The vulnerability of the JavaScript script handler in Google Chrome’s V8 browser allows a hacker to trigger a service failure.

The vulnerability of the JavaScript script handler in Google Chrome’s browser is related to type conversion errors. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the Adobe Photoshop graphic editor, related to a type conversion error, allows attackers to execute arbitrary code.

The vulnerability of the Adobe Photoshop graphic editor is related to a type conversion error. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

The vulnerability of the cloud-based video digitization, annotation, and format conversion application for Adobe Prelude lies in insufficient validation of input data, allowing a perpetrator to execute arbitrary code.

The vulnerability of the cloud-based video conversion, annotation, and format conversion application for Adobe Prelude is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially crafted file...

OESA-2021-1291 nodejs security update

Node.js is a platform built on Chrome's JavaScript runtime for easily building fast, scalable network applications. Node.js uses an event-driven, non-blocking I/O model that makes it lightweight and efficient, perfect for data-intensive real-time applications that run across distributed devices...

The vulnerability of the Adobe Photoshop graphic editor, related to a type conversion error, allows attackers to execute arbitrary code.

The vulnerability of the Adobe Photoshop graphic editor is related to a type conversion error. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

LSN-0079-1: Kernel Live Patch Security Notice

It was discovered that the eBPF implementation in the Linux kernel did not properly track bounds information for 32 bit registers when performing div and mod operations. A local attacker could use this to possibly execute arbitrary code.CVE-2021-3600 It was discovered that the virtual file system...

kernel: size_t-to-int conversion vulnerability in the filesystem layer

An out-of-bounds write flaw was found in the Linux kernel's seqfile in the Filesystem layer. This flaw allows a local attacker with a user privilege to gain access to out-of-bound memory, leading to a system crash, leak of internal kernel information and can escalate privileges. The issue results...

sam2p segmentation error vulnerability

sam2p is a command-line utility that converts many raster bitmap image formats such as GIF, JPG/JPEG, and PNG to PostScript or PDF files. sam2p version 0.49.4 is vulnerable to a segmentation error. The vulnerability stems from a floating-point exception in ReadImage. An attacker could exploit the...

PDF2JSON DCTStream::transformDataUnit Denial of Service Vulnerability

PDF2JSON is a conversion library based on XPDF 3.02 that can be used to convert PDF pages page by page to JSON and XML formats. PDF2JSON DCTStream::transformDataUnit suffers from a denial of service vulnerability. The vulnerability stems from an invalid read of size 1. An attacker could exploit...

PDF2JSON CCITTFaxStream::lookChar Denial of Service Vulnerability

PDF2JSON is a conversion library based on XPDF 3.02 that can be used to convert PDF pages page by page to JSON and XML formats. A denial of service vulnerability exists in the CCITTFaxStream::lookChar function in PDF2JSON version 0.70. The vulnerability stems from an invalid write of size 2. An...

[Important] [Security] Virtuozzo ReadyKernel patch 130.0 for Virtuozzo Hybrid Server 7.0, 7.5 and Virtuozzo Hybrid Infrastructure 3.5, 4.0, 4.5, 4.6

The cumulative Virtuozzo ReadyKernel patch was updated with a security fix. The patch applies to all supported kernels of Virtuozzo Hybrid Server 7 and Virtuozzo Hybrid Infrastructure. Vulnerability id: CVE-2021-33909 3.10.0-1062.4.2.vz7.116.7 to 3.10.0-1160.21.1.vz7.174.13 sizet-to-int conversio...

PDF2JSON EmbedStream::getChar Denial of Service Vulnerability

PDF2JSON is a conversion library based on XPDF 3.02 that can be used to convert PDF pages page by page to JSON and XML formats. PDF2JSON EmbedStream::getChar suffers from a security vulnerability. An attacker could exploit this vulnerability to cause a denial of service...

PDF2JSON DCTStream::decodeImage Denial of Service Vulnerability

PDF2JSON is a conversion library based on XPDF 3.02 that can be used to convert PDF pages page by page to JSON and XML formats. PDF2JSON DCTStream::decodeImage suffers from a denial of service vulnerability. The vulnerability stems from a floating-point exception. An attacker could exploit this...

PDF2JSON DCTStream::readHuffSym Denial of Service Vulnerability

PDF2JSON is a conversion library based on XPDF 3.02 that can be used to convert PDF pages page by page to JSON and XML formats. PDF2JSON DCTStream::readHuffSym suffers from a denial of service vulnerability. The vulnerability stems from an invalid read of size 2. An attacker could exploit this...

PDF2JSON Gfx::doShowText Denial of Service Vulnerability

PDF2JSON is a conversion library based on XPDF 3.02 that can be used to convert PDF pages to JSON and XML formats on a page-by-page basis. PDF2JSON Gfx::doShowText has a security vulnerability. An attacker could exploit this vulnerability to cause a denial of service...

CentOS 7 : kernel (RHSA-2021:2725)

The remote CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:2725 advisory. - An issue was discovered in the Linux kernel before 5.2.6. On NUMA systems, the Linux fair scheduler has a use-after-free in shownumastats because NUM...

The vulnerability of the Adobe Photoshop graphic editor, related to a type conversion error, allows attackers to execute arbitrary code.

The vulnerability of the Adobe Photoshop graphic editor is related to a type conversion error. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

Important: Red Hat Security Advisory: kpatch-patch security update

An update is now available for Red Hat Enterprise Linux 7.7 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Important: Red Hat Security Advisory: kpatch-patch security update

An update is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links...

kernel: size_t-to-int conversion vulnerability in the filesystem layer

An out-of-bounds write flaw was found in the Linux kernel's seqfile in the Filesystem layer. This flaw allows a local attacker with a user privilege to gain access to out-of-bound memory, leading to a system crash, leak of internal kernel information and can escalate privileges. The issue results...