6765 matches found
OPENSUSE-SU-2020:0612-1 Security update for sqliteodbc
This update for sqliteodbc fixes the following issues: Security issue fixed: - CVE-2020-12050: Fixed a privilege escalation vulnerability boo1171041. Non-security issues fixed: - Update to version 0.9996 update to SQLite 3.22.0 fixes in handling DDL in SQLExecDirect et.al., thanks Andre Mikulec f...
Cross-site Scripting (XSS)
markdown-to-jsx is vulnerable to cross-site scripting XSS attacks. The library does not properly convert tag names to lowercase before evaluating against the blacklist, allowing a malicious user to inject script and style tags by using uppercase letters...
A-PDF WAV to MP3 Buffer Overflow Vulnerability
A-PDF WAV to MP3 is an audio conversion tool which is mainly used to convert WAV audio format to MP3 audio format. A buffer overflow vulnerability exists in A-PDF WAV to MP3 version 1.0.0. The vulnerability originates when a networked system or product performs an operation in memory without...
Stack overflow
A-PDF WAV to MP3 version 1.0.0 suffers from an instance of CWE-121: Stack-based Buffer Overflow...
PDF Viewer Code Execution
The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 are related to data conversion deficiencies. Exploiting these vulnerabilities can allow attacker...
operating systems iOS Code Execution
The vulnerabilities of operating systems iOS, tvOS, the browser Safari, the multimedia player iTunes for Windows operating systems, and the iCloud service for Windows operating systems are related to a data type conversion error. Exploiting these vulnerabilities allows a malicious actor to execut...
PDF Viewer Code Execution
The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 are related to data conversion deficiencies. Exploiting these vulnerabilities can allow attacker...
PDF Viewer Code Execution
The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 are related to data conversion deficiencies. Exploiting these vulnerabilities can allow attacker...
PDF Viewer Code Execution
The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 are related to data conversion deficiencies. Exploiting these vulnerabilities can allow attacker...
samba: Crash after failed character conversion at log level 3 or above
A flaw was found in samba. When log levels are set at 3 or higher, the string obtained from the client, after a failed character conversion, is printed which could cause long-lived processes to terminate. The highest threat from this vulnerability is to system availability...
ALEA-2020:1709 new package: virt-p2v
Virt-p2v is a tool for conversion of a physical server to a virtual guest. This enhancement update adds the virt-p2v package to AlmaLinux BZ1704180 All users who require virt-p2v are advised to install this new package...
new package: virt-p2v
An update is available for virt-p2v. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Virt-p2v is a tool for conversion of a physical server to a virtual guest...
RUSTSEC-2020-0013 fake-static allows converting any reference into a `'static` reference
fake-static allows converting a reference with any lifetime into a reference with 'static lifetime without the unsafe keyword. Internally, this crate does not use unsafe code, it instead exploits a soundness bug in rustc: https://github.com/rust-lang/rust/issues/25860...
WebKit Rendering Module Type Conversion Code Execution
The vulnerability of the WebKit rendering module is related to a type conversion error. Exploiting this vulnerability allows an attacker to execute arbitrary code by opening a specially crafted malicious file or web page...
Spidermonkey DoS
The vulnerability of the Spidermonkey component in Firefox and Firefox ESR browsers is related to incorrect type conversion. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
WebKit Rendering Module Type Conversion Code Execution
The vulnerability of the WebKit rendering module is related to a type conversion error. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...
Autodesk FBX-SDK Denial of Service Vulnerability
Autodesk FBX-SDK is a C++ software development platform and API toolkit from Autodesk USA, which is mainly used to convert existing content to FBX format. A code issue vulnerability exists in Autodesk FBX-SDK 2019.0 and prior versions. An attacker could exploit the vulnerability to cause a denial...
LibRaw Heap Buffer Overflow DoS
The vulnerability of the unpackedloadraw function in dcrawcommon.cpp in the LibRaw image processing library is related to type conversion errors. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...
WebKit Rendering Module Code Execution
The vulnerability of the rendering module in WebKit operating systems for iOS, tvOS, and watchOS, as well as in the multimedia player iTunes for Windows, Safari browser, and iCloud for Windows, is related to data type conversion errors. Exploiting this vulnerability allows a remote attacker to...
Django Password Restoration Data Compromise
The vulnerability of the Django web application framework lies in the improper validation of email addresses after converting Unicode characters into registry keys. This allows an attacker to send a reset token. Exploiting this vulnerability could enable a remote attacker to compromise data...