3035 matches found
Important: engrampa
Issue Overview: Engrampa is an archive manager for the MATE environment. Engrampa is found to be vulnerable to a Path Traversal vulnerability that can be leveraged to achieve full Remote Command Execution RCE on the target. While handling CPIO archives, the Engrampa Archive manager follows symlin...
openSUSE: Security Advisory for nautilus (SUSE-SU-2023:0006-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
OESA-2024-1228 fontforge security update
FontForge former PfaEdit is a font editor for outline and bitmap fonts. It supports a range of font formats, including PostScript ASCII and binary Type 1, some Type 3 and Type 0, TrueType, OpenType Type2 and CID-keyed fonts. Security Fixes: Splinefont in FontForge through 20230101 allows command...
archivesdepartementales.ledepartement82.fr Cross Site Scripting vulnerability OBB-3860969
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
SUSE CVE-2024-25082
Splinefont in FontForge through 20230101 allows command injection via crafted archives or compressed files...
[SECURITY] Fedora 39 Update: diffoscope-257-1.fc39
diffoscope will try to get to the bottom of what makes files or directories different. It will recursively unpack archives of many kinds and transform various binary formats into more human readable form to compare them. It can compare two tarballs, ISO images, or PDF just as easily. The...
CVE-2024-25082
Splinefont in FontForge through 20230101 allows command injection via crafted archives or compressed files...
CVE-2024-25082
Splinefont in FontForge through 20230101 allows command injection via crafted archives or compressed files...
DEBIAN-CVE-2024-25082
Splinefont in FontForge through 20230101 allows command injection via crafted archives or compressed files...
UBUNTU-CVE-2024-25082
Splinefont in FontForge through 20230101 allows command injection via crafted archives or compressed files...
Command injection
Splinefont in FontForge through 20230101 allows command injection via crafted archives or compressed files...
CVE-2024-25082
Splinefont in FontForge through 20230101 allows command injection via crafted archives or compressed files...
PT-2024-1853
Name of the Vulnerable Software and Affected Versions FontForge versions through 20230101 Description The issue allows command injection via crafted archives or compressed files. This is due to the lack of measures to neutralize special elements, which can enable an attacker to execute arbitrary...
CVE-2024-25082
Splinefont in FontForge through 20230101 allows command injection via crafted archives or compressed files...
FontForge Security Vulnerability
FontForge is an open source font editing tool that supports multiple languages. A security vulnerability exists in FontForge 20230101 and earlier versions, which stems from a command injection allowed via specially crafted archives or compressed files...
CVE-2024-25082
Splinefont in FontForge through 20230101 allows command injection via crafted archives or compressed files...
CVE-2024-25082
Splinefont in FontForge through 20230101 allows command injection via crafted archives or compressed files...
Debian dla-3741 : engrampa - security update
The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3741 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3741-1 [email protected] https://www.debian.org/lts/security/...
Path Traversal
engrampa is vulneravle to Path Traversal. The vulnerability occurs an application does not properly validate or sanitize user input during the handling of CPIO archives which does not adequately check the symlink location. It allows an attacker arbitrary file writes to unintended locations and ca...