from a networked system or product that does not properly validate input data...

EasyBuild Log Information Disclosure Vulnerability

EasyBuild is a software building and installation framework. A log information disclosure vulnerability exists in versions of EasyBuild prior to 4.1.2. The vulnerability stems from the abnormal output of log files from a networked system or product. No details of the vulnerability are provided at...

utilitify input validation error vulnerability

utilitify is a utility program for working with collections such as objects, arrays and tuples numbers, strings, etc.. An input validation error vulnerability exists in versions of utilitify prior to 1.0.3. The vulnerability stems from a networked system or product that does not properly validate...

Podman Authorization Issues Vulnerability

Podman is an engine for developing, managing and running OCI containers on Linux systems. An authorization issue vulnerability exists in Podman version 1.6.0 that stems from a lack of authentication measures or insufficient authentication strength in a networked system or product. No detailed...

Video: Ransomware a Growing Industrial Security Threat

SAN FRANCISCO – Today, Operational Technology OT and Information Technology systems are merging and changing security playbooks. Here at RSA Conference 2020, Waterfall Security‘s CEO and co-founder Lior Frenkel describes the front lines of the convergence. Frenkel maintains that just as more...

Libyang Input Validation Error Vulnerability

libyang is a YANG data modeling language parser and toolkit written in C. It can be used as a toolkit for data modeling. An input validation error vulnerability exists in yyparse in versions prior to libyang v1.0-r1. The vulnerability stems from a networked system or product that does not properl...

Python Resource Management Error Vulnerability

Python is an open source, object-oriented programming language from the Python Software Foundation. The language is extensible, supports modules and packages, and supports multiple platforms. There is a security vulnerability in Python. The vulnerability stems from mismanagement of system resourc...

Lustre ptlrpc module buffer overflow vulnerability (CNVD-2020-07306)

Lustre is a parallel distributed file system typically used in large computer clusters and supercomputers, of which Lustre ptlrpc is a module. A buffer overflow vulnerability exists in the Lustre ptlrpc module. The vulnerability stems from a networked system or product performing operations in...

FontForge Resource Management Error Vulnerability

FontForge is an open source font editing tool that supports multiple languages. A resource management error vulnerability exists in the 'SFDGetFontMetaData' function of the sfd.c file in FontForge version 20190801. The vulnerability stems from mismanagement of system resources e.g., memory, disk...

Multiple Apple Products CoreAudio Component Out-of-Bounds Read Vulnerability

Apple iOS is a product of Apple Inc. Apple iOS is an operating system developed for mobile devices. apple tvOS is a smart TV operating system. apple watchOS is a smart watch operating system. coreAudio is a core audio component. An out-of-bounds read vulnerability exists in the CoreAudio componen...

ImageMagick Studio ImageMagick Buffer Overflow Vulnerability (CNVD-2020-00276)

ImageMagick Studio ImageMagick is a suite of open-source image processing software from the American company ImageMagick Studio. The software can read, convert or write images in a variety of formats. ImageMagick Studio ImageMagick suffers from a buffer overflow vulnerability. The vulnerability...

libsixel Input Validation Error Vulnerability

libsixel is a package that provides encoding/decoding implementations for DEC SIXEL graphics and other converter programs. An input validation error vulnerability exists in the 'sixelencodebody' function of the tosixel.c file in libsixel version 1.8.2. The vulnerability stems from a networked...

xlockmore Access Control Error Vulnerability

xlockmore is a screen saver for the X Window system. An Access Control Error vulnerability exists in xlockmore versions 5.13 and 5.22, which arises from a networked system or product that does not properly restrict access to resources from unauthorized roles and can be exploited by an attacker to...