PT-2020-5564 · Artifex +7 · Ghostscript +7

Name of the Vulnerable Software and Affected Versions: GhostScript versions 9.50 Description: A buffer overflow issue in the okiibm print page1 function in devices/gdevokii.c allows a remote attacker to cause a denial of service via a crafted PDF file. Recommendations: For GhostScript version 9.5...

PT-2020-5566 · Artifex +7 · Ghostscript +7

Name of the Vulnerable Software and Affected Versions: Ghostscript versions prior to 9.51 Description: The issue is related to a buffer overflow in the jetp3852 print page function, which can be exploited by a remote attacker to cause a denial of service. This can be achieved via a crafted PDF...

PT-2020-5553 · Artifex +7 · Ghostscript +7

Name of the Vulnerable Software and Affected Versions: GhostScript versions prior to 9.51 Description: A buffer overflow issue in the tiff12 print page function allows a remote attacker to cause a denial of service via a crafted PDF file. Recommendations: For versions prior to 9.51, update to...

PT-2020-5557 · Artifex +7 · Ghostscript +7

Name of the Vulnerable Software and Affected Versions: GhostScript versions prior to 9.51 Description: A buffer overflow issue in the cif print page function allows a remote attacker to cause a denial of service via a crafted PDF file. The issue is related to a buffer overflow in memory...

Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Microsoft

cve-2020-1337-poc poc for CVE-2020-1337 Windows Print Spooler...

Microsoft Windows Multiple Vulnerabilities (KB4571741)

This host is missing a critical security update according to Microsoft KB4571741 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Windows Multiple Vulnerabilities (KB4571692)

This host is missing a critical security update according to Microsoft KB4571692 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Windows Multiple Vulnerabilities (KB4571694)

This host is missing a critical security update according to Microsoft KB4571694. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Windows Multiple Vulnerabilities (KB4571736)

This host is missing a critical security update according to Microsoft KB4571736 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Windows Multiple Vulnerabilities (KB4571729)

This host is missing a critical security update according to Microsoft KB4571729 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Windows Multiple Vulnerabilities (KB4566782)

This host is missing a critical security update according to Microsoft KB4566782 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Windows Multiple Vulnerabilities (KB4565351)

This host is missing a critical security update according to Microsoft KB4565351 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Windows Multiple Vulnerabilities (KB4565349)

This host is missing a critical security update according to Microsoft KB4565349 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Windows Print Spooler Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when the Windows Print Spooler service improperly allows arbitrary writing to the file system. An attacker who successfully exploited this vulnerability could run arbitrary code with elevated system privileges. An attacker could then install programs...

PT-2020-3676

Name of the Vulnerable Software and Affected Versions Windows Print Spooler affected versions not specified Description An elevation of privilege issue exists due to the Windows Print Spooler service improperly allowing arbitrary writing to the file system. This could enable an attacker to run...

KLA11929 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Support Update. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, obtain sensitive information, spoof user interface. Below is a complete list of vulnerabilities: 1. A memory corruption...

PT-2020-3937 · Microsoft · Windows Print Spooler +1

Name of the Vulnerable Software and Affected Versions: Windows Print Spooler affected versions not specified Description: The issue is related to inadequate access control in the Windows Print Spooler service, allowing an attacker to elevate their privileges by running a specially crafted...

Buffer Over-reads

tcpdump is vulnerable to a buffer over-read. The vulnerability exists due to a flaw in print-fr.c:mfrprint...

Buffer Overflows

The BGP parser in tcpdump has a buffer over-read in print-bgp.c:bgpcapabilitiesprint BGPCAPCODEMP...

RosarioSIS Cross-Site Scripting Vulnerability

RosarioSIS is a student information system for school management. A cross-site scripting vulnerability exists in RosarioSIS 6.7.2. The vulnerability stems from improper validation of user-supplied input in the PrintSchedules.php script. A remote attacker can exploit the vulnerability by using the...