The vulnerability in the implementation of the LoadFromFile, LoadFromString, or LoadFromStream functions of the PDF Quick PDF Library allows a perpetrator to trigger a service failure.

The vulnerability of the implementation of the LoadFromFile, LoadFromString, or LoadFromStream functions in the PDF handling library of the Quick PDF Library is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow an attacker to trigger a...

The vulnerability of the implementation of functions LoadFromFile, LoadFromString, LoadFromStream, DAOpenFile, or DAOpenFileReadOnly in the PDF handling library “Quick PDF Library” allows a perpetrator to gain unauthorized access to protected information or cause service failures.

The vulnerability of the implementations of the LoadFromFile, LoadFromString, LoadFromStream, DAOpenFile, or DAOpenFileReadOnly functions in the PDF handling library is related to the occurrence of operations outside the buffer in memory when processing xref entries. Exploitation of this...

QEMU 缓冲区错误漏洞

QEMU Quick Emulator is a set of simulation processor software by Fabrice Bellard, a French individual developer. The software is fast and cross-platform. QEMU's slirp suffers from a buffer error vulnerability that stems from the fact that the function tftpinput uses memory outside the working mbu...

QEMU 数字错误漏洞

QEMU Quick Emulator is a set of simulation processor software by Fabrice Bellard, a French individual developer. The software is fast and cross-platform. A code issue vulnerability exists in QEMU, which stems from a found a division by zero issue in the dwc2handlepacket handler package in the...

QEMU 缓冲区错误漏洞

QEMU Quick Emulator is a set of simulation processor software by Fabrice Bellard, a French individual developer. The software is fast and cross-platform. QEMU suffers from a buffer overflow vulnerability that originates from a boundary error in the virglcmdgetcapset function of...

CVE-2021-27941

Unconstrained Web access to the device's private encryption key in the QR code pairing mode in the eWeLink mobile application through 4.9.2 on Android and through 4.9.1 on iOS allows a physically proximate attacker to eavesdrop on Wi-Fi credentials and other sensitive information by monitoring th...

vscode-ghc-simple 安全漏洞

vscode-ghc-simple is a software application. A quick fix operation is provided. A security vulnerability exists in vscode-ghc-simple. The vulnerability allows remote code execution via a manual workspace configuration using replCommand...

Memory Corruption Vulnerability in Quick Controls Configuration Software

Quick Control Configuration Software is a configuration software from Shanghai Rohus Automation Technology Co. A memory corruption vulnerability exists in Quick Control. An attacker can exploit the vulnerability to cause the program to crash...

CVE-2021-0444

In onActivityResult of QuickContactActivity.java, there is an unnecessary return of an intent. This could lead to local information disclosure of contact data with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11 Android-8...

Description of the security update for SharePoint Enterprise Server 2016: April 13, 2021 (KB4504719)

None None...

[SECURITY] Fedora 34 Update: qqc2-breeze-style-5.21.3-1.fc34

This is a pure Qt Quick/Kirigami Qt Quick Controls style...

Description of the security update for SharePoint Server 2019: March 9, 2021 (KB4493230)

None None...

Quanta PDF Quick View has a memory corruption vulnerability

PDF Quick View is a PDF drawing viewing software. A memory corruption vulnerability exists in Quanta PDF Quick Look. An attacker could exploit this vulnerability to cause the program to crash...

CVE-2021-25333

Improper access control in Samsung Pay mini application prior to v4.0.14 allows unauthorized access to balance information over the lockscreen via scanning specific QR code...

CVE-2021-22128

An improper access control vulnerability in FortiProxy SSL VPN portal 2.0.0, 1.2.9 and below versions may allow an authenticated, remote attacker to access internal service such as the ZebOS Shell on the FortiProxy appliance through the Quick Connection functionality...

CVE-2021-22128

An improper access control vulnerability in FortiProxy SSL VPN portal 2.0.0, 1.2.9 and below versions may allow an authenticated, remote attacker to access internal service such as the ZebOS Shell on the FortiProxy appliance through the Quick Connection functionality...

CVE-2021-22128

An improper access control vulnerability in FortiProxy SSL VPN portal 2.0.0, 1.2.9 and below versions may allow an authenticated, remote attacker to access internal service such as the ZebOS Shell on the FortiProxy appliance through the Quick Connection functionality...

CVE-2021-22128

The CVE-2021-22128 entry applies to FortiProxy SSL VPN portal, affecting versions 2.0.0 and 1.2.9 and below. The flaw is described as an improper access control that could let an authenticated, remote attacker access internal services, such as the ZebOS Shell, via the Quick Connection functionali...

Samsung Pay mini 信息泄露漏洞

Samsung Pay mini is a mobile application from Samsung South Korea. It provides a mobile payment function. An information disclosure vulnerability exists in the Samsung Pay mini application prior to v4.0.14, which allows unauthorized users to access balance information by scanning a specific QR co...

EulerOS Virtualization for ARM 64 3.0.6.0 : qemu-kvm (EulerOS-SA-2021-1527)

According to the versions of the qemu-kvm packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - An out-of-bounds read vulnerability was found in the SLiRP networking implementation of the QEMU emulator. This flaw...