CVE-2021-39540

An issue was discovered in pdftools through 20200714. A stack-buffer-overflow exists in the function Analyze::AnalyzePages located in analyze.cpp. It allows an attacker to cause code Execution...

CVE-2021-39543

An issue was discovered in pdftools through 20200714. A NULL pointer dereference exists in the function Analyze::AnalyzeRoot located in analyze.cpp. It allows an attacker to cause Denial of Service...

Stack overflow

An issue was discovered in pdftools through 20200714. A stack-buffer-overflow exists in the function Analyze::AnalyzePages located in analyze.cpp. It allows an attacker to cause code Execution...

Null pointer dereference

An issue was discovered in pdftools through 20200714. A NULL pointer dereference exists in the function Analyze::AnalyzeRoot located in analyze.cpp. It allows an attacker to cause Denial of Service...

CVE-2021-39540

An issue was discovered in pdftools through 20200714. A stack-buffer-overflow exists in the function Analyze::AnalyzePages located in analyze.cpp. It allows an attacker to cause code Execution...

CVE-2021-39541

pdftools prior to/including 20200714 contains a NULL pointer dereference in Analyze::AnalyzeXref() (analyze.cpp), which can cause a Denial of Service. This CVE-2021-39541 entry applies to that component/version; no patch/fix details are provided in the supplied documents. Exploitation specifics a...

CVE-2021-39543

CVE-2021-39543 describes a null pointer dereference in the PDfTools project (Analyze::AnalyzeRoot() in analyze.cpp) that can cause a Denial of Service. Affected version set includes 20200714 and earlier. Multiple sources (NVD entry, CNVD/CNNVD records, Red Hat page) corroborate the same root caus...

Pdftools 代码问题漏洞

PDFTools is a tool for converting PDF files to ePUB format. A null pointer dereference vulnerability exists in the Analyze::AnalyzeXref function in analyze.cpp in PDFTools 20200714 and earlier versions. An attacker could exploit this vulnerability to cause a denial of service...

WordPress 插件跨站脚本漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress Plugin is an open source application plugin for WordPress. A cross-site scripting vulnerability exists i...

ROS-2-1265

2.1265 PostgreSQL update with vulnerability fixes CVE-2020-25695, CVE-2020-25694,CVE-2020-25696 1. Vulnerability Description: The CVE-2020-25695 vulnerability allows arbitrary SQL functions to be executed with administrator privileges with access to create persistent objects in any storage schema...

ROS-2-1235

2.1235 PostgreSQL update with vulnerability fixes CVE-2020-25695, CVE-2020-25694,CVE-2020-25696 1. Vulnerability Description: The CVE-2020-25695 vulnerability allows arbitrary SQL functions to be executed with administrator privileges with access to create persistent objects in any storage schema...

Metasploit Wrap-Up

Print Driver PrivEsc If you attended DEF CON last week, you may have seen this talk on print driver vulnerabilities from Metasploit community contributor Jacob Baines. In the spirit of Friday the 13th, we're highlighting some of these "print nightmares" again, in the form of two new Metasploit...

Security Bulletin: Multiple vulnerabilities in IBM DB2

Summary Multiple vulnerabilities have been found in IBM DB2. DB2 users should refer to the security bulletins listed below for remediation actions. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected Products and Versions Affected Products|...

Security Bulletin: IBM i2 Analyze is affected by multiple DB2 vulnerabilities

Summary DB2 has multiple security vulnerabilities. DB2 users should refer to the linked DB2 security bulletins to determine is remediation is required. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected Products and Versions Affected Products|...

Security Bulletin: Vulnerability in IBM WebSphere HTTP Server affects IBM i2 Analyze

Summary Versions of the IBM Websphere HTTP Server bundled with IBM i2 Analyze have vulnerabilities. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected Products and Versions Affected Products| Versions ---|--- IBM i2 Analyze| IBM i2 Analyze 4.3.1...

Security Bulletin: i2 Analyze has an information disclosure vulnerability (CVE-2019-17638)

Summary i2 Analyze uses a version of Jetty wth known vulnerabilities. Vulnerability Details CVEID: CVE-2019-17638 DESCRIPTION: Eclipse Jetty, as bundled in Jenkins, could allow a remote attacker to obtain sensitive information, caused by an issue with corrupt HTTP response buffer being sent to...

IBM i2 Analyze Information Disclosure Vulnerability (CNVD-2022-05109)

IBM i2 Analyze is an integrated set of security services and stores from IBM USA that provides authorized users with the ability to search, analyze and store intelligence data. IBM i2 Analyst has a security vulnerability that could be exploited by remote attackers to obtain sensitive information...

IBM i2 Analyze Information Disclosure Vulnerability

IBM i2 Analyze is an integrated set of security services and stores from IBM USA that provides authorized users with the ability to search, analyze, and store intelligence data. IBM i2 Analyze is vulnerable to an information disclosure vulnerability that could be exploited by an attacker to obtai...

CVE-2021-29784

IBM i2 Analyze 4.3.0, 4.3.1, and 4.3.2 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 203168...

Information disclosure

IBM i2 Analyze 4.3.0, 4.3.1, and 4.3.2 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 203168...