Lucene search
K

2801 matches found

Zero Day Initiative
Zero Day Initiative
added 2019/07/05 12:0 a.m.21 views

Adobe Acrobat Pro DC JPEG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...

7.8CVSS3.5AI score0.09441EPSS
Exploits0References1
OSV
OSV
added 2019/07/01 8:15 p.m.0 views

UBUNTU-CVE-2019-13137

ImageMagick before 7.0.8-50 has a memory leak vulnerability in the function ReadPSImage in coders/ps.c...

6.5CVSS6.7AI score0.01885EPSS
Exploits1References4
OpenVAS
OpenVAS
added 2019/06/26 12:0 a.m.103 views

Ubuntu: Security Advisory (USN-4034-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS7.4AI score0.49324EPSS
Exploits26References2
OpenVAS
OpenVAS
added 2019/06/25 12:0 a.m.60 views

Fedora Update for evince FEDORA-2019-ff2b5b5b47

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

5.5CVSS6.7AI score0.01443EPSS
Exploits0References2
Fedora
Fedora
added 2019/06/22 2:56 a.m.25 views

[SECURITY] Fedora 29 Update: evince-3.30.2-4.fc29

Evince is simple multi-page document viewer. It can display and print Portable Document Format PDF, PostScript PS and Encapsulated PostScript EPS files. When supported by the document format, evince allows searching for text, copying text to the clipboard, hypertext navigation, table-of-contents...

5.5CVSS6.4AI score0.01443EPSS
Exploits0
Fedora
Fedora
added 2019/06/14 12:56 a.m.28 views

[SECURITY] Fedora 30 Update: evince-3.32.0-3.fc30

Evince is simple multi-page document viewer. It can display and print Portable Document Format PDF, PostScript PS and Encapsulated PostScript EPS files. When supported by the document format, evince allows searching for text, copying text to the clipboard, hypertext navigation, table-of-contents...

5.5CVSS6.4AI score0.01443EPSS
Exploits0
Mageia
Mageia
added 2019/06/10 7:17 p.m.51 views

Updated ghostscript packages fix security vulnerability

It was found that in ghostscript some privileged operators remained accessible from various places after the CVE-2019-6116 fix. A specially crafted PostScript file could use this flaw in order to, for example, have access to the file system outside of the constrains imposed by -dSAFER. Ghostscrip...

7.8CVSS3.7AI score0.01756EPSS
Exploits0References2
OSV
OSV
added 2019/06/10 7:17 p.m.7 views

MGASA-2019-0188 Updated ghostscript packages fix security vulnerability

It was found that in ghostscript some privileged operators remained accessible from various places after the CVE-2019-6116 fix. A specially crafted PostScript file could use this flaw in order to, for example, have access to the file system outside of the constrains imposed by -dSAFER. Ghostscrip...

7.8CVSS7.6AI score0.01756EPSS
Exploits0References3
Source Incite
Source Incite
added 2019/06/02 12:0 a.m.29 views

SRC-2019-0080 : Adobe Acrobat Pro DC Type PostScript File Type Confusion Remote Code Execution Vulnerability

Vulnerability Details: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw...

9.8CVSS9.6AI score0.04427EPSS
Exploits1
Source Incite
Source Incite
added 2019/06/02 12:0 a.m.22 views

SRC-2019-0082 : Adobe Acrobat Pro DC Type PostScript File Type Confusion Remote Code Execution Vulnerability

Vulnerability Details: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw...

9.8CVSS9.6AI score0.04427EPSS
Exploits1
Source Incite
Source Incite
added 2019/06/02 12:0 a.m.37 views

SRC-2019-0078 : Adobe Acrobat Pro DC Type PostScript File Out-of-Bounds Read Information Disclosure Vulnerability

Vulnerability Details: This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific...

7.5CVSS8.4AI score0.02893EPSS
Exploits1
CNVD
CNVD
added 2019/05/31 12:0 a.m.3 views

Xpdf Buffer Error Vulnerability

Xpdf is an open source PDF reader from Foo Labs. The product supports decoding LZW compressed format files and read encrypted PDF files. A buffer error vulnerability exists in the 'PostScriptFunction::transform' function of the Function.cc file in Xpdf version 4.01.01. The vulnerability originate...

7.1CVSS7.4AI score0.01271EPSS
Exploits1References1
Tenable Nessus
Tenable Nessus
added 2019/05/30 12:0 a.m.33 views

EulerOS Virtualization for ARM 64 3.0.2.0 : ghostscript (EulerOS-SA-2019-1613)

According to the versions of the ghostscript package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - Ghostscript is a set of software that provides a PostScript interpreter, a set of C procedures the Ghostscript...

7.8CVSS6.9AI score0.43901EPSS
Exploits2References6
UbuntuCve
UbuntuCve
added 2019/05/23 3:29 p.m.23 views

CVE-2017-15652

Artifex Ghostscript 9.22 is affected by: Obtain Information. The impact is: obtain sensitive information. The component is: affected source code file, affected function, affected executable, affected libga imagemagick used that. The attack vector is: Someone must open a postscript file though...

5.5CVSS6.1AI score0.01297EPSS
Exploits1References4
OSV
OSV
added 2019/05/23 3:29 p.m.1 views

UBUNTU-CVE-2017-15652

Artifex Ghostscript 9.22 is affected by: Obtain Information. The impact is: obtain sensitive information. The component is: affected source code file, affected function, affected executable, affected libga imagemagick used that. The attack vector is: Someone must open a postscript file though...

5.5CVSS5.8AI score0.01297EPSS
Exploits1References4
OSV
OSV
added 2019/05/23 3:29 p.m.2 views

DEBIAN-CVE-2017-15652

Artifex Ghostscript 9.22 is affected by: Obtain Information. The impact is: obtain sensitive information. The component is: affected source code file, affected function, affected executable, affected libga imagemagick used that. The attack vector is: Someone must open a postscript file though...

5.5CVSS7AI score0.01297EPSS
Exploits1References1
CNVD
CNVD
added 2019/05/23 12:0 a.m.3 views

Artifex Software Ghostscript Information Disclosure Vulnerability

Artifex Software Ghostscript is an open source parser for Postscript a page description language and programming language used in the electronics industry and desktop publishing from Artifex Software, Inc. The product can display Postscript files as well as print Postscript files on non-PostScrip...

5.5CVSS6.2AI score0.01297EPSS
Exploits1References1
OpenVAS
OpenVAS
added 2019/05/20 12:0 a.m.142 views

Debian: Security Advisory (DLA-1792-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.9AI score0.01756EPSS
Exploits0References3
NVD
NVD
added 2019/05/16 7:29 p.m.24 views

CVE-2019-3839

It was found that in ghostscript some privileged operators remained accessible from various places after the CVE-2019-6116 fix. A specially crafted PostScript file could use this flaw in order to, for example, have access to the file system outside of the constrains imposed by -dSAFER. Ghostscrip...

7.8CVSS7.3AI score0.01756EPSS
Exploits0References12
OSV
OSV
added 2019/05/16 7:29 p.m.24 views

CVE-2019-3839

It was found that in ghostscript some privileged operators remained accessible from various places after the CVE-2019-6116 fix. A specially crafted PostScript file could use this flaw in order to, for example, have access to the file system outside of the constrains imposed by -dSAFER. Ghostscrip...

7.8CVSS7.5AI score0.01756EPSS
Exploits0References12
Rows per page
Query Builder