7710 matches found
openSUSE Security Update : SDL2_image (openSUSE-2019-933)
This update for SDL2image fixes the following issues : Security issues fixed : - CVE-2018-3839: Fixed an exploitable code execution vulnerability that existed in the XCF image rendering functionality of the Simple DirectMedia Layer bsc1089087. - CVE-2018-3977: Fixed a possible code execution via...
ghostscript security update
CentOS Errata and Security Advisory CESA-2019:0633 An update for ghostscript is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...
CVE-2019-10010
Cross-site scripting XSS vulnerability in the PHP League CommonMark library before 0.18.3 allows remote attackers to insert unsafe links into HTML by using double-encoded HTML entities that are not properly escaped during rendering, a different vulnerability than CVE-2018-20583...
CVE-2019-10010
CVE-2019-10010 affects the PHP League CommonMark library (versions up to and including 0.18.2). The vulnerability arises in the renderer when double-encoded HTML entities are not properly escaped, allowing an attacker to craft links that execute unsafe code (XSS). The issue is fixed in 0.18.3, wh...
CVE-2019-10010
Cross-site scripting XSS vulnerability in the PHP League CommonMark library before 0.18.3 allows remote attackers to insert unsafe links into HTML by using double-encoded HTML entities that are not properly escaped during rendering, a different vulnerability than CVE-2018-20583...
[SECURITY] Fedora 28 Update: ghostscript-9.26-3.fc28
This package provides useful conversion utilities based on Ghostscript soft ware, for converting PS, PDF and other document formats between each other. Ghostscript is a suite of software providing an interpreter for Adobe Syste ms' PostScript PS and Portable Document Format PDF page description...
UBUNTU-CVE-2019-9797
Cross-origin images can be read in violation of the same-origin policy by exporting an image after using createImageBitmap to read the image and then rendering the resulting bitmap image within a canvas element. This vulnerability affects Firefox 66...
CVE-2019-9834
The Netdata web application through 1.13.0 allows remote attackers to inject their own malicious HTML code into an imported snapshot, aka HTML Injection. Successful exploitation will allow attacker-supplied HTML to run in the context of the affected browser, potentially allowing the attacker to...
CVE-2019-9834
The Netdata web application through 1.13.0 allows remote attackers to inject their own malicious HTML code into an imported snapshot, aka HTML Injection. Successful exploitation will allow attacker-supplied HTML to run in the context of the affected browser, potentially allowing the attacker to...
CVE-2019-9834
The Netdata web application through 1.13.0 allows remote attackers to inject their own malicious HTML code into an imported snapshot, aka HTML Injection. Successful exploitation will allow attacker-supplied HTML to run in the context of the affected browser, potentially allowing the attacker to...
CVE-2019-9829
CVE-2019-9829 affects Maccms 10. The vulnerability arises from template rendering that uses an include operation on a cache file, bypassing the prohibition of .php files as templates, allowing remote attackers to execute arbitrary PHP code. Documented impact is high (CVSSv3 base score 8.8; networ...
Denial of Service Vulnerability in Action View
Denial of Service Vulnerability in Action View Impact ------ Specially crafted accept headers can cause the Action View template location code to consume 100% CPU, causing the server unable to process requests. This impacts all Rails applications that render views. All users running an affected...
GHSA-M63J-WH5W-C252 Denial of Service Vulnerability in Action View
Denial of Service Vulnerability in Action View Impact ------ Specially crafted accept headers can cause the Action View template location code to consume 100% CPU, causing the server unable to process requests. This impacts all Rails applications that render views. All users running an affected...
The vulnerability of the WebKit rendering module arises from an operation that goes beyond the buffer boundaries in memory, allowing a malicious actor to execute arbitrary code.
The vulnerability of the WebKit rendering module arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted web page...
The vulnerability of the WebKit rendering module arises from an operation that goes beyond the buffer boundaries in memory, allowing a malicious actor to execute arbitrary code.
The vulnerability of the WebKit rendering module arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted web page...
File Content Disclosure in Action View
There is a possible file content disclosure vulnerability in Action View. This vulnerability has been assigned the CVE identifier CVE-2019-5418. Versions Affected: All. Not affected: None. Fixed Versions: 6.0.0.beta3, 5.2.2.1, 5.1.6.2, 5.0.7.2, 4.2.11.1 Impact ------ There is a possible file...
The vulnerability of the WebKit rendering module arises from an operation that goes beyond the buffer boundaries in memory, allowing a malicious actor to execute arbitrary code.
The vulnerability of the WebKit rendering module arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted web page...
The vulnerability of the WebKit rendering module arises from an operation that goes beyond the buffer boundaries in memory, allowing a malicious actor to execute arbitrary code.
The vulnerability of the WebKit rendering module arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted web page...
The vulnerability of the memslot_get_virt function in the rendering system for deleted virtual workstations in SPICE allows a attacker to trigger a service failure or execute arbitrary code.
The vulnerability of the memslotgetvirt function in the SPICE rendering system’s “deleted virtual working area” component is related to the possibility of reading values beyond the allowed range due to an off-by-one error. Exploiting this vulnerability can allow a remote attacker to cause service...
