CVE-2019-19738

logfileviewer.php in MFScripts YetiShare 3.5.2 through 4.5.3 does not sanitize or encode the output from the lFile parameter on the page, which would allow an attacker to input HTML or execute scripts on the site, aka XSS...

2345 Viewer is vulnerable to dll hijacking.

2345 Picture Viewer is a powerful picture browsing and management software promoted by Shanghai 2,3,4,5 Network Technology Co. It fully supports browsing, management and editing of all major image formats. There is a dll hijacking vulnerability in 2345 Photo King, which can be exploited by...

2345 PDF Reader suffers from DLL hijacking vulnerability

2345 PDF Reader is a PDF file viewer software. 2345 PDF Reader has a DLL hijacking vulnerability, which can be exploited by attackers to load a malicious dll and execute malicious code...

Debian: Security Advisory (DLA-2045-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 2045-1] tightvnc security update

Package : tightvnc Version : 1.3.9-6.5+deb8u1 CVE ID : CVE-2014-6053 CVE-2018-7225 CVE-2019-8287 CVE-2018-20021 CVE-2018-20022 CVE-2019-15678 CVE-2019-15679 CVE-2019-15680 CVE-2019-15681 Debian Bug : 945364 Several vulnerabilities have recently been discovered in TightVNC 1.x, an X11 based VNC...

Security Bulletin: IBM i Access for Windows affected by vulnerability CVE-2015-7416.

Summary IBM i Access for Windows is affected by vulnerability CVE-2015-7416. This vulnerability affects the Windows system running the IBM i Access for Windows product. Vulnerability Details CVEID: CVE-2015-7416 DESCRIPTION: IBM i Access for Windows AFP Workbench Viewer contains a vulnerability...

Fedora Update for xpdf FEDORA-2019-b890d4aad2

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Adobe Acrobat and Reader Memory Misreference Vulnerability (CNVD-2019-45975)

Adobe Acrobat is a PDF editing software developed by Adobe.Adobe Reader also known as Acrobat Reader is a PDF file reader developed by Adobe. Adobe Acrobat and Reader have a memory misreference vulnerability that can be exploited by attackers to execute code...

[SECURITY] Fedora 31 Update: xpdf-4.02-2.fc31

Xpdf is an X Window System based viewer for Portable Document Format PDF files. Xpdf is a small and efficient program which uses standard X fonts...

WordPress Lever PDF Embedder has an Unspecified Vulnerability

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports PHP and MySQL server set up a personal blog site. Lever PDF Embedder is used in which a PDF viewer plug-ins. A security vulnerability exists in WordPress Lever PDF Embedder...

Free Photo Viewer Code Issue Vulnerability

Free Photo Viewer is a lightweight photo viewer. A code issue vulnerability exists in Free Photo Viewer. The vulnerability can be exploited to execute arbitrary code via specially crafted BMP and/or TIFF files...

[SECURITY] Fedora 30 Update: djvulibre-3.5.27-16.fc30

DjVu is a web-centric format and software platform for distributing documen ts and images. DjVu can advantageously replace PDF, PS, TIFF, JPEG, and GIF for distributing scanned documents, digital documents, or high-resolution pictu res. DjVu content downloads faster, displays and renders faster,...

CVE-2019-19468

Free Photo Viewer 1.3 allows remote attackers to execute arbitrary code via a crafted BMP and/or TIFF file that triggers a malformed SEH, as demonstrated by a 0012ECB4 FreePhot.00425642 42200008 corrupt entry...

CVE-2019-19468

Free Photo Viewer 1.3 allows remote attackers to execute arbitrary code via a crafted BMP and/or TIFF file that triggers a malformed SEH, as demonstrated by a 0012ECB4 FreePhot.00425642 42200008 corrupt entry...

Design/Logic Flaw

Free Photo Viewer 1.3 allows remote attackers to execute arbitrary code via a crafted BMP and/or TIFF file that triggers a malformed SEH, as demonstrated by a 0012ECB4 FreePhot.00425642 42200008 corrupt entry...

CVE-2019-19468

Free Photo Viewer 1.3 allows remote attackers to execute arbitrary code via a crafted BMP and/or TIFF file that triggers a malformed SEH, as demonstrated by a 0012ECB4 FreePhot.00425642 42200008 corrupt entry...

CVE-2019-19468

CVE-2019-19468 affects Free Photo Viewer 1.3. A crafted BMP and/or TIFF file can trigger a malformed SEH, allowing remote attackers to execute arbitrary code. The underlying issue is SEH/corruption; exploitation is described in the entry (e.g., a corrupt entry such as FreePhot.00425642). The conn...

Xunjie CAD Viewing Software installer is vulnerable to dll hijacking

Xunjie CAD viewing software is a CAD drawing viewing tool, can be detached from the AutoCAD environment on the DWG, DXF files for fast browsing. A dll hijacking vulnerability exists in the installation program of Xunjie CAD Viewer. An attacker can exploit the vulnerability to execute arbitrary co...

CVE-2019-19308

A NULL pointer dereference was discovered in the gnome-font-viewer in the way it deals with fonts without a family name. A user may be tricked into opening a specially crafted font, which could make the gnome-font-viewer crash...

CVE-2019-19308

In texttoglyphs in sushi-font-widget.c in gnome-font-viewer 3.34.0, there is a NULL pointer dereference while parsing a TTF font file that lacks a name section due to a gstrconcat call that returns NULL...