GHSA-7X2P-4JVH-6384 Dompdf: File existence oracle via font-face stylesheet declaration

Description Dompdf is vulnerable to a File Existence Oracle attack through the manipulation of the CSS @font-face directive. By providing malicious HTML that references local files via the file:// protocol repeatedly, an attacker can trigger PHP memory exhaustion. The critical point of this flaw ...

Security Hole in ECL Feature of Java VM Embedded in Lotus Notes Client R5

========================================================================= Security Hole in ECL Feature of Java VM Embedded in Lotus Notes Client R5 http://java-house.etl.go.jp/ml/archive/j-h-b/038904.html ========================================================================= The security hole...