Adobe Acrobat Reader DC Doc printWithParams Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

Foxit PDF Reader Doc Object color Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

The vulnerability of the Doc.media.newPlayer method allows attackers to execute arbitrary code through Adobe Reader and Adobe Acrobat programs used for viewing and editing PDF files.

The vulnerability of the Doc.media.newPlayer method in PDF file viewing and editing software like Adobe Reader and Adobe Acrobat is related to resource management errors. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Foxit PhantomPDF < 10.1.8 Multiple Vulnerabilities

According to its version, the Foxit PhantomPDF application formally known as Phantom installed on the remote Windows host is prior to 10.1.8. It is, therefore affected by multiple vulnerabilities: - Foxit PDF Reader and PDF Editor before 11.2.2 have a Type Confusion issue that causes a crash...

MAL-2022-2701 Malicious code in elide-doc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware baab8979c640d7bd29110cf8fd6bc55a0dc13c4e69de4d175c2592acfeacdc71 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in elide-doc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware baab8979c640d7bd29110cf8fd6bc55a0dc13c4e69de4d175c2592acfeacdc71 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6444 Malicious code in tech-doc-hugo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8dee66703b31e37413a9adb8a1182b0bad51b5cfb28fb03747f5dc30068e9196 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in okapi-doc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f3ac68a0bfba7015d9f4f6ca2a652db395585cce1f08d9815150b9728a02dc06 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5050 Malicious code in okapi-doc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f3ac68a0bfba7015d9f4f6ca2a652db395585cce1f08d9815150b9728a02dc06 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in swift-docc-render (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a748548471b692a94eca43cc0901dbd088779b2299a9f19990ba0709de837502 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in generate-doc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 16162c9b9fae66b937c517f44e7d55e1158047f6f6570582ab72e5f8b4a80487 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

brooklynveindoc.com Cross Site Scripting vulnerability OBB-2657156

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

USN-5271-1 adminer vulnerabilities

It was discovered that Adminer did not escape data in the history parameter of the default URI. A remote attacker could possibly use this issue to perform cross-site scripting XSS attacks. This issue only affected Ubuntu 20.04 ESM. CVE-2020-35572 Adam Crosser and Brian Sizemore discovered that...

USN-5438-2 htmldoc vulnerability

USN-5438-1 fixed a vulnerability in HTMLDOC. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Original advisory details: It was discovered that HTMLDOC did not properly manage memory under certain circumstances. If a user were tricked into opening a special...

bpftool, kernel, perf, python security update

CentOS Errata and Security Advisory CESA-2022:4642 An update for kernel is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

CVE-2022-1731

Metasonic Doc WebClient 7.0.14.0 / 7.0.12.0 / 7.0.3.0 is vulnerable to a SQL injection attack in the username field. SSO or System authentication are required to be enabled for vulnerable conditions to exist...

CVE-2022-1731

Metasonic Doc WebClient 7.0.14.0 / 7.0.12.0 / 7.0.3.0 is vulnerable to a SQL injection attack in the username field. SSO or System authentication are required to be enabled for vulnerable conditions to exist...

CVE-2022-1731

Metasonic Doc WebClient 7.0.14.0 / 7.0.12.0 / 7.0.3.0 is vulnerable to a SQL injection attack in the username field. SSO or System authentication are required to be enabled for vulnerable conditions to exist...

Sql injection

Metasonic Doc WebClient 7.0.14.0 / 7.0.12.0 / 7.0.3.0 is vulnerable to a SQL injection attack in the username field. SSO or System authentication are required to be enabled for vulnerable conditions to exist...

CVE-2022-1731

Metasonic Doc WebClient 7.0.14.0, 7.0.12.0, and 7.0.3.0 are vulnerable to a SQL injection in the username field. Root cause: improper handling of input in the login username, enabling injection when SSO or System authentication is enabled. Impact per CVSS indicates high confidentiality/integrity/...