Lucene search
K

56 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2007-3487

Malware in sbrugna...

4.3CVSS6.1AI score0.00874EPSS
Exploits1References29
OSV
OSV
added 2025/02/11 12:0 a.m.15 views

ALSA-2025:1329 Moderate: doxygen security update

Doxygen can generate an online class browser in HTML and/or a reference manual in LaTeX from a set of documented source files. The documentation is extracted directly from the sources. Doxygen can also be configured to extract the code structure from undocumented source files. Security Fixes:...

6.9CVSS7.3AI score0.3466EPSS
Exploits6References4
OSV
OSV
added 2024/10/24 6:15 p.m.0 views

UBUNTU-CVE-2024-46478

HTMLDOC v1.9.18 contains a buffer overflow in parsepre function,ps-pdf.cxx:5681...

9.8CVSS6.1AI score0.0027EPSS
Exploits1References3
OpenVAS
OpenVAS
added 2023/04/27 12:0 a.m.10 views

Fedora: Security Advisory for lilypond-doc (FEDORA-2023-fb8bc496c2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.6CVSS8.6AI score0.00064EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2023/04/27 12:0 a.m.10 views

Fedora: Security Advisory for lilypond-doc (FEDORA-2023-6edb8fab0d)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.6CVSS8.6AI score0.00064EPSS
Exploits1References2
Fedora
Fedora
added 2023/04/26 1:44 a.m.15 views

[SECURITY] Fedora 37 Update: lilypond-doc-2.24.1-1.fc37

LilyPond is an automated music engraving system. It formats music beautifully and automatically, and has a friendly syntax for its input files. This package contains the HTML documentation for LilyPond...

8.6CVSS8.5AI score0.00064EPSS
Exploits1
SUSE CVE
SUSE CVE
added 2023/02/15 4:5 a.m.1 views

SUSE CVE-2019-19630

HTMLDOC 1.9.7 allows a stack-based buffer overflow in the hdstrlcpy function in string.c when called from rendercontents in ps-pdf.cxx via a crafted HTML document...

4.4CVSS7.1AI score0.00538EPSS
Exploits1References4
Tenable Nessus
Tenable Nessus
added 2022/12/22 12:0 a.m.10 views

Fedora 36 : woff (2022-706c76c4f0)

The remote Fedora 36 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-706c76c4f0 advisory. Fix a possible double free in woffEncode. - Update License to SPDX - improved summary and description - Add hand-written man pages - Install HTML format...

5.6AI score
Exploits0References1
IBM Security Bulletins
IBM Security Bulletins
added 2022/09/26 3:31 a.m.21 views

Security Bulletin: InfoSphere Guardium Data Redaction Java API Documentation Frame Injection Vulnerability (CVE-2013-1571)

Abstract Java API Documentation contains a frame injection vulnerability. Content VULNERABILITY DETAILS: CVEID: CVE-2013-1571 DESCRIPTION: HTML documentation generated by the Javadoc tool contains a security vulnerability. The vulnerability allows an attacker to craft a malicious link to the...

4.3CVSS7.5AI score0.26602EPSS
Exploits1
IBM Security Bulletins
IBM Security Bulletins
added 2022/09/25 11:13 p.m.24 views

Security Bulletin: IBM InfoSphere Information Server Java API Documentation Frame Injection Vulnerability (CVE-2013-1571)

Abstract Java API Documentation contains a frame injection vulnerability. Content VULNERABILITY DETAILS: CVEID: CVE-2013-1571 DESCRIPTION: HTML documentation generated by the Javadoc tool contains a security vulnerability. The vulnerability allows an attacker to craft a malicious link to the...

4.3CVSS7.4AI score0.26602EPSS
Exploits1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2022/09/25 11:13 p.m.69 views

Security Bulletin: Javadoc vulnerability exists in the IMS Connect API for Java component of IMS Enterprise Suite (CVE-2013-1571)

Abstract The IMS™ Connect API for Java™ component of IMS Enterprise Suite version 2.2 contains a frame injection vulnerability for Javadoc™. Content VULNERABILITY DETAILS CVE ID : CVE-2013-1571 DESCRIPTION HTML documentation generated by the Javadoc tool contains a security vulnerability. The...

4.3CVSS7.4AI score0.26602EPSS
Exploits1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2022/09/25 11:13 p.m.42 views

Security Bulletin: Informix JDBC Java API Documentation Frame Injection Vulnerability (CVE-2013-1571)

Abstract Java API Documentation contains a frame injection vulnerability. Content CVEID: CVE-2013-1571 DESCRIPTION: HTML documentation generated by the Javadoc tool contains a security vulnerability. The vulnerability allows an attacker to craft a malicious link to the documentation which injects...

4.3CVSS7.6AI score0.26602EPSS
Exploits1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2022/09/25 9:6 p.m.20 views

Security Bulletin: IBM Tivoli Directory Integrator (TDI) Java API Documentation Frame Injection Vulnerability (CVE-2013-1571)

Abstract Java API Documentation contains a frame injection vulnerability. Content VULNERABILITY DETAILS: CVEID: CVE-2013-1571 DESCRIPTION: HTML documentation generated by the Javadoc tool used by TDI contains a security vulnerability. The vulnerability allows an attacker to craft a malicious link...

4.3CVSS7.4AI score0.26602EPSS
Exploits1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2022/09/25 9:6 p.m.10 views

Security Bulletin: IBM Tivoli Access Manager for e-business (TAMeb) Java API Documentation Frame Injection Vulnerability (CVE-2013-1571)

Abstract Java API Documentation contains a frame injection vulnerability. Content VULNERABILITY DETAILS: CVEID: CVE-2013-1571 DESCRIPTION: HTML documentation generated by the Javadoc tool used by TAMeb contains a security vulnerability. The vulnerability allows an attacker to craft a malicious li...

4.3CVSS7.5AI score0.26602EPSS
Exploits1Affected Software1
CNNVD
CNNVD
added 2022/04/27 12:0 a.m.1 views

HTMLDOC 缓冲区错误漏洞

HTMLDOC is an open source program that converts HTML and Markdown files to EPUB, Indexed HTML, PostScript and PDF formats. A security vulnerability exists in HTMLDOC that stems from a heap-based buffer overflow in the function pdfwritenames in the ps-pdf.cxx component, which could lead to arbitra...

7.8CVSS8.1AI score0.00216EPSS
Exploits1References4
ATTACKERKB
ATTACKERKB
added 2022/04/04 11:15 a.m.2 views

CVE-2022-24191

In HTMLDOC 1.9.14, an infinite loop in the gifreadlzw function can lead to a pointer arbitrarily pointing to heap memory and resulting in a buffer overflow...

5.5CVSS6.9AI score0.00082EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2022/04/04 12:0 a.m.1 views

PT-2022-16532 · Htmldoc +5 · Htmldoc +5

Name of the Vulnerable Software and Affected Versions: HTMLDOC version 1.9.14 Description: The issue is caused by an infinite loop in the gif read lzw function, which can lead to a pointer arbitrarily pointing to heap memory, resulting in a buffer overflow. Recommendations: For HTMLDOC version...

10CVSS6.6AI score0.05615EPSS
Exploits21References91
Fedora
Fedora
added 2021/02/26 1:10 a.m.77 views

[SECURITY] Fedora 33 Update: postgresql-12.6-1.fc33

PostgreSQL is an advanced Object-Relational database management system DBM S. The base postgresql package contains the client programs that you'll need to access a PostgreSQL DBMS server, as well as HTML documentation for the whole system. These client programs can be located on the same machine ...

8.8CVSS8.2AI score0.23757EPSS
Exploits1
OSV
OSV
added 2019/12/08 2:15 a.m.0 views

UBUNTU-CVE-2019-19630

HTMLDOC 1.9.7 allows a stack-based buffer overflow in the hdstrlcpy function in string.c when called from rendercontents in ps-pdf.cxx via a crafted HTML document...

7.8CVSS7.5AI score0.00538EPSS
Exploits1References5
Fedora
Fedora
added 2019/07/26 1:51 a.m.25 views

[SECURITY] Fedora 29 Update: postgresql-10.9-1.fc29

PostgreSQL is an advanced Object-Relational database management system DBM S. The base postgresql package contains the client programs that you'll need to access a PostgreSQL DBMS server, as well as HTML documentation for the whole system. These client programs can be located on the same machine ...

9CVSS0.8AI score0.11379EPSS
Exploits0
Rows per page
Query Builder