841 matches found
CVE-2026-23884
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.21.0, offscreen bitmap deletion leaves gdi-drawing pointing to freed memory, causing UAF when related update packets arrive. A malicious server can trigger a client‑side use after free, causing a crash DoS and...
[SECURITY] Fedora 43 Update: python-ezdxf-1.4.3-3.fc43
This Python package is designed to facilitate the creation and manipulation of DXF documents, with compatibility across various DXF versions. It empowers users to seamlessly load and edit DXF files while preserving all content, except for comments. Any unfamiliar DXF tags encountered in the...
EUVD-2025-131922
A maliciously crafted DWG file, when parsed through Autodesk 3ds Max, can force a Use-After-Free vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...
CVE-2025-11797
A maliciously crafted DWG file, when parsed through Autodesk 3ds Max, can force a Use-After-Free vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...
CVE-2025-11797
The CVE-2025-11797 entry affects Autodesk 3ds Max, where parsing a specially crafted DWG file can trigger a Use-After-Free in the DWG parser. Impact is a crash, potential exposure of sensitive data, or arbitrary code execution in the current process context. Affected component: DWG parsing within...
Drawing-Captcha APP 输入验证错误漏洞
Drawing-Captcha APP is a captcha application from Drawing Captcha open source. An input validation error vulnerability exists in Drawing-Captcha APP that stems from the presence of host header injection in the /register and /confirm-email endpoints, which could result in users being redirected to...
SUSE-SU-2025:03490-1 Security update for cairo
This update for cairo fixes the following issues: - CVE-2019-6461: Avoid assert when drawing arcs with NaN angles bsc1122338...
Security update for cairo
This update for cairo fixes the following issues: CVE-2019-6461: Avoid assert when drawing arcs with NaN angles bsc1122338 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the command...
EUVD-2010-5320
Malware in sbrugna...
EUVD-2015-1499
Malware in sbrugna...
EUVD-2015-0837
Malware in sbrugna...
WordPress Interactive Medical Drawing of Human Body plugin <= 2.6 - Authenticated (Admin+) Stored Cross-Site Scripting vulnerability
Authenticated Admin+ Stored Cross-Site Scripting vulnerability discovered by Jonas Benjamin Friedli in WordPress Plugin Interactive Medical Drawing of Human Body versions = 2.6...
EUVD-2022-42252
Malicious code in bioql PyPI...
EUVD-2022-42251
Malicious code in bioql PyPI...
EUVD-2025-28586
Malicious code in bioql PyPI...
EUVD-2024-30278
Malicious code in bioql PyPI...
EUVD-2025-25699
Malicious code in bioql PyPI...
Server-Side Request Forgery (SSRF)
phpoffice/phpspreadsheet is vulnerable to Server-Side Request Forgery SSRF. The vulnerability is due to improper input validation because the setPath method in the PhpOffice\PhpSpreadsheet\Worksheet\Drawing class allows attackers to craft requests to internal resources...
MGASA-2025-0233 Updated java-1.8.0-openjdk, java-11-openjdk, java-17-openjdk & java-latest-openjdk packages fix security vulnerabilities
Better Glyph drawing. CVE-2025-30749 Enhance TLS protocol support. CVE-2025-30754 Improve scripting supports. CVE-2025-30761 Improve HTTP client header handling. CVE-2025-50059 Better Glyph drawing redux. CVE-2025-50106...
Updated java-1.8.0-openjdk, java-11-openjdk, java-17-openjdk & java-latest-openjdk packages fix security vulnerabilities
Better Glyph drawing. CVE-2025-30749 Enhance TLS protocol support. CVE-2025-30754 Improve scripting supports. CVE-2025-30761 Improve HTTP client header handling. CVE-2025-50059 Better Glyph drawing redux. CVE-2025-50106...