OESA-2024-1954 firefox security update

Mozilla Firefox is a standalone web browser, designed for standards compliance and performance. Its functionality can be enhanced via a plethora of extensions. Security Fixes:Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. Security...

Nokogiri: Denial of Service

Background Nokogiri is an HTML, XML, SAX, and Reader parser. Description A denial of service vulnerability has been discovered in Nokogiri. Please review the CVE identifier referenced below for details. Impact Nokogiri fails to check the return value from xmlTextReaderExpand in the method...

EulerOS 2.0 SP5 : libxml2 (EulerOS-SA-2024-2071)

According to the versions of the libxml2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : An issue was discovered in libxml2 before 2.11.7 and 2.12.x before 2.12.5. When using the XML Reader interface with DTD validation and XInclude...

PT-2024-8736 · Foxit · Foxit Pdf Reader +1

Name of the Vulnerable Software and Affected Versions: Foxit PDF Reader affected versions not specified Foxit PDF Editor affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the...

PT-2024-8735 · Foxit · Foxit Pdf Reader +1

Name of the Vulnerable Software and Affected Versions: Foxit PDF Reader affected versions not specified Foxit PDF Editor affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations. User interaction is required, where...

PT-2024-8734 · Foxit · Foxit Pdf Reader +1

Name of the Vulnerable Software and Affected Versions: Foxit PDF Reader affected versions not specified Foxit PDF Editor affected versions not specified Description: The issue is related to a use-after-free vulnerability in the AcroForm component of Foxit PDF Reader and Foxit PDF Editor. This...

Microsoft applications might crash in Windows

Microsoft applications might crash in Windows Applies To Windows Server 2012 R2 Datacenter Windows Server 2012 R2 Standard Windows Server 2012 R2 Essentials Windows Server 2012 R2 Foundation Windows 8.1 Enterprise Windows 8.1 Pro Windows 8.1 Windows RT 8.1 This article describes an issue that...

January 10, 2017—KB3213986 (OS Build 14393.693)

January 10, 2017—KB3213986 OS Build 14393.693 Applies To Windows 10, version 1607, all editions Windows Server 2016, all editions Improvements and fixes This update includes quality improvements. No new operating system features are being introduced in this update. Key changes include: Improved t...

November 27, 2018—KB4467681 (OS Build 16299.820)

November 27, 2018—KB4467681 OS Build 16299.820 Applies To Windows 10, version 1709, all editions Improvements and fixes This update includes quality improvements. No new operating system features are being introduced in this update. Key changes include: Ensures that certain windowed ActiveX...

June 15, 2021—KB5003703 (OS Build 17763.2028) Preview

June 15, 2021—KB5003703 OS Build 17763.2028 Preview Applies To Win 10 Ent LTSC 2019 Win 10 IoT Ent LTSC 2019 Windows 10 IoT Core LTSC Windows Server 2019 Note NEW 6/15/21 IMPORTANT This release includes the Flash Removal Package. Taking this update will remove Adobe Flash from the machine. For mo...

June 15, 2021—KB5003698 (OS Build 18363.1645) Preview

June 15, 2021—KB5003698 OS Build 18363.1645 Preview Applies To Windows 10 Enterprise, version 1909 Windows 10 Enterprise and Education, version 1909 Windows 10 IoT Enterprise, version 1909 Note NEW 6/15/21 IMPORTANT This release includes the Flash Removal Package. Taking this update will remove...

VulnCheck KEV: CVE-2019-15637

Numerous Tableau products are vulnerable to XXE via a malicious workbook, extension, or data source, leading to information disclosure or a DoS. This affects Tableau Server, Tableau Desktop, Tableau Reader, and Tableau Public Desktop...

gpt-readme-reader (>=0.0.1, <=0.0.2) potentially affected by CVE-2024-41672 via duckdb (0.7.0)

duckdb PYPI version 0.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on duckdb and may be impacted: - gpt-readme-reader =0.0.1, =0.0.2 Source cves: CVE-2024-41672 Source advisory: OSV:PYSEC-2024-203...

CVE-2023-48362 Apache Drill: XXE Vulnerability in XML Format Reader

XXE in the XML Format Plugin in Apache Drill version 1.19.0 and greater allows a user to read any file on a remote file system or execute commands via a malicious XML file. Users are recommended to upgrade to version 1.21.2, which fixes this issue...

CVE-2023-48362

Apache Drill is vulnerable to an XML External Entity (XXE) injection in its XML Format Plugin . The root cause is the inadequate restriction of external entity references , which allows an attacker to provide a malicious XML file to read arbitrary files from a remote file system or execute system...

CVE-2023-48362 Apache Drill: XXE Vulnerability in XML Format Reader

XXE in the XML Format Plugin in Apache Drill version 1.19.0 and greater allows a user to read any file on a remote file system or execute commands via a malicious XML file. Users are recommended to upgrade to version 1.21.2, which fixes this issue...

EulerOS 2.0 SP8 : libxml2 (EulerOS-SA-2024-2040)

According to the versions of the libxml2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : An issue was discovered in libxml2 before 2.11.7 and 2.12.x before 2.12.5. When using the XML Reader interface with DTD validation and XInclude...

Foxit PDF Reader Out-of-Bounds Read Vulnerability (CNVD-2024-33842)

Foxit PDF Reader is China Foxit Foxit company a PDF reader. Foxit PDF Reader suffers from an out-of-bounds read vulnerability that can be exploited by attackers to disclose sensitive information...

Foxit PDF Reader Memory Misreference Vulnerability (CNVD-2024-33841)

Foxit PDF Reader is a Chinese Foxit Foxit company's a PDF reader. A memory misreference vulnerability exists in Foxit PDF Reader, which can be exploited by an attacker to execute arbitrary code...

Foxit PDF Reader Out-of-Bounds Read Vulnerability (CNVD-2024-33791)

Foxit PDF Reader is China Foxit Foxit company a PDF reader. Foxit PDF Reader suffers from an out-of-bounds read vulnerability that can be exploited by attackers to disclose sensitive information...