5282 matches found
The vulnerability affects the implementation of the “AddWatermark” command in the Foxit Reader text viewer software and the Foxit PhantomPDF PDF editing software. This allows a malicious individual to execute arbitrary code.
The vulnerability of the “AddWatermark” command in the Foxit Reader text viewer and the Foxit PhantomPDF PDF editing program is related to data type conversion errors. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely...
The vulnerability affects the implementation of the “Export” command in the Foxit Reader text viewer program and the Foxit PhantomPDF PDF editing program. This allows a malicious individual to execute arbitrary code.
The vulnerability of the “Export” command in the Foxit Reader text viewer and the Foxit PhantomPDF PDF editing program is related to data type conversion errors. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely...
The vulnerability of the GetFieldValue function implementation in the program for displaying text in Foxit Reader and the PDF editing program Foxit PhantomPDF allows a perpetrator to execute arbitrary code.
The vulnerability of the GetFieldValue function implementation in programs for displaying text in Foxit Reader and editing PDF files in Foxit PhantomPDF is related to data type conversion errors. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely...
UBUNTU-CVE-2021-3377
The npm package ansiup converts ANSI escape codes into HTML. In ansiup v4, ANSI escape codes can be used to create HTML hyperlinks. Due to insufficient URL sanitization, this feature is affected by a cross-site scripting XSS vulnerability. This issue is fixed in v5.0.0...
CVE-2021-25345
Graphic format mismatch while converting video format in hwcomposer prior to SMR Mar-2021 Release 1 results in kernel panic due to unsupported format...
Format string
Graphic format mismatch while converting video format in hwcomposer prior to SMR Mar-2021 Release 1 results in kernel panic due to unsupported format...
CVE-2021-26988
Clustered Data ONTAP versions prior to 9.3P21, 9.5P16, 9.6P12, 9.7P8 and 9.8 are susceptible to a vulnerability which could allow unauthorized tenant users to discover information related to converting a 7-Mode directory to Cluster-mode such as Storage Virtual Machine SVM names, volume names,...
CVE-2021-26988
Clustered Data ONTAP versions prior to 9.3P21, 9.5P16, 9.6P12, 9.7P8 and 9.8 are susceptible to a vulnerability which could allow unauthorized tenant users to discover information related to converting a 7-Mode directory to Cluster-mode such as Storage Virtual Machine SVM names, volume names,...
JDK: Stack-based buffer overflow when converting from UTF-8 characters to platform encoding
In Eclipse OpenJ9 up to and including version 0.23, there is potential for a stack-based buffer overflow when the virtual machine or JNI natives are converting from UTF-8 characters to platform encoding...
hwcomposer 安全漏洞
Samsung hwcomposer is a mobile application from Samsung South Korea. It provides video conversion format functionality. A security vulnerability exists in hwcomposer prior to SMR Mar-2021 Release 1, which stems from a graphics format mismatch when hwcomposer converts video formats...
Qualcomm Component Buffer Overflow Vulnerability
A Qualcomm component is a component of Qualcomm Incorporated Qualcom. Provides components that are intrinsic to Qualcomm devices. A buffer overflow vulnerability exists in the Qualcomm component that originates from a buffer overflow that occurs when attempting to convert an ASCII string to a...
ONLYOFFICE Document Server File Extension Handling Vulnerability (CNVD-2021-17248)
ONLYOFFICE Document Server is a free collaborative online office suite that includes viewers and editors for text, spreadsheets and presentations. A file extension handling vulnerability exists in the ONLYOFFICE DocumentServer core module, which can be exploited by an attacker to remotely execute...
ONLYOFFICE Document Server File Extension Handling Vulnerability (CNVD-2021-17247)
ONLYOFFICE Document Server is a free collaborative online office suite that includes viewers and editors for text, spreadsheets and presentations. A file extension handling vulnerability exists in the ONLYOFFICE DocumentServer core module, which can be exploited by an attacker to remotely execute...
Design/Logic Flaw
A file extension handling issue was found in core module of ONLYOFFICE DocumentServer v4.2.0.236-v5.6.4.13. An attacker must request the conversion of the crafted file from DOCT into DOCX format. Using the chain of two other bugs related to improper string handling, an attacker can achieve remote...
Dockerhub Document Server 安全漏洞
ONLYOFFICE Document Server is a free collaborative online office suite that includes viewers and editors for text, spreadsheets and presentations. A file extension handling vulnerability exists in the ONLYOFFICE DocumentServer core module, which can be exploited by an attacker to remotely execute...
Ascensio System ONLYOFFICE Document Server 安全漏洞
ONLYOFFICE Document Server is a free collaborative online office suite that includes viewers and editors for text, spreadsheets and presentations. A file extension handling vulnerability exists in the ONLYOFFICE DocumentServer core module, which can be exploited by an attacker to remotely execute...
Qualcomm 组件 输入验证错误漏洞
A Qualcomm component is a component of Qualcomm Incorporated Qualcom. Provides components that are intrinsic to Qualcomm devices. A buffer overflow vulnerability exists in the Qualcomm component that originates from a buffer overflow that occurs when attempting to convert an ASCII string to a...
openSUSE Security Update : glibc (openSUSE-2021-358)
This update for glibc fixes the following issues : - Fix buffer overrun in EUC-KR conversion module CVE-2019-25013, bsc1182117, BZ 24973 - x86: Harden printf against non-normal long double values CVE-2020-29573, bsc1179721, BZ 26649 - gconv: Fix assertion failure in ISO-2022-JP-3 module...
[SECURITY] Fedora 33 Update: rygel-0.40.1-1.fc33
Rygel is a home media solution that allows you to easily share audio, video and pictures, and control of media player on your home network. In technical te rms it is both a UPnP AV MediaServer and MediaRenderer implemented through a pl ug-in mechanism. Interoperability with other devices in the...