Lucene search
+L

365 matches found

AstraLinux
AstraLinux
added 2024/11/23 3:04 a.m.7 views

Astra Linux – Vulnerability in Firefox

Potential race conditions in IndexedDB could have caused memory corruption, resulting in a potentially exploitable crash. This vulnerability affects Firefox 132 and Thunderbird 132...

9.8CVSS5.9AI score0.00393EPSS
SaveExploits0References3
NVD
NVD
added 2024/11/18 9:15 p.m.23 views

CVE-2024-52506

Graylog is a free and open log management platform. The reporting functionality in Graylog allows the creation and scheduling of reports which contain dashboard widgets displaying individual log messages or metrics aggregated from fields of multiple log messages. This functionality, as included i...

7.1CVSS0.00632EPSS
SaveExploits1References3
Github Security Blog
Github Security Blog
added 2024/11/18 8:02 p.m.19 views

Graylog concurrent PDF report rendering can leak other users' reports

Impact The reporting functionality in Graylog allows the creation and scheduling of reports which contain dashboard widgets displaying individual log messages or metrics aggregated from fields of multiple log messages. This functionality, as included in Graylog 6.1.0 & 6.1.1, is vulnerable to...

7.1CVSS6.5AI score0.00632EPSS
SaveExploits1References5Affected Software1
OSV
OSV
added 2024/11/15 11:07 a.m.4 views

OESA-2024-2413 ghostscript security update

Ghostscript is an interpreter for PostScript™ and Portable Document Format PDF files. Ghostscript consists of a PostScript interpreter layer, and a graphics library. Security Fixes: VUL-0: CVE-2024-46955: ghostscript: Out of bounds read when reading color in "Indexed" color spaceCVE-2024-46955...

5.5CVSS7AI score0.00297EPSS
SaveExploits0References2
OSV
OSV
added 2024/11/15 11:07 a.m.3 views

OESA-2024-2412 ghostscript security update

Ghostscript is an interpreter for PostScript™ and Portable Document Format PDF files. Ghostscript consists of a PostScript interpreter layer, and a graphics library. Security Fixes: VUL-0: CVE-2024-46955: ghostscript: Out of bounds read when reading color in "Indexed" color spaceCVE-2024-46955...

5.5CVSS7AI score0.00297EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2024/11/12 1:13 a.m.16 views

CVE-2024-46955

A flaw was found in Artifex Ghostscript's psi/zcolor.c component. This vulnerability allows an out-of-bounds read, potentially leading to information disclosure via improper handling of color in the Indexed color space...

5.5CVSS5.7AI score0.00297EPSS
SaveExploits0References7
NVD
NVD
added 2024/11/10 10:15 p.m.19 views

CVE-2024-46955

An issue was discovered in psi/zcolor.c in Artifex Ghostscript before 10.04.0. There is an out-of-bounds read when reading color in Indexed color space...

5.5CVSS0.00297EPSS
SaveExploits0References5
OSV
OSV
added 2024/11/10 10:15 p.m.1 views

DEBIAN-CVE-2024-46955

An issue was discovered in psi/zcolor.c in Artifex Ghostscript before 10.04.0. There is an out-of-bounds read when reading color in Indexed color space...

5.5CVSS5.6AI score0.00297EPSS
SaveExploits0References1
OSV
OSV
added 2024/11/10 10:15 p.m.3 views

ALPINE-CVE-2024-46955

An issue was discovered in psi/zcolor.c in Artifex Ghostscript before 10.04.0. There is an out-of-bounds read when reading color in Indexed color space...

5.5CVSS7AI score0.00297EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/11/10 12:00 a.m.3 views

Artifex Ghostscript 安全漏洞

Artifex Ghostscript is a free software package from Artifex, Inc. based on Adobe, PostScript, and the Portable Document Format page description language. A security vulnerability exists in Artifex Ghostscript prior to version 10.04.0, which is caused by an out-of-bounds read vulnerability when...

5.5CVSS5.3AI score0.00297EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2024/11/10 12:00 a.m.22 views

CVE-2024-46955

An issue was discovered in psi/zcolor.c in Artifex Ghostscript before 10.04.0. There is an out-of-bounds read when reading color in Indexed color space...

0.00297EPSS
SaveExploits0References4
Debian CVE
Debian CVE
added 2024/11/10 12:00 a.m.18 views

CVE-2024-46955

An issue was discovered in psi/zcolor.c in Artifex Ghostscript before 10.04.0. There is an out-of-bounds read when reading color in Indexed color space...

5.5CVSS5.5AI score0.00297EPSS
SaveExploits0
AlpineLinux
AlpineLinux
added 2024/11/10 12:00 a.m.23 views

CVE-2024-46955

An issue was discovered in psi/zcolor.c in Artifex Ghostscript before 10.04.0. There is an out-of-bounds read when reading color in Indexed color space...

5.5CVSS6.4AI score0.00297EPSS
SaveExploits0
Vulnrichment
Vulnrichment
added 2024/11/10 12:00 a.m.11 views

CVE-2024-46955

An issue was discovered in psi/zcolor.c in Artifex Ghostscript before 10.04.0. There is an out-of-bounds read when reading color in Indexed color space...

6.7AI score0.00297EPSS
SaveExploits0References4
CVE
CVE
added 2024/11/10 12:00 a.m.104 views

CVE-2024-46955

CVE-2024-46955 : Ghostscript contains an out-of-bounds read in psi/zcolor.c when reading color in Indexed color space, before version 10.04.0. Impact is a local issue with user interaction required (per CVSS details: AV:L, UI:R, Availability:A:H). The fix is indicated by the ghostpdl-10.04.0 comm...

5.5CVSS6.4AI score0.00297EPSS
SaveExploits0References5Affected Software1
OSV
OSV
added 2024/11/08 11:07 a.m.6 views

OESA-2024-2359 ghostscript security update

Ghostscript is an interpreter for PostScript™ and Portable Document Format PDF files. Ghostscript consists of a PostScript interpreter layer, and a graphics library. Security Fixes: VUL-0: CVE-2024-46951: ghostscript: Arbitrary code execution via unchecked "Implementation" pointer in "Pattern"...

7.8CVSS8AI score0.00357EPSS
SaveExploits0References4
OSV
OSV
added 2024/11/08 11:07 a.m.3 views

OESA-2024-2356 ghostscript security update

Ghostscript is an interpreter for PostScript™ and Portable Document Format PDF files. Ghostscript consists of a PostScript interpreter layer, and a graphics library. Security Fixes: VUL-0: CVE-2024-46951: ghostscript: Arbitrary code execution via unchecked "Implementation" pointer in "Pattern"...

7.8CVSS7.7AI score0.00357EPSS
SaveExploits0References3
OSV
OSV
added 2024/11/08 11:07 a.m.6 views

OESA-2024-2355 ghostscript security update

Ghostscript is an interpreter for PostScript™ and Portable Document Format PDF files. Ghostscript consists of a PostScript interpreter layer, and a graphics library. Security Fixes: VUL-0: CVE-2024-46951: ghostscript: Arbitrary code execution via unchecked "Implementation" pointer in "Pattern"...

7.8CVSS8AI score0.00357EPSS
SaveExploits0References4
SUSE Linux
SUSE Linux
added 2024/11/07 10:11 a.m.5 views

Security update for ghostscript

This update for ghostscript fixes the following issues: CVE-2024-46951: Fixed arbitrary code execution via unchecked "Implementation" pointer in "Pattern" color space bsc1232265. CVE-2024-46953: Fixed integer overflow when parsing the page format results in path truncation, path traversal, code...

7.8CVSS8.3AI score0.00389EPSS
SaveExploits0References16
SUSE Linux
SUSE Linux
added 2024/11/07 10:11 a.m.3 views

Security update for ghostscript

This update for ghostscript fixes the following issues: CVE-2024-46951: Fixed arbitrary code execution via unchecked "Implementation" pointer in "Pattern" color space bsc1232265. CVE-2024-46953: Fixed integer overflow when parsing the page format results in path truncation, path traversal, code...

7.8CVSS7.6AI score0.00389EPSS
SaveExploits0References16
Rows per page
Query Builder