4320 matches found
CVE-2021-22645
Luxion KeyShot versions prior to 10.1, Luxion KeyShot Viewer versions prior to 10.1, Luxion KeyShot Network Rendering versions prior to 10.1, and Luxion KeyVR versions prior to 10.1 are vulnerable to an attack because the .bip documents display a “load” command, which can be pointed to a .dll fro...
CVE-2021-22645
CVE-2021-22645 affects Luxion KeyShot family prior to 10.1, specifically KeyShot, KeyShot Viewer, KeyShot Network Rendering, and KeyVR. The vulnerability arises from .bip documents displaying a “load” command that can reference a remote DLL, allowing the DLL entry point to execute without suffici...
Court docs show FBI can unlock iPhones, access Signal messages
By Waqas Court documents have revealed the FBI has specific tools that allow the bureau to access private Signal messages even on locked iPhones. This is a post from HackRead.com Read the original post: Court docs show FBI can unlock iPhones, access Signal messages...
Medieval Security Techniques
Sonja Drummer describes with photographs two medieval security techniques. The first is a for authentication: a document has been cut in half with an irregular pattern, so that the two halves can be brought together to prove authenticity. The second is for integrity: hashed lines written above an...
CVE-2021-21062
Acrobat Reader DC versions versions 2020.013.20074 and earlier, 2020.001.30018 and earlier and 2017.011.30188 and earlier are affected by a Memory corruption vulnerability when parsing a specially crafted PDF file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary...
CVE-2021-21057
Acrobat Reader DC versions versions 2020.013.20074 and earlier, 2020.001.30018 and earlier and 2017.011.30188 and earlier are affected by a null pointer dereference vulnerability when parsing a specially crafted PDF file. An unauthenticated attacker could leverage this vulnerability to achieve...
Generation of fake documents via public GET-call
Impact Generation of fake documents via public GET-call Patches We recommend to update to the current version 6.3.5.1. You can get the update to 6.3.5.1 regularly via the Auto-Updater or directly via the download overview. https://www.shopware.com/en/download/shopware-6 Workarounds For older...
GHSA-JVG4-9RC2-WVCR Generation of fake documents via public GET-call
Impact Generation of fake documents via public GET-call Patches We recommend to update to the current version 6.3.5.1. You can get the update to 6.3.5.1 regularly via the Auto-Updater or directly via the download overview. https://www.shopware.com/en/download/shopware-6 Workarounds For older...
UBUNTU-CVE-2021-26221
The ezxmlnew function in ezXML 0.8.6 and earlier is vulnerable to OOB write when opening XML file after exhausting the memory pool...
PT-2021-11344 · Softmaker · Softmaker Office Planmaker 2021
Name of the Vulnerable Software and Affected Versions: SoftMaker Office PlanMaker 2021 Revision 1014 Description: A specially crafted document can cause the document parser to copy data from a particular record type into a static-sized buffer within an object that is smaller than the size used fo...
February 2, 2021—KB4598291 (OS Builds 19041.789 and 19042.789) Preview
None None...
Security Bulletin: ViewONE is vulnerable to XXE attack when opening PDF documents
Summary ViewONE is vulnerable to XXE attack when opening PDF documents. Vulnerability Details CVEID: CVE-2018-1835 DESCRIPTION: IBM Daeja Virtual is vulnerable to a XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose...
IBM: Insecure Object Permissions for Guest User leads to access to internal documents!
An Insecure Object Permissions vulnerability was reported to IBM, analyzed and have been remediated. Thank you to mocr7...
Mozilla: Cross-origin information leakage via redirected PDF requests
The Mozilla Foundation Security Advisory describes this flaw as: If a user clicked into a specifically crafted PDF, the PDF reader could be confused into leaking cross-origin information, when said information is served as chunked data...
DEBIAN-CVE-2021-21238
PySAML2 is a pure python implementation of SAML Version 2 Standard. PySAML2 before 6.5.0 has an improper verification of cryptographic signature vulnerability. All users of pysaml2 that need to validate signed SAML documents are impacted. The vulnerability is a variant of XML Signature wrapping...
Design/Logic Flaw
PySAML2 is a pure python implementation of SAML Version 2 Standard. PySAML2 before 6.5.0 has an improper verification of cryptographic signature vulnerability. Users of pysaml2 that use the default CryptoBackendXmlSec1 backend and need to verify signed SAML documents are impacted. PySAML2 does no...
PYSEC-2021-48
PySAML2 is a pure python implementation of SAML Version 2 Standard. PySAML2 before 6.5.0 has an improper verification of cryptographic signature vulnerability. All users of pysaml2 that need to validate signed SAML documents are impacted. The vulnerability is a variant of XML Signature wrapping...
PYSEC-2021-49
PySAML2 is a pure python implementation of SAML Version 2 Standard. PySAML2 before 6.5.0 has an improper verification of cryptographic signature vulnerability. Users of pysaml2 that use the default CryptoBackendXmlSec1 backend and need to verify signed SAML documents are impacted. PySAML2 does no...
GHSA-5P3X-R448-PC62 Improper Verification of Cryptographic Signature in PySAML2
Impact All users of pysaml2 that use the default CryptoBackendXmlSec1 backend and need to verify signed SAML documents are impacted. pysaml2 = 6.4.1 does not ensure that a signed SAML document is correctly signed. The default CryptoBackendXmlSec1 backend is using the xmlsec1 binary to verify the...
Improper Verification of Cryptographic Signature in PySAML2
Impact All users of pysaml2 that use the default CryptoBackendXmlSec1 backend and need to verify signed SAML documents are impacted. pysaml2 = 6.4.1 does not ensure that a signed SAML document is correctly signed. The default CryptoBackendXmlSec1 backend is using the xmlsec1 binary to verify the...