SVG++ 代码问题漏洞

SVG++ Ssvgpp is a C++ framework. The framework includes an SVG syntax parser, adapters for handling parsed data, and various utilities. SVGPP A security vulnerability exists in SVG++ that stems from the XMLDocument::getRoot function in the renderDocument function incorrectly handling the...

Improper Access Control in janeczku/calibre-web

Description With default settings, low-level users will not have permission to read name of private shelf shelf create by another user and not in public mode. However, due to incorrect HTML render, the application does not work as intended. Proof of Concept - Step 1: Login with admin account and ...

freetype2:type1-render: Use-of-uninitialized-value in cf2_interpT2CharString

Detailed Report: https://oss-fuzz.com/testcase?key=4918766562050048 Project: freetype2 Fuzzing Engine: libFuzzer Fuzz Target: type1-render Job Type: libfuzzermsanfreetype2 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: cf2interpT2CharString...

freetype2:cff-render-ftengine: Use-of-uninitialized-value in ps_table_add

Detailed Report: https://oss-fuzz.com/testcase?key=5133675149262848 Project: freetype2 Fuzzing Engine: libFuzzer Fuzz Target: cff-render-ftengine Job Type: libfuzzermsanfreetype2 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: pstableadd t42parsecharstrings...

VulnCheck KEV: CVE-2014-0130

Directory traversal vulnerability in actionpack/lib/abstractcontroller/base.rb in the implicit-render implementation in Ruby on Rails allows remote attackers to read arbitrary files via a crafted request...

freetype2:type42-render: Use-of-uninitialized-value in FT_DivFix

Detailed Report: https://oss-fuzz.com/testcase?key=5221928565080064 Project: freetype2 Fuzzing Engine: libFuzzer Fuzz Target: type42-render Job Type: libfuzzermsanfreetype2 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: FTDivFix ttglyphload T42GlyphSlotLoad...

freetype2:type42-render: Use-of-uninitialized-value in TT_Load_Simple_Glyph

Detailed Report: https://oss-fuzz.com/testcase?key=5254848029786112 Project: freetype2 Fuzzing Engine: libFuzzer Fuzz Target: type42-render Job Type: libfuzzermsanfreetype2 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: TTLoadSimpleGlyph loadtruetypeglyph...

OESA-2021-1468 xorg-x11-server security update

Xorg server common files. Security Fixes: A security issue has been found in X.Org before version 21.1.2 and Xwayland before version 21.1.4. The handler for the CompositeGlyphs request of the Render extension does not properly validate the request length leading to out of bounds memory write. Thi...

freetype2:type42-render: Use-of-uninitialized-value in af_glyph_hints_reload

Detailed Report: https://oss-fuzz.com/testcase?key=6119320575410176 Project: freetype2 Fuzzing Engine: libFuzzer Fuzz Target: type42-render Job Type: libfuzzermsanfreetype2 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: afglyphhintsreload afcjkhintsapply...

freetype2:cidtype1-render-ftengine: Use-of-uninitialized-value in tt_face_load_font_dir

Detailed Report: https://oss-fuzz.com/testcase?key=6669422067056640 Project: freetype2 Fuzzing Engine: libFuzzer Fuzz Target: cidtype1-render-ftengine Job Type: libfuzzermsanfreetype2 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: ttfaceloadfontdir...

Updated x11-server packages fix security vulnerabilities

Updated x11-server packages fix security vulnerabilities: The handler for the CompositeGlyphs request of the Render extension does not properly validate the request length leading to out of bounds memory write CVE-2021-4008. The handler for the CreatePointerBarrier request of the XFixes extension...

CVE-2021-4008

A flaw was found in xorg-x11-server in versions before 21.1.2 and before 1.20.14. An out-of-bounds access can occur in the SProcRenderCompositeGlyphs function. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

UBUNTU-CVE-2021-4008

A flaw was found in xorg-x11-server in versions before 21.1.2 and before 1.20.14. An out-of-bounds access can occur in the SProcRenderCompositeGlyphs function. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

PT-2021-27942

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a stack-buffer-overflow crash. Technical details about the crash include the pdfi annot draw, pdfi do annotations, and pdfi page...

Crafter CMS 访问控制错误漏洞

An access control error vulnerability exists in Crafter CMS, an open source content management system CMS for digital experience applications, which stems from a system that does not validate groovy scripts. An attacker with administrator, developer privileges could use the groovy lib to render...

Mozilla Firefox Security Advisory (MFSA2021-20) - Linux

The remote host is missing an update for Mozilla Firefox, announced via the advisory MFSA2021-20. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-on...

CVE-2021-1985

Possible buffer over read due to lack of data length check in QVR Service configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables...

freetype2:windowsfnt-render: Crash in [heap]

Detailed Report: https://oss-fuzz.com/testcase?key=5019745666072576 Project: freetype2 Fuzzing Engine: libFuzzer Fuzz Target: windowsfnt-render Job Type: libfuzzerubsanfreetype2 Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0000017a2010 Crash State: heap Sanitizer: undefined UBSAN...

freetype2:type42-render: Heap-buffer-overflow in ps_table_add

Detailed Report: https://oss-fuzz.com/testcase?key=4778186655793152 Project: freetype2 Fuzzing Engine: libFuzzer Fuzz Target: type42-render Job Type: libfuzzerasanfreetype2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x62500000991a Crash State: pstableadd...

CVE-2021-39118

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to discover the usernames and full names of users via an enumeration vulnerability in the /rest/api/1.0/render endpoint. The affected versions are before version 8.19.0...