Artifex Software Ghostscript Buffer Overflow Vulnerability (CNVD-2020-46244)

Artifex Software Ghostscript is an open source parser for Postscript a page description language and programming language used in the electronics industry and desktop publishing from Artifex Software, Inc. The product can display Postscript files as well as print Postscript files on non-PostScrip...

Linux kernel buffer overflow vulnerability (CNVD-2020-43614)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A buffer overflow vulnerability exists in vgaconscrollbackupdate in the Linux kernel. The vulnerability stems from a networked system or product performing operations ...

IBM Security Key Lifecycle Manager Information Disclosure Vulnerability (CNVD-2020-43154)

IBM Security Key Lifecycle Manager Tivoli Key Lifecycle Manager is a set of key lifecycle management software from IBM in the United States. The software provides key storage, key maintenance and key lifecycle management for storage devices. An information disclosure vulnerability exists in IBM...

MilkyTracker Resource Management Error Vulnerability

MilkyTracker is an application that plays MOD format files and arranges them. A resource management error vulnerability exists in the PlayerGeneric.cpp file in MilkyTracker 1.02.00 and earlier versions. The vulnerability originates from a networked system or product that mismanages system resourc...

Treck IPv4 stack double release vulnerability

Treck TCP/IP is a suite of TCP Transmission Control Protocol/IP Internet Interconnection Protocol from Treck, Inc. dedicated to embedded systems. A double release vulnerability exists in the Treck IPv4 stack. The vulnerability arises from mismanagement of system resources e.g., memory, disk space...

Sync Breeze Enterprise Denial of Service Vulnerability

Sync Breeze Enterprise is a file synchronization utility that allows you to synchronize and manage the disk files of your networked computers, mainly used to categorize, save and manage files. A denial of service vulnerability exists in Sync Breeze Enterprise. An attacker can exploit the...

FreeBSD Resource Management Error Vulnerability (CNVD-2020-35935)

FreeBSD is a set of Unix-like operating systems from the FreeBSD Foundation. A resource management error vulnerability exists in FreeBSD. The vulnerability arises from mismanagement of system resources e.g., memory, disk space, files, etc. by a networked system or product. No detailed vulnerabili...

FFmpeg Resource Management Error Vulnerability

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A resource management error vulnerability exists in FFmpeg version 4.2.3. The vulnerability stems from mismanagement of system resources e.g., memory, disk space, files, etc. by a networked...

Qualcomm MSM8909W and QCS605 Resource Management Error Vulnerability

The Qualcomm QCS605 and Qualcomm MSM8909W are both central processing unit CPU products from Qualcomm Incorporated. A resource management error vulnerability exists in Display in the Qualcomm MSM8909W and QCS605. The vulnerability arises from improper management of system resources e.g., memory,...

KDE Amarok Resource Management Error Vulnerability

KDE Amarok is a cross-platform open source audio player from the KDE community. A resource management error vulnerability exists in KDE Amarok version 2.8.0. The vulnerability stems from mismanagement of system resources e.g., memory, disk space, files, etc. by a networked system or product. No...

Kata Containers Backlink Vulnerability

Kata Containers is an open source lightweight virtual machine builder from the Kata Containers community. A backlink vulnerability in Kata Containers versions prior to 1.11.0, which stems from a networked system or product that does not properly filter filenames of links or shortcuts that represe...

COVIDSafe app information disclosure vulnerability (CNVD-2020-30664)

COVIDSafe app is an Australian coronavirus contact tracing app. An information disclosure vulnerability exists in the COVIDSafe app. The vulnerability stems from errors such as configuration during operation of a networked system or product. An attacker could exploit the vulnerability to obtain...

Canonical Subiquity Log Message Disclosure Vulnerability

Canonical Subiquity is an Ubuntu server installer from Canonical UK. A log information disclosure vulnerability exists in Canonical Subiquity used in Ubuntu Server. The vulnerability stems from the abnormal output of log files from a networked system or product. No details of the vulnerability ar...

libEMF Resource Management Error Vulnerability

libEMF is a library for generating enhanced metafiles. A resource management error vulnerability exists in libEMF 1.0.11 and earlier versions. The vulnerability stems from mismanagement of system resources e.g., memory, disk space, files, etc. by a networked system or product. No detailed...

KDE kio-extras Information Disclosure Vulnerability

KDE kio-extras is an add-on from the KDE community that provides KIO KDE Input/Output functionality. An information disclosure vulnerability exists in the fishProtocol::establishConnection in the fish/fish.cpp file in KDE kio-extras versions 20.04.0 and earlier. The vulnerability stems from a...

FreeRDP Resource Management Error Vulnerability

FreeRDP is an open source implementation of the Remote Desktop Protocol RDP from the FreeRDP team. FreeRDP Resource Management Error Vulnerability. The vulnerability stems from mismanagement of system resources e.g., memory, disk space, files, etc. by a networked system or product. An attacker ca...

AASync Buffer Overflow Vulnerability

AASync is a file backup, folder synchronization utility. A buffer overflow vulnerability exists in AASync version 2.2.1.0. The vulnerability stems from a networked system or product performing operations in memory without properly validating data boundaries, resulting in incorrect read and write...

QEMU Input Validation Error Vulnerability

QEMU Quick Emulator is a set of simulation processor software by French software developer Fabrice Bellard. The software is fast, cross-platform and other characteristics. An input validation error vulnerability exists in QEMU versions 4.0.1 through 4.2.0. The vulnerability originates from a...

[SECURITY] Fedora 32 Update: dolphin-emu-5.0.11819-5.fc32

Dolphin is a Gamecube, Wii and Triforce the arcade machine based on the Gamecube emulator, which supports full HD video with several enhancements such as compatibility with all PC controllers, turbo speed, networked multiplaye r, and more. Most games run perfectly or with minor bugs...

Apple CUPS Buffer Overflow Vulnerability

Apple CUPS is the United States Apple Apple company's set of open source for OS X and Unix-like system printing system. The system is based on the Internet Printing Protocol IPP, providing most PostScript and raster printer services. A buffer overflow vulnerability exists in Apple CUPS. The...