218 matches found
Outline V1.6.0 - Unquoted Service Path
Exploit Title: Outline V1.6.0 - Unquoted Service Path Exploit Author: Milad Karimi Ex3ptionaL Discovery Date: 2022-11-10 Vendor Homepage: https://getoutline.org/ Software Link: https://getoutline.org/ Tested Version: V1.6.0 Vulnerability Type: Unquoted Service Path Tested on OS: Microsoft Windows...
Outline V1.6.0 - Unquoted Service Path Vulnerability
Exploit Title: Outline V1.6.0 - Unquoted Service Path Exploit Author: Milad Karimi Ex3ptionaL Vendor Homepage: https://getoutline.org/ Software Link: https://getoutline.org/ Tested Version: V1.6.0 Vulnerability Type: Unquoted Service Path Tested on OS: Microsoft Windows 11 Enterprise Step to...
DEBIAN-CVE-2023-26924
LLVM a0dab4950 has a segmentation fault in mlir::outlineSingleBlockRegion. NOTE: third parties dispute this because the LLVM security policy excludes "Language front-ends ... for which a malicious input file can cause undesirable behavior."...
PT-2023-20852 · Llvm +1 · Llvm +1
Name of the Vulnerable Software and Affected Versions: LLVM version a0dab4950 Description: The issue is related to a segmentation fault in the mlir::outlineSingleBlockRegion function. It is noted that third parties dispute this as a vulnerability because the LLVM security policy excludes issues...
SUSE CVE-2017-3064
Adobe Flash Player versions 25.0.0.127 and earlier have an exploitable memory corruption vulnerability when parsing a shape outline. Successful exploitation could lead to arbitrary code execution...
SUSE CVE-2017-9163
libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in pxl-outline.c:106:54...
SUSE CVE-2020-26682
In libass 0.14.0, the assoutlineconstruct's call to outlinestroke causes a signed integer overflow...
SUSE CVE-2021-38593
Qt 5.x before 5.15.6 and 6.x through 6.1.2 has an out-of-bounds write in QOutlineMapper::convertPath called from QRasterPaintEngine::fill and QPaintEngineEx::stroke...
OESA-2022-2060 qt5-qtbase security update
Qt is a software toolkit for developing applications. This package contains base tools, like string, xml, and network handling. Security Fixes: Qt 5.x before 5.15.6 and 6.x through 6.1.2 has an out-of-bounds write in QOutlineMapper::convertPath called from QRasterPaintEngine::fill and...
Semrush: IDOR vulnerability reveals additional information
An issue was identified in the Content Outline Builder product. Changing a user ID in a GraphQL request could reveal additional information about users. A subsequent internal review revealed no evidence of exploitation by unauthorized parties...
PT-2022-37262 · Git +1 · Ghostscript
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a stack-buffer-underflow read error. Technical details about the crash include the functions gs type2 interpret, copied type1 gly...
CVE-2022-2342
Cross-site Scripting XSS - Stored in GitHub repository outline/outline prior to v0.64.4...
CVE-2022-2342 Cross-site Scripting (XSS) - Stored in outline/outline
Cross-site Scripting XSS - Stored in GitHub repository outline/outline prior to v0.64.4...
outline 跨站脚本漏洞
outline is an American outline open source used to provide the fastest wiki and knowledge base for growing teams . A cross-site scripting vulnerability exists in versions prior to outline v0.64.4. An attacker could exploit this vulnerability to conduct cross-site scripting attacks...
qt: out-of-bounds write in QOutlineMapper::convertPath called from QRasterPaintEngine::fill and QPaintEngineEx::stroke
A vulnerability was found in Qt, where an out-of-bounds write in the QOutlineMapper::convertPath function can lead to a denial of service, a remote attacker could exploit this flaw by sending a specially crafted request, causing the application to crash...
PT-2022-1781 · Gerbv +2 · Gerbv +2
Name of the Vulnerable Software and Affected Versions: Gerbv versions 2.7.0 through 2.8.0 Description: The issue is related to an out-of-bounds read vulnerability in the RS-274X aperture macro multiple outline primitives functionality. This can be exploited by sending a specially crafted Gerber...
PT-2022-1780 · Gerbv +4 · Gerbv +4
Name of the Vulnerable Software and Affected Versions: Gerbv versions 2.7.0 and dev commit b5f1eacd Gerbv forked version commit d7f42a9a Description: An out-of-bounds read issue exists in the RS-274X aperture macro outline primitive functionality. This can be triggered by a specially-crafted Gerb...
Cross-site Scripting (XSS) - Stored in outline/outline
Description outline is a fastest wiki and knowledge base for growing teams. Beautiful, feature rich, and markdown compatible. this package is vulnerable for stored XSS Proof of Concept Or here is the original video Impact This vulnerability is capable of Stored XSS...
Out-of-bounds Write
Overview Affected versions of this package are vulnerable to Out-of-bounds Write. Qt 5.0.0 through 6.1.2 has an out-of-bounds write in QOutlineMapper::convertPath called from QRasterPaintEngine::fill and QPaintEngineEx::stroke. Remediation Upgrade qt to version 6.2.4 or higher. References -...
