Mozilla: Use-after-free could occur when printing to PDF

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes this flaw as follows: When saving a page to PDF, certain font styles could have led to a potential use-after-free crash...

Mozilla: Use-after-free could occur when printing to PDF

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes this flaw as follows: When saving a page to PDF, certain font styles could have led to a potential use-after-free crash...

Mozilla: Arbitrary JavaScript execution in PDF.js

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes this flaw as follows: A type check was missing when handling fonts in PDF.js, which would allow arbitrary JavaScript execution in the PDF.js context...

Mozilla: Use-after-free could occur when printing to PDF

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes this flaw as follows: When saving a page to PDF, certain font styles could have led to a potential use-after-free crash...

CVE-2024-34913

An arbitrary file upload vulnerability in r-pan-scaffolding v5.0 and below allows attackers to execute arbitrary code via uploading a crafted PDF file...

PT-2024-26244 · Kykms · Kykms

Name of the Vulnerable Software and Affected Versions: KYKMS versions 1.0.1 and below Description: The issue allows attackers to execute arbitrary code via uploading a crafted PDF file. This is due to an arbitrary file upload vulnerability. Recommendations: For KYKMS versions 1.0.1 and below, at...

r-pan-scaffolding 安全漏洞

rubinchu r-pan-scaffolding is a simple file management system from rubinchu that implements file uploading, downloading, moving and other functions. A security vulnerability exists in r-pan-scaffolding v5.0 and earlier versions. An attacker can execute arbitrary code by uploading a specially...

CVE-2024-4367

A type check was missing when handling fonts in PDF.js, which would allow arbitrary JavaScript execution in the PDF.js context. This vulnerability affects Firefox 126, Firefox ESR 115.11, and Thunderbird 115.11...

CVE-2024-31954

An issue was discovered in the installer in Samsung Portable SSD for T5 1.6.10 on Windows. Because it is possible to tamper with the directory and DLL files used during the installation process, an attacker can escalate privileges through arbitrary code execution. An attacker must already have us...

SAMSUNG portable SSD T5 PC 安全漏洞

SAMSUNG portable SSD T5 PC is an official software for hard disks from the South Korean company Samsung SAMSUNG. A security vulnerability exists in Samsung Portable SSD. An attacker can elevate privileges through arbitrary code execution...

KioWare 安全漏洞

KioWare is a suite of self-service terminal browser software. The software has the ability to restrict end-user access to specific interfaces. A security vulnerability exists in KioWare 8.34 and earlier versions, which stems from a vulnerability that allows getting rid of the environment by...

SAP PDFViewer 安全漏洞

SAP PDFViewer is the United States SAP SAP a PDF viewer. A security vulnerability exists in SAP PDFViewer that stems from the fact that if a PDF document contains embedded JavaScript, PDFViewer will execute the embedded JavaScript in the PDF, which could lead to a potential security threat. No...

Rocky Linux 9 : apr (RLSA-2023:7711)

The remote Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2023:7711 advisory. - Integer Overflow or Wraparound vulnerability in aprencode functions of Apache Portable Runtime APR allows an attacker to write beyond bounds of a buffer. This...

apr security update

An update is available for apr. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The Apache Portable Runtime APR is a portability library used by the Apache HTTP...

RLSA-2023:7711 Moderate: apr security update

The Apache Portable Runtime APR is a portability library used by the Apache HTTP Server and other projects. It provides a free library of C data structures and routines. Security Fixes: apr: integer overflow/wraparound in aprencode CVE-2022-24963 For more details about the security issues,...

HDF5 安全漏洞

HDF Group HDF5 is a suite of tools for managing and storing different types of data from the American company HDF Group. The product supports managing, manipulating, viewing and analyzing data and generating files in portable formats. A security vulnerability exists in HDF5. No information about...

CVE-2024-31954

CVE-2024-31954 affects the Samsung Portable SSD for T5 installer on Windows (version 1.6.10). The root cause is tampering with the installation directory and DLLs, enabling an attacker who already has user privileges to achieve arbitrary code execution and privilege escalation. The available sour...

CVE-2024-31954

An issue was discovered in the installer in Samsung Portable SSD for T5 1.6.10 on Windows. Because it is possible to tamper with the directory and DLL files used during the installation process, an attacker can escalate privileges through arbitrary code execution. An attacker must already have us...

PT-2024-24315 · Samsung · Samsung Portable Ssd For T5

Name of the Vulnerable Software and Affected Versions: Samsung Portable SSD for T5 version 1.6.10 Description: An issue was discovered in the installer of Samsung Portable SSD for T5 on Windows, allowing an attacker to tamper with the directory and DLL files used during the installation process...

Tencent Libpag Integer Overflow Vulnerability

Tencent Libpag is an official rendering library for PAG Portable Animated Graphics files from Tencent, a Chinese company. Tencent Libpag suffers from an integer overflow vulnerability that stems from the DecodeStream checkEndOfFile function in codec/utils/DecodeStream.cpp not correctly handling t...