434 matches found
CVE-2022-30524
There is an invalid memory access in the TextLine class in TextOutputDev.cc in Xpdf 4.0.4 because the text extractor mishandles characters at large y coordinates. It can be triggered by for example sending a crafted pdf file to the pdftotext binary, which allows a remote attacker to cause a Denia...
CVE-2022-30524
There is an invalid memory access in the TextLine class in TextOutputDev.cc in Xpdf 4.0.4 because the text extractor mishandles characters at large y coordinates. It can be triggered by for example sending a crafted pdf file to the pdftotext binary, which allows a remote attacker to cause a Denia...
cavas-y-mas.nl Cross Site Scripting vulnerability OBB-2564635
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
femmproobgyn.com Cross Site Scripting vulnerability OBB-2383791
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
EulerOS Virtualization 3.0.6.0 : openjpeg (EulerOS-SA-2022-1085)
According to the versions of the openjpeg package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in OpenJPEG's encoder. This flaw allows an attacker to pass specially crafted x,y offset input to OpenJPEG to u...
Security fix for the ALT Linux 9 package clamav version 0.103.5-alt1
0.103.5-alt1 built Jan. 25, 2022 Sergey Y. Afonin in task 293907 Jan. 18, 2022 Sergey Y. Afonin - 0.103.5 CVE-2022-20698...
Security fix for the ALT Linux 10 package clamav version 0.103.5-alt1
0.103.5-alt1 built Jan. 21, 2022 Sergey Y. Afonin in task 293675 Jan. 18, 2022 Sergey Y. Afonin - 0.103.5 CVE-2022-20698...
y-haraj.com Improper Access Control vulnerability OBB-2336790
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Huawei EulerOS: Security Advisory for openjpeg (EulerOS-SA-2021-2601)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
carpinteria-y-ebanisteria-toalva.es Cross Site Scripting vulnerability OBB-2144691
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
DEBIAN-CVE-2020-22019
Buffer Overflow vulnerability in FFmpeg 4.2 at convolutiony10bit in libavfilter/vfvmafmotion.c, which could let a remote malicious user cause a Denial of Service...
Security fix for the ALT Linux 9 package spamassassin version 3.4.5-alt1
3.4.5-alt1 built March 29, 2021 Sergey Y. Afonin in task 268491 --- March 25, 2021 Konstantin Lepikhov - 3.4.5 fixes: CVE-2020-1946 - remove dkim patch fixed by upstream...
CVE-2020-27823
A flaw was found in OpenJPEG’s encoder. This flaw allows an attacker to pass specially crafted x,y offset input to OpenJPEG to use during encoding. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability. Mitigation This flaw can be mitigated by...
y-leaders.com Cross Site Scripting vulnerability OBB-1471126
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
y-power.co.kr Cross Site Scripting vulnerability OBB-1365182
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
CVE-2020-24354
Zyxel VMG5313-B30B router on firmware 5.13ABCJ.6b31127, and possibly older versions of firmware are affected by shell injection...
chaduri-na-edro-y.123roletnishtori.com Cross Site Scripting vulnerability OBB-1282803
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Security fix for the ALT Linux 8 package clamav version 0.102.4-alt1
0.102.4-alt1 built July 30, 2020 Sergey Y. Afonin in task 255498 July 28, 2020 Sergey Y. Afonin - 0.102.4 + CVE-2020-3350 + CVE-2020-3327 + CVE-2020-3481...
Security fix for the ALT Linux 9 package clamav version 0.102.4-alt1
0.102.4-alt1 built July 29, 2020 Sergey Y. Afonin in task 255486 July 28, 2020 Sergey Y. Afonin - 0.102.4 + CVE-2020-3350 + CVE-2020-3327 + CVE-2020-3481...
Multiple Mitsubishi Electric Products License Issue Vulnerability
Mitsubishi Electric GT27 and others are a GOT2000 series graphic operation terminal from Mitsubishi Electric Japan. An authorization issue vulnerability exists in CoreOS Y and prior versions in the Mitsubishi Electric GT27, GT25, and GT23 GOT2000 series. An attacker could exploit the vulnerabilit...