411 matches found
Adobe DNG Software Development Kit Buffer Overflow Vulnerability (CNVD-2020-38189)
Adobe DNG Software Development Kit SDK is a software development kit that provides the ability to read and write DNG files from the American company Audobee Adobe. A buffer overflow vulnerability exists in the Adobe DNG Software Development Kit. An attacker could exploit this vulnerability to...
Adobe DNG Software Development Kit Buffer Overflow Vulnerability (CNVD-2020-38187)
Adobe DNG Software Development Kit SDK is a software development kit that provides the ability to read and write DNG files from the American company Audobee Adobe. A buffer overflow vulnerability exists in the Adobe DNG Software Development Kit. An attacker could exploit this vulnerability to...
May 2020 Patch Tuesday – 111 Vulns, 16 Critical, SharePoint, VS Code, Adobe Patches
Continuing the trend of large Microsoft Patch Tuesdays, this month’s addresses 111 vulnerabilities with 16 of them labeled as Critical. The 16 Critical vulnerabilities cover SharePoint, Browsers, Scripting Engines, Media Foundation, Microsoft Graphics, Microsoft Color Management, and the VS Code...
Adobe Kills 16 Critical Flaws in Acrobat and Reader, Digital Negative SDK
Adobe has fixed 16 critical flaws across its Acrobat and Reader applications and its Adobe Digital Negative DNG Software Development Kit. If exploited, the flaws could lead to remote code execution. Overall, Adobe fixed vulnerabilities tied to 36 CVEs in its regularly-scheduled Tuesday security...
Adobe Releases Security Updates
Adobe has released security updates to address vulnerabilities affecting Adobe DNG Software Development Kit, Acrobat, and Reader. A remote attacker could exploit some of these vulnerabilities to take control of an affected system. The Cybersecurity and Infrastructure Security Agency CISA encourag...
APSB20-26 Security update available for Adobe DNG SDK
Adobe has released an update for the Adobe DNG Software Development Kit SDK for Windows and macOS. This update resolves multiple critical Heap Overflow and important Out-of-Bounds Read vulnerabilities that could lead to Remote Code Execution and Information Disclosure, respectively...
CVE-2020-4252
IBM DOORS Next Generation DNG/RRC 6.0.2. 6.0.6, and 6.0.61 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM...
CVE-2019-4737
IBM DOORS Next Generation DNG/RRC 6.0.2. 6.0.6, and 6.0.61 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM...
CVE-2020-4252
IBM DOORS Next Generation (DNG/RRC) is affected by a cross-site scripting vulnerability (CVE-2020-4252) in the Web UI for multiple 6.x releases (notably 6.0.2, 6.0.6, 6.0.6.1). The underlying issue allows an attacker to inject arbitrary JavaScript into the Web UI, potentially leading to credentia...
CVE-2019-4740
IBM DOORS Next Generation (DNG/RRC) 6.0.2–6.0.6.1 (including 6.0.61) are affected by a cross-site scripting flaw in the Web UI that can allow embedding arbitrary JavaScript and potentially disclose credentials within a trusted session. Root cause is a Web UI XSS vulnerability; affected components...
CVE-2019-4746
CVE-2019-4746 affects IBM DOORS Next Generation (DNG/RRC) Web UI. According to the IBM bulletin, multiple cross-site scripting defects exist in DNG/RRC versions 6.0.2, 6.0.6, and 6.0.6.1 (and related RDNG/DNG variants), allowing an attacker to inject arbitrary JavaScript into the Web UI, potentia...
CVE-2019-4746
IBM DOORS Next Generation DNG/RRC 6.0.2. 6.0.6, and 6.0.61 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM...
CVE-2019-4740
IBM DOORS Next Generation DNG/RRC 6.0.2. 6.0.6, and 6.0.61 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM...
CVE-2019-4737
Summary: IBM DOORS Next Generation (DNG/RRC) vulnerable to cross-site scripting in the Web UI. Affected: DNG/RRD 6.0.2, 6.0.6, 6.0.6.1 (RDNG 6.0.2; DNG 6.0.6/6.0.6.1; RDNG 6.0.6.1). Root cause: cross-site scripting in the web interface could allow injected JavaScript in trusted sessions. Impact: ...
CVE-2019-4737
IBM DOORS Next Generation DNG/RRC 6.0.2. 6.0.6, and 6.0.61 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM...
Security Bulletin: Multiple cross-site scripting vulnerabilities affect IBM DOORS Next Generation
Summary There are multiple cross-site scripting defects that affect IBM DOORS Next Generation DNG/RRC Vulnerability Details CVEID: CVE-2019-4740 DESCRIPTION: IBM DOORS Next Generation DNG/RRC is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code...
Security Bulletin: Vulnerabilities in WebSphere Application Server Liberty affect DOORS Next Generation (DNG/RRC)
Summary There are vulnerabilities in IBM WebSphere Application Server Liberty that affect DOORS Next GenerationDNG/RRC. Vulnerability Details Refer to the security bulletinss listed in the Remediation/Fixes section Affected Products and Versions Affected Products| Versions ---|--- RDNG| 6.0.2 DNG...
imagemagick/ping_dng_fuzzer: Crash in LibRaw::recycle
Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5673227122114560 Project: imagemagick Fuzzer: libFuzzerimagemagickpingdngfuzzer Fuzz target binary: pingdngfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type: UNKNOWN...
