5304 matches found
OPENSUSE-SU-2020:0612-1 Security update for sqliteodbc
This update for sqliteodbc fixes the following issues: Security issue fixed: - CVE-2020-12050: Fixed a privilege escalation vulnerability boo1171041. Non-security issues fixed: - Update to version 0.9996 update to SQLite 3.22.0 fixes in handling DDL in SQLExecDirect et.al., thanks Andre Mikulec f...
Cross-site Scripting (XSS)
markdown-to-jsx is vulnerable to cross-site scripting XSS attacks. The library does not properly convert tag names to lowercase before evaluating against the blacklist, allowing a malicious user to inject script and style tags by using uppercase letters...
A-PDF WAV to MP3 Buffer Overflow Vulnerability
A-PDF WAV to MP3 is an audio conversion tool which is mainly used to convert WAV audio format to MP3 audio format. A buffer overflow vulnerability exists in A-PDF WAV to MP3 version 1.0.0. The vulnerability originates when a networked system or product performs an operation in memory without...
Stack overflow
A-PDF WAV to MP3 version 1.0.0 suffers from an instance of CWE-121: Stack-based Buffer Overflow...
The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 are related to data conversion flaws, allowing attackers to execute arbitrary code.
The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 are related to data conversion deficiencies. Exploiting these vulnerabilities can allow attacker...
Vulnerability of operating systems iOS, tvOS, the browser Safari, the multimedia player iTunes for Windows operating systems, and the service iCloud for Windows operating systems, related to a data type conversion error, allowing an attacker to execute arbitrary code.
The vulnerabilities of operating systems iOS, tvOS, the browser Safari, the multimedia player iTunes for Windows operating systems, and the iCloud service for Windows operating systems are related to a data type conversion error. Exploiting these vulnerabilities allows a malicious actor to execut...
The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 are related to data conversion flaws, allowing attackers to execute arbitrary code.
The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 are related to data conversion deficiencies. Exploiting these vulnerabilities can allow attacker...
The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 are related to data conversion flaws, allowing attackers to execute arbitrary code.
The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 are related to data conversion deficiencies. Exploiting these vulnerabilities can allow attacker...
The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 are related to data conversion flaws, allowing attackers to execute arbitrary code.
The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 are related to data conversion deficiencies. Exploiting these vulnerabilities can allow attacker...
samba: Crash after failed character conversion at log level 3 or above
A flaw was found in samba. When log levels are set at 3 or higher, the string obtained from the client, after a failed character conversion, is printed which could cause long-lived processes to terminate. The highest threat from this vulnerability is to system availability...
new package: virt-p2v
An update is available for virt-p2v. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Virt-p2v is a tool for conversion of a physical server to a virtual guest...
ALEA-2020:1709 new package: virt-p2v
Virt-p2v is a tool for conversion of a physical server to a virtual guest. This enhancement update adds the virt-p2v package to AlmaLinux BZ1704180 All users who require virt-p2v are advised to install this new package...
RUSTSEC-2020-0013 fake-static allows converting any reference into a `'static` reference
fake-static allows converting a reference with any lifetime into a reference with 'static lifetime without the unsafe keyword. Internally, this crate does not use unsafe code, it instead exploits a soundness bug in rustc: https://github.com/rust-lang/rust/issues/25860...
The vulnerability of the Spidermonkey component in Firefox and Firefox ESR web browsers allows a hacker to trigger a service failure.
The vulnerability of the Spidermonkey component in Firefox and Firefox ESR browsers is related to incorrect type conversion. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
The vulnerability of the WebKit rendering module, related to type conversion errors, allows attackers to execute arbitrary code.
The vulnerability of the WebKit rendering module is related to a type conversion error. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...
The vulnerability of the WebKit rendering module, related to type conversion errors, allows attackers to execute arbitrary code.
The vulnerability of the WebKit rendering module is related to a type conversion error. Exploiting this vulnerability allows an attacker to execute arbitrary code by opening a specially crafted malicious file or web page...
Autodesk FBX-SDK Denial of Service Vulnerability
Autodesk FBX-SDK is a C++ software development platform and API toolkit from Autodesk USA, which is mainly used to convert existing content to FBX format. A code issue vulnerability exists in Autodesk FBX-SDK 2019.0 and prior versions. An attacker could exploit the vulnerability to cause a denial...
The vulnerability of the unpacked_load_raw() function in the LibRaw image processing library allows a attacker to cause a service failure.
The vulnerability of the unpackedloadraw function in dcrawcommon.cpp in the LibRaw image processing library is related to type conversion errors. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...
The vulnerability of the rendering module in WebKit operating systems for iOS, tvOS, and watchOS, as well as in the multimedia player iTunes for Windows, the browser Safari, and the iCloud for Windows service, allows a perpetrator to execute arbitrary code.
The vulnerability of the rendering module in WebKit operating systems for iOS, tvOS, and watchOS, as well as in the multimedia player iTunes for Windows, Safari browser, and iCloud for Windows, is related to data type conversion errors. Exploiting this vulnerability allows a remote attacker to...
The vulnerability of the Django web application framework, related to a bug in the password restoration mechanism, allows attackers to compromise data integrity.
The vulnerability of the Django web application framework lies in the improper validation of email addresses after converting Unicode characters into registry keys. This allows an attacker to send a reset token. Exploiting this vulnerability could enable a remote attacker to compromise data...