Lucene search
+L

9415 matches found

CNNVD
CNNVD
added 2022/09/19 12:00 a.m.11 views

OTFCC 缓冲区错误漏洞

OTFCC is a C library and utility open sourced by Caryll. It is used to parse and write OpenType font files. OTFCC suffers from a buffer overflow vulnerability that originates in /release-x64/otfccdump 0x6e41b0 when handling untrusted input, which can be exploited by an attacker to cause a program...

6.5CVSS7.3AI score0.00812EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2022/09/19 12:00 a.m.12 views

OTFCC 安全漏洞

OTFCC is a C library and utility open sourced by Caryll. It is used to parse and write OpenType font files.OTFCC has a security vulnerability that stems from a package submitted by /release-x64/otfccdump 0x65f724 that contains the offending segment. No detailed vulnerability details are currently...

6.5CVSS6.9AI score0.00774EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2022/09/19 12:00 a.m.13 views

OTFCC 缓冲区错误漏洞

OTFCC is a C library and utility open sourced by Caryll. It is used to parse and write OpenType font files. OTFCC suffers from a buffer overflow vulnerability that stems from the release-x64/otfccdump 0x6b544e commit package containing a heap buffer overflow. No detailed vulnerability details are...

6.5CVSS7.5AI score0.00812EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2022/09/19 12:00 a.m.14 views

OTFCC 缓冲区错误漏洞

OTFCC is a C library and utility open sourced by Caryll. It is used to parse and write OpenType font files. OTFCC suffers from a buffer overflow vulnerability that originates in /release-x64/otfccdump 0x6e412a when handling untrusted input, which can be exploited by an attacker to cause a program...

6.5CVSS7.3AI score0.00829EPSS
SaveExploits1References3
NVD
NVD
added 2022/09/09 3:15 p.m.29 views

CVE-2022-37405

Cross-Site Request Forgery CSRF vulnerability in Mickey Kay's Better Font Awesome plugin = 2.0.1 at WordPress...

8.8CVSS0.00372EPSS
SaveExploits0References2
OSV
OSV
added 2022/09/09 3:15 p.m.7 views

CVE-2022-37405

Cross-Site Request Forgery CSRF vulnerability in Mickey Kay's Better Font Awesome plugin = 2.0.1 at WordPress...

8.8CVSS5.8AI score0.00372EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2022/09/09 2:39 p.m.35 views

CVE-2022-37405 WordPress Better Font Awesome plugin <= 2.0.1 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Mickey Kay's Better Font Awesome plugin = 2.0.1 at WordPress...

4.3CVSS9.1AI score0.00372EPSS
SaveExploits0References2
CVE
CVE
added 2022/09/09 2:39 p.m.88 views

CVE-2022-37405

CVE-2022-37405 describes a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin Better Font Awesome (versions &lt;= 2.0.1). Multiple connected sources confirm the flaw: an attacker could trigger unintended actions by exploiting CSRF, particularly in settings update flows (WPVul...

8.8CVSS6.5AI score0.00372EPSS
SaveExploits0References2Affected Software1
Tenable Nessus
Tenable Nessus
added 2022/09/09 12:00 a.m.51 views

Ubuntu 20.04 LTS : Linux kernel (Azure CVM) vulnerabilities (USN-5605-1)

The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5605-1 advisory. Asaf Modelevsky discovered that the IntelR 10GbE PCI Express ixgbe Ethernet driver for the Linux kernel performed insufficient control flow management. A...

6.8CVSS7.3AI score0.00573EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2022/09/09 12:00 a.m.7 views

PT-2022-23977 · Mickey Kay · Better Font Awesome

Name of the Vulnerable Software and Affected Versions: Mickey Kay's Better Font Awesome plugin versions = 2.0.1 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This means an attacker could potentially trick a user into performing unintended actions on the web...

8.8CVSS8.5AI score0.00372EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2022/09/09 12:00 a.m.7 views

WordPress plugin Better Font Awesome 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

8.8CVSS7.8AI score0.00372EPSS
SaveExploits0References3
Ubuntu
Ubuntu
added 2022/09/08 7:01 p.m.78 views

USN-5603-1: Linux kernel (Raspberry Pi) vulnerabilities

Asaf Modelevsky discovered that the IntelR 10GbE PCI Express ixgbe Ethernet driver for the Linux kernel performed insufficient control flow management. A local attacker could possibly use this to cause a denial of service. CVE-2021-33061 It was discovered that the virtual terminal driver in the...

6.8CVSS7.1AI score0.00573EPSS
SaveExploits0
OSV
OSV
added 2022/09/08 7:01 p.m.14 views

USN-5603-1 linux-raspi-5.4 vulnerabilities

Asaf Modelevsky discovered that the IntelR 10GbE PCI Express ixgbe Ethernet driver for the Linux kernel performed insufficient control flow management. A local attacker could possibly use this to cause a denial of service. CVE-2021-33061 It was discovered that the virtual terminal driver in the...

6.8CVSS6.9AI score0.00573EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2022/09/08 12:00 a.m.51 views

Ubuntu 18.04 LTS : Linux kernel (Raspberry Pi) vulnerabilities (USN-5603-1)

The remote Ubuntu 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5603-1 advisory. Asaf Modelevsky discovered that the IntelR 10GbE PCI Express ixgbe Ethernet driver for the Linux kernel performed insufficient control flow management. A...

6.8CVSS7.3AI score0.00573EPSS
SaveExploits0References3
Oracle linux
Oracle linux
added 2022/09/06 12:00 a.m.73 views

Unbreakable Enterprise kernel security update

4.1.12-124.66.3 - fuse: fix pipe buffer lifetime for directio Miklos Szeredi Orabug: 33981149 CVE-2022-1011 - vt: drop old FONT ioctls Jiri Slaby Orabug: 34408794 CVE-2021-33656 - video: ofdisplaytiming.h: include errno.h Hsin-Yi Wang Orabug: 34408910 CVE-2021-33655 - fbcon: Disallow setting font...

7.8CVSS7.4AI score0.05871EPSS
SaveExploits15
OSV
OSV
added 2022/09/05 10:33 p.m.12 views

USN-5600-1 linux-hwe-5.4 vulnerabilities

Asaf Modelevsky discovered that the IntelR 10GbE PCI Express ixgbe Ethernet driver for the Linux kernel performed insufficient control flow management. A local attacker could possibly use this to cause a denial of service. CVE-2021-33061 It was discovered that the virtual terminal driver in the...

6.8CVSS6.9AI score0.00573EPSS
SaveExploits0References3
Ubuntu
Ubuntu
added 2022/09/05 10:33 p.m.70 views

USN-5600-1: Linux kernel (HWE) vulnerabilities

Asaf Modelevsky discovered that the IntelR 10GbE PCI Express ixgbe Ethernet driver for the Linux kernel performed insufficient control flow management. A local attacker could possibly use this to cause a denial of service. CVE-2021-33061 It was discovered that the virtual terminal driver in the...

6.8CVSS7.1AI score0.00573EPSS
SaveExploits0
OSV
OSV
added 2022/09/05 10:10 p.m.14 views

USN-5598-1 linux-oracle vulnerability

It was discovered that the virtual terminal driver in the Linux kernel did not properly handle VGA console font changes, leading to an out-of-bounds write. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code...

6.8CVSS6.9AI score0.00573EPSS
SaveExploits0References2
OSV
OSV
added 2022/09/05 9:45 p.m.8 views

USN-5597-1 linux-oracle vulnerability

It was discovered that the virtual terminal driver in the Linux kernel did not properly handle VGA console font changes, leading to an out-of-bounds write. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code...

6.8CVSS6.9AI score0.00573EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2022/09/05 12:00 a.m.38 views

Ubuntu 16.04 ESM : Linux kernel (Oracle) vulnerability (USN-5597-1)

The remote Ubuntu 16.04 ESM host has a package installed that is affected by a vulnerability as referenced in the USN-5597-1 advisory. It was discovered that the virtual terminal driver in the Linux kernel did not properly handle VGA console font changes, leading to an out-of-bounds write. A loca...

6.8CVSS7.1AI score0.00573EPSS
SaveExploits0References2
Rows per page
Query Builder