The vulnerability of the shiftfs component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the shiftfs component in the Linux operating system’s kernel is related to a data type conversion error. Exploiting this vulnerability can allow an attacker to cause a service failure...

Huawei EulerOS: Security Advisory for samba (EulerOS-SA-2020-1341)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2018-12393

A potential vulnerability was found in 32-bit builds where an integer overflow during the conversion of scripts to an internal UTF-16 representation could result in allocating a buffer too small for the conversion. This leads to a possible out-of-bounds write. Note: 64-bit builds are not vulnerab...

The vulnerability of Microsoft Dynamics 365 Business Central software for small and medium-sized businesses lies in its data type conversion deficiencies, which allows attackers to execute arbitrary code.

The vulnerability of Microsoft Dynamics 365 Business Central software for small and medium-sized businesses is related to data type conversion deficiencies. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code by connecting to the malicious client...

samba: Crash after failed character conversion at log level 3 or above

A flaw was found in samba. When log levels are set at 3 or higher, the string obtained from the client, after a failed character conversion, is printed which could cause long-lived processes to terminate. The highest threat from this vulnerability is to system availability...

EulerOS 2.0 SP5 : nettle (EulerOS-SA-2020-1313)

According to the version of the nettle packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A Bleichenbacher type side-channel based padding oracle attack was found in the way nettle handles endian conversion of RSA decrypted PKCS1 v1.5...

Python -- multiple vulnerabilities

Python reports: gh-95778: Converting between int and str in bases other than 2 binary, 4, 8 octal, 16 hexadecimal, or 32 such as base 10 decimal now raises a ValueError if the number of digits in string form is above a limit to avoid potential denial of service attacks due to the algorithmic...

GHSA-QFC5-MCWQ-26Q8 Double Free in psutil

psutil aka python-psutil through 5.6.5 can have a double free. This occurs because of refcount mishandling within a while or for loop that converts system data into a Python object...

The vulnerability of the IonMonkey Just-In-Time compiler in Thunderbird email clients, as well as in Firefox and Firefox ESR browsers, stems from incorrect type conversion. This allows attackers to trigger a service failure.

The vulnerability of the IonMonkey Just-In-Time compiler for Thunderbird email clients, as well as for Firefox and Firefox ESR browsers, is related to incorrect type conversion. Exploiting this vulnerability can allow a remote attacker to cause service interruptions through the use of specially...

EulerOS 2.0 SP8 : samba (EulerOS-SA-2020-1179)

According to the versions of the samba packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - There is an issue in all samba 4.11.x versions before 4.11.5, all samba 4.10.x versions before 4.10.12 and all samba 4.9.x versions before 4.9.18...

CVE-2016-3182

The coloresycctorgb function in bin/common/color.c in OpenJPEG before 2.1.1 allows attackers to cause a denial of service memory corruption via a crafted jpeg 2000 file...

Memory corruption

The coloresycctorgb function in bin/common/color.c in OpenJPEG before 2.1.1 allows attackers to cause a denial of service memory corruption via a crafted jpeg 2000 file...

SUSE-SU-2020:0411-1 Security update for ImageMagick

This update for ImageMagick fixes the following issues: Security issue fixed: - CVE-2019-19948: Fixed a heap-based buffer overflow in WriteSGIImage bsc1159861. - CVE-2019-19949: Fixed a heap-based buffer over-read in WritePNGImage bsc1160369. Non-security issue fixed: - Fixed an issue where...

CVE-2020-8854

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.0.29478. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2020-8853

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.0.29478. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Design/Logic Flaw

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.0.29478. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2020-8854

Foxit PhantomPDF is vulnerable to a JPEG-to-PDF conversion out-of-bounds write that can lead to remote code execution. Affected product: Foxit PhantomPDF 9.7.0.29478 (and earlier per CNVD), with the flaw caused by improper validation of user-supplied data during JPEG-to-PDF conversion, resulting ...

CVE-2019-13333

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.5.0.20723. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Design/Logic Flaw

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.5.0.20723. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Design/Logic Flaw

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.5.0.20723. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...