Lucene search
+L

2835 matches found

BDU FSTEC
BDU FSTEC
added 2020/04/29 12:0 a.m.7 views

The vulnerability of the .tempfile component in the software suite for processing, transforming, and generating Ghostscript documents allows a perpetrator to circumvent the dSAFER protection mechanism, delete files, or gain unauthorized access to protected information.

The vulnerability of the .tempfile component in the software for processing, transforming, and generating Ghostscript documents is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to bypass the dSAFER protection, delete files, or gain unauthorized...

7.8CVSS7.2AI score0.01916EPSS
SaveExploits0References8Affected Software4
RedHat Linux
RedHat Linux
added 2020/04/28 4:3 p.m.70 views

Moderate: Red Hat Security Advisory: fontforge security update

An update for fontforge is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

8.8CVSS7.3AI score0.02478EPSS
SaveExploits1References3
Zero Day Initiative
Zero Day Initiative
added 2020/04/28 12:0 a.m.29 views

Adobe Bridge PostScript hsbw Command Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Bridge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of the...

7.8CVSS1.8AI score0.02815EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/04/28 12:0 a.m.26 views

Adobe Bridge PostScript load Command Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Bridge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of the...

7.8CVSS2.5AI score0.02815EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/04/28 12:0 a.m.29 views

Adobe Bridge PostScript callothersubr Command Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Bridge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of the...

7.8CVSS4AI score0.02784EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/04/28 12:0 a.m.29 views

Adobe Bridge PostScript File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Bridge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...

3.3CVSS1.5AI score0.01991EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/04/28 12:0 a.m.30 views

Adobe Bridge PostScript blend Command Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Bridge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of the...

7.8CVSS2.6AI score0.0256EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/04/28 12:0 a.m.22 views

Adobe Bridge PostScript File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Bridge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of...

7.8CVSS3.6AI score0.03487EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/04/28 12:0 a.m.22 views

Adobe Bridge PostScript drop Command Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Bridge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of the...

7.8CVSS2.6AI score0.02815EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/04/28 12:0 a.m.30 views

Adobe Bridge PostScript callothersubr Command Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Bridge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within processing of the...

7.8CVSS4.1AI score0.02815EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/04/28 12:0 a.m.35 views

Adobe Bridge PostScript CharString Directory Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Bridge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of...

7.8CVSS4.9AI score0.05174EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/04/28 12:0 a.m.29 views

Adobe Bridge PostScript put Command Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Bridge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of the...

7.8CVSS2.5AI score0.02784EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/04/28 12:0 a.m.30 views

Adobe Bridge EPS BoundingBox Element Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Bridge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of the...

7.8CVSS5AI score0.05174EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2020/04/23 12:0 a.m.7 views

The vulnerability of the .charkeys procedure in the PostScript/PDF Ghostscript interpreter allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the .charkeys procedure in the PostScript/PDF Ghostscript interpreter is related to a security protection flaw that allows scripts to bypass the "-dSAFER" restriction. Exploiting this vulnerability can enable an attacker operating remotely to gain access to confidential data,...

9.3CVSS7.2AI score0.03434EPSS
SaveExploits0References16Affected Software7
BDU FSTEC
BDU FSTEC
added 2020/04/22 12:0 a.m.56 views

The vulnerability of the Adobe Type Manager library on the Windows operating system, allowing a hacker to execute arbitrary code

The vulnerability of the Adobe Type Manager library in the Windows operating system is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code due to a font processing error in Adobe PostScript Type 1...

10CVSS6.4AI score
SaveExploits0References1
OSV
OSV
added 2020/04/15 3:15 p.m.6 views

CVE-2020-1020

A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles a specially-crafted multi-master font - Adobe Type 1 PostScript format.For all systems except Windows 10, an attacker who successfully exploited the vulnerability could...

8.8CVSS7.6AI score0.65037EPSS
SaveExploits1References2
Prion
Prion
added 2020/04/15 3:15 p.m.46 views

Remote code execution

A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles a specially-crafted multi-master font - Adobe Type 1 PostScript format.For all systems except Windows 10, an attacker who successfully exploited the vulnerability could...

6.8CVSS8.3AI score0.69166EPSS
SaveExploits1References1Affected Software5
ATTACKERKB
ATTACKERKB
added 2020/04/15 12:0 a.m.56 views

CVE-2020-1020

A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles a specially-crafted multi-master font – Adobe Type 1 PostScript format.For all systems except Windows 10, an attacker who successfully exploited the vulnerability could...

8.8CVSS8.4AI score0.69166EPSS
SaveIn wildExploits1References2
VulnCheck KEV
VulnCheck KEV
added 2020/04/14 12:0 a.m.6 views

VulnCheck KEV: CVE-2020-1020

Microsoft Windows Adobe Font Manager Library contains an unspecified vulnerability when handling specially crafted multi-master fonts Adobe Type 1 PostScript format that allows for remote code execution for all systems except Windows 10. For systems running Windows 10, an attacker who...

8.8CVSS7.5AI score0.65037EPSS
SaveExploits1References1
VulnCheck KEV
VulnCheck KEV
added 2020/04/14 12:0 a.m.4 views

VulnCheck KEV: CVE-2020-0938

Microsoft Windows Adobe Font Manager Library contains an unspecified vulnerability when handling specially crafted multi-master fonts Adobe Type 1 PostScript format that allows for remote code execution for all systems except Windows 10. For systems running Windows 10, an attacker who...

7.8CVSS7.8AI score0.69166EPSS
SaveExploits0References1
Rows per page
Query Builder