The vulnerability affects the implementation of the OCRAndExportToExcel function in the Foxit Reader text viewer and Foxit PhantomPDF PDF editing software. This allows an attacker to execute arbitrary code.

The vulnerability of the OCRAndExportToExcel implementation in the Foxit Reader text viewer and Foxit PhantomPDF PDF editing programs is related to data type conversion errors. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely...

The vulnerability affects the implementation of the RotatePage command in the Foxit Reader text viewer and the Foxit PhantomPDF PDF editing program. This allows an attacker to execute arbitrary code.

The vulnerability of the RotatePage function in the Foxit Reader text viewer and Foxit PhantomPDF PDF editing software lies in data type conversion errors. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely...

The vulnerability of the SetFieldValue command implementation in the Foxit Reader text viewer and Foxit PhantomPDF PDF editing program allows a perpetrator to execute arbitrary code.

The vulnerability of the GetFieldValue function implementation in programs for displaying text in Foxit Reader and editing PDF files in Foxit PhantomPDF is related to data type conversion errors. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely...

NewStart CGSL CORE 5.04 / MAIN 5.04 : thunderbird Multiple Vulnerabilities (NS-SA-2021-0006)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has thunderbird packages installed that are affected by multiple vulnerabilities: - Use after free in ANGLE in Google Chrome prior to 81.0.4044.122 allowed a remote attacker to potentially exploit heap corruption via a crafted...

NewStart CGSL CORE 5.04 / MAIN 5.04 : firefox Multiple Vulnerabilities (NS-SA-2021-0007)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has firefox packages installed that are affected by multiple vulnerabilities: - Use after free in ANGLE in Google Chrome prior to 81.0.4044.122 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML...

PT-2021-2427 · Microsoft · Windows Dns Server +1

Name of the Vulnerable Software and Affected Versions: Windows DNS Server affected versions not specified Description: The issue is related to errors in processing input data in the Windows DNS server service, which can be exploited by a remote attacker to execute arbitrary code. This can affect...

PT-2021-2426 · Microsoft · Windows Dns Server +1

Name of the Vulnerable Software and Affected Versions: Windows DNS Server affected versions not specified Description: The issue is related to errors in processing input data in the Windows DNS server service, which can lead to a denial-of-service condition. This can be exploited by a remote...

The vulnerability of Allen-Bradley MicroLogix programmable logic controllers, related to errors in number processing, allows a intruder to trigger a service failure.

The vulnerability of Allen-Bradley MicroLogix programmable logic controllers is related to errors in number processing. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause malfunctions in service operations using a specially crafted package...

DEBIAN-CVE-2021-28038

An issue was discovered in the Linux kernel through 5.11.3, as used with Xen PV. A certain part of the netback driver lacks necessary treatment of errors such as failed memory allocations as a result of changes to the handling of grant mapping errors. A host OS denial of service may occur during...

Design/Logic Flaw

An issue was discovered in the Linux kernel through 5.11.3, as used with Xen PV. A certain part of the netback driver lacks necessary treatment of errors such as failed memory allocations as a result of changes to the handling of grant mapping errors. A host OS denial of service may occur during...

CVE-2021-28038

An issue was discovered in the Linux kernel through 5.11.3, as used with Xen PV. A certain part of the netback driver lacks necessary treatment of errors such as failed memory allocations as a result of changes to the handling of grant mapping errors. A host OS denial of service may occur during...

MGASA-2021-0102 Updated kernel-linus packages fix security vulnerabilities

This kernel-linus update is based on upstream 5.10.19 and fixes at least the following security issues: An information disclosure vulnerability exists in the ARM SIGPAGE functionality of Linux Kernel. A userland application can read the contents of the sigpage, which can leak kernel memory...

Updated kernel packages fix security vulnerabilities

This kernel update is based on upstream 5.10.19 and fixes at least the following security issues: An information disclosure vulnerability exists in the ARM SIGPAGE functionality of Linux Kernel. A userland application can read the contents of the sigpage, which can leak kernel memory contents. An...

`quinn` invalidly assumes the memory layout of std::net::SocketAddr

The quinn crate has assumed std::net::SocketAddrV4 and std::net::SocketAddrV6 have the same memory layout as the system C representation sockaddr. It has simply casted the pointers to convert the socket addresses to the system representation. The standard library does not say anything about the...

Linux: netback fails to honor grant mapping errors

ISSUE DESCRIPTION XSA-362 tried to address issues here, but in the case of the netback driver the changes were insufficient: It left the relevant function invocation with, effectively, no error handling at all. As a result, memory allocation failures there could still lead to frontend-induced...

The vulnerability of the SAP Commerce Cloud e-commerce platform, related to errors in code generation, allows a hacker to execute arbitrary code.

The vulnerability of the SAP Commerce Cloud e-commerce platform is related to errors in code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Dell EMC PowerProtect Cyber Recovery Information Disclosure Vulnerability

Dell EMC PowerProtect is an application from Dell Japan. It is used by companies to protect, manage and recover their most critical application data. An information disclosure vulnerability exists in Dell EMC PowerProtect Cyber Recovery version 19.7.0.1. The vulnerability arises from errors such ...

The vulnerability of the SetImageExtent() function in the ImageMagick console graphics editor allows a hacker to cause a service failure.

The vulnerability of the SetImageExtent function /MagickCore/image.c in the console-based graphic editor ImageMagick is related to memory release errors. Exploiting this vulnerability could allow a remote attacker to trigger a service failure by using a specially created file...

The vulnerability of the command-line interface (CLI) of the Azure IoT platform, which allows a malicious actor to escalate their privileges

The vulnerability of the Azure IoT Command Line Interface CLI is related to privilege management errors. Exploiting this vulnerability can allow an attacker to increase their privileges...

openSUSE Security Update : qemu (openSUSE-2021-363)

This update for qemu fixes the following issues : - Fixed potential privilege escalation in virtfs CVE-2021-20181 bsc1182137 - Fixed out-of-bound access in iscsi CVE-2020-11947 bsc1180523 - Fixed out-of-bound access in vmxnet3 emulation CVE-2021-20203 bsc1181639 - Fixed out-of-bound access in ARM...