Lucene search
+L

6525 matches found

Tenable Nessus
Tenable Nessus
•added 2021/10/29 12:00 a.m.•51 views

Debian DLA-2796-1 : jbig2dec - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2796 advisory. Two issues have been found in jbig2dec, a JBIG2 decoder library. One issue is related to an overflow with a crafted image file. The other is related to a NULL...

9.8CVSS6.6AI score0.03452EPSS
SaveExploits2References7
Tenable Nessus
Tenable Nessus
•added 2021/10/19 12:00 a.m.•22 views

Solaris 10 (x86) : 122260-10

SunOS 5.10x86: SunFreeware GNU ESP Ghostscript Patch. Date this patch was last updated by Sun : Oct/18/21 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...

7AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2021/10/19 12:00 a.m.•25 views

Solaris 10 (sparc) : 122259-10

SunOS 5.10: SunFreeware GNU ESP Ghostscript Patch. Date this patch was last updated by Sun : Oct/18/21 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include"compat.inc";...

7AI score
SaveExploits0References1
NVD
NVD
•added 2021/10/18 2:15 p.m.•34 views

CVE-2021-24684

The WordPress PDF Light Viewer Plugin WordPress plugin before 1.4.12 allows users with Author roles to execute arbitrary OS command on the server via OS Command Injection when invoking Ghostscript...

9CVSS0.04267EPSS
SaveExploits2References1
osv_cve
osv_cve
•added 2021/10/18 2:15 p.m.•24 views

CVE-2021-24684

The WordPress PDF Light Viewer Plugin WordPress plugin before 1.4.12 allows users with Author roles to execute arbitrary OS command on the server via OS Command Injection when invoking Ghostscript...

8.8CVSS6AI score0.04267EPSS
SaveExploits2References1
attackerkb
attackerkb
•added 2021/10/18 2:15 p.m.•12 views

CVE-2021-24684

The WordPress PDF Light Viewer Plugin WordPress plugin before 1.4.12 allows users with Author roles to execute arbitrary OS command on the server via OS Command Injection when invoking Ghostscript...

9CVSS7.5AI score0.04267EPSS
SaveExploits2References2
Prion
Prion
•added 2021/10/18 2:15 p.m.•36 views

Command injection

The WordPress PDF Light Viewer Plugin WordPress plugin before 1.4.12 allows users with Author roles to execute arbitrary OS command on the server via OS Command Injection when invoking Ghostscript...

9CVSS9.2AI score0.04267EPSS
SaveExploits2References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/10/18 12:00 a.m.•10 views

CVE-2021-24684: Improper Neutralization of Special Elements used in an OS Command

The WordPress PDF Light Viewer Plugin WordPress plugin before 1.4.12 allows users with Author roles to execute arbitrary OS command on the server via OS Command Injection when invoking Ghostscript...

9CVSS6.4AI score0.04267EPSS
SaveExploits2References3
CNNVD
CNNVD
•added 2021/10/18 12:00 a.m.•31 views

WordPress Plugin: Operating System Command Injection Vulnerability

WordPress plugin is a WordPress open source application plugin . WordPress PDF Light Viewer plugin version 1.4.12 before the existence of operating system command injection vulnerability, an attacker can exploit the vulnerability in the call Ghostscript through the OS command injection on the...

9CVSS8.4AI score0.04267EPSS
SaveExploits2References2
Positive Technologies
Positive Technologies
•added 2021/10/18 12:00 a.m.•10 views

PT-2021-16194

Name of the Vulnerable Software and Affected Versions WordPress PDF Light Viewer Plugin versions prior to 1.4.12 Description The issue allows users with Author roles to execute arbitrary OS commands on the server via OS Command Injection when invoking Ghostscript. Recommendations For versions pri...

9CVSS0.04267EPSS
SaveExploits2References3
OpenVAS
OpenVAS
•added 2021/10/02 12:00 a.m.•34 views

Fedora: Security Advisory for ghostscript (FEDORA-2021-49d98b15e7)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.9CVSS9.5AI score0.83913EPSS
SaveExploits0References2
Fedora
Fedora
•added 2021/09/24 8:53 p.m.•38 views

[SECURITY] Fedora 35 Update: ghostscript-9.54.0-4.fc35

This package provides useful conversion utilities based on Ghostscript softwa re, for converting PS, PDF and other document formats between each other. Ghostscript is a suite of software providing an interpreter for Adobe Systems' PostScript PS and Portable Document Format PDF page description...

9.9CVSS9.7AI score0.83913EPSS
SaveExploits0
OpenVAS
OpenVAS
•added 2021/09/24 12:00 a.m.•22 views

Fedora: Security Advisory for ghostscript (FEDORA-2021-be0a93fb15)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.9CVSS9.5AI score0.83913EPSS
SaveExploits0References2
Fedora
Fedora
•added 2021/09/23 7:30 p.m.•52 views

[SECURITY] Fedora 33 Update: ghostscript-9.54.0-2.1.fc33

This package provides useful conversion utilities based on Ghostscript softwa re, for converting PS, PDF and other document formats between each other. Ghostscript is a suite of software providing an interpreter for Adobe Systems' PostScript PS and Portable Document Format PDF page description...

9.9CVSS9.7AI score0.83913EPSS
SaveExploits0
osv_mgasa
osv_mgasa
•added 2021/09/23 4:49 a.m.•22 views

MGASA-2021-0436 Updated ghostscript packages fix security vulnerability

Trivial -dSAFER bypass in 9.55. CVE-2021-3781...

9.9CVSS9.5AI score0.83913EPSS
SaveExploits0References7
Mageia
Mageia
•added 2021/09/23 4:49 a.m.•60 views

Updated ghostscript packages fix security vulnerability

Trivial -dSAFER bypass in 9.55. CVE-2021-3781...

9.9CVSS2.1AI score0.83913EPSS
SaveExploits0References6
OpenVAS
OpenVAS
•added 2021/09/23 12:00 a.m.•19 views

SUSE: Security Advisory (SUSE-SU-2021:3180-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.9CVSS9.6AI score0.83913EPSS
SaveExploits0References4
OpenVAS
OpenVAS
•added 2021/09/23 12:00 a.m.•22 views

SUSE: Security Advisory (SUSE-SU-2021:3044-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.9CVSS9.6AI score0.83913EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
•added 2021/09/22 12:00 a.m.•39 views

SUSE SLED12: ghostscript / ghostscript-devel / ghostscript-x11 / etc (SUSE-SU-2021:3180-1)

The remote SUSE Linux SLED12 / SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2021:3180-1 advisory. - CVE-2021-3781: Fixed a trivial -dSAFER bypass command injection bsc1190381 Tenable has extracted the preceding description block...

9.9CVSS7.3AI score0.83913EPSS
SaveExploits0References4
OpenVAS
OpenVAS
•added 2021/09/22 12:00 a.m.•24 views

Fedora: Security Advisory for ghostscript (FEDORA-2021-256c80b4eb)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.9CVSS9.5AI score0.83913EPSS
SaveExploits0References2
Rows per page
Query Builder