Arbitrary Code Execution

firefox is vulnerable to arbitrary code execution. The vulnerability exists as a flaw was found in the way Firefox rendered certain images using WebGL. A web page containing malicious content could cause Firefox to crash or, under certain conditions, possibly execute arbitrary code with the...

Denial Of Service (DoS)

firefix/thunderbird is vulnerable to denial of service. A flaw was found in the way Firefox used its embedded Cairo library to render certain fonts. A web page containing malicious content could cause Firefox to crash or, under certain conditions, possibly execute arbitrary code with the privileg...

Arbitrary Code Execution

freetype is vulnerable to arbitrary code execution. The vulnerability exists as it was found that the FreeType font rendering engine improperly validated certain position values when processing input streams. If a user loaded a specially-crafted font file with an application linked against...

Heap-based Buffer Overflows

FreeType is vulnerable to a heap-based buffer overflow. Due to a flaw found in the way the FreeType font rendering engine processed certain TrueType GX fonts, if a user loaded a specially-crafted font file with an application linked against FreeType, it could cause the application to crash or,...

Arbitrary Code Execution

freetype is vulnerable to arbitrary code execution. The vulnerability exists as it was discovered that the FreeType font rendering engine improperly validated certain position values when processing input streams. If a user loaded a specially-crafted font file with an application linked against...

Arbitrary Code Execution

freetype is vulnerable to arbitrary code execution. The vulnerability exists as a stack-based buffer overflow flaw was found in the way the FreeType font rendering engine processed some PostScript Type 1 fonts. If a user loaded a specially-crafted font file with an application linked against...

Denial Of Service (DoS)

freetype is vulnerable to denial of service DoS. The vulnerability exists as a stack overflow flaw was found in the way the FreeType font rendering engine processed PostScript Type 1 font files that contain nested Standard Encoding Accented Character seac calls. If a user loaded a specially-craft...

Arbitrary Code Execution

freetype is vulnerable to arbitrary code execution. The vulnerability exists through an array index error was found in the way the FreeType font rendering engine processed certain PostScript Type 42 font files. If a user loaded a specially-crafted font file with an application linked against...

Erroneous Stylesheet Caching

SeaMonkey is vulnerable to erroneous stylesheet caching. The CSSLoaderImpl::DoSheetComplete function in layout/style/nsCSSLoader.cpp changes the case of certain strings in a stylesheet before adding this stylesheet to the XUL cache, which might allow remote attackers to modify the browser's font...

Denial Of Service (DoS)

pango is vulnerable to denial of service. An input sanitization flaw, leading to an array index error, was found in the way the Pango font rendering library synthesized the Glyph Definition GDEF table from a font's character map and the Unicode property database. If an attacker created a...

Privilege Escalation

kernel is vulnerable to privilege escalation. The i915 driver in drivers/char/drm/i915dma.c and sys/dev/pci/drm/i915drv.c does not restrict the DRMI915HWSADDR ioctl to the Direct Rendering Manager master, allowing for local privilege escalation. Note: the flaw only affects systems based on the...

The vulnerability of the WebKit rendering module, related to the execution of operations beyond the buffer boundaries in memory, allows an attacker to execute arbitrary code.

The vulnerability of the WebKit rendering module is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted web page...

The vulnerability of the WebKit rendering module, related to the execution of operations beyond the buffer boundaries in memory, allows an attacker to execute arbitrary code.

The vulnerability of the WebKit rendering module is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted web page...

The vulnerability of the WebKit rendering module, related to the execution of operations beyond the buffer boundaries in memory, allows an attacker to execute arbitrary code.

The vulnerability of the WebKit rendering module is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted web page...

The vulnerability of the WebKit rendering module, related to the execution of operations beyond the buffer boundaries in memory, allows an attacker to execute arbitrary code.

The vulnerability of the WebKit rendering module is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted web page...

The vulnerability of the WebKit rendering module, related to the execution of operations beyond the buffer boundaries in memory, allows an attacker to execute arbitrary code.

The vulnerability of the WebKit rendering module is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted web page...

The vulnerability of the WebKit rendering module, related to the execution of operations beyond the buffer boundaries in memory, allows a malicious actor to execute arbitrary code.

The vulnerability of the WebKit rendering module is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted web page...

The vulnerability of the WebKit rendering module, related to the lack of measures taken to protect the structure of web pages, allows attackers to execute cross-site scripting attacks.

The vulnerability of the WebKit rendering module is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks...

PT-2020-15388 · Jenkins · Jenkins Fitnesse Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins FitNesse Plugin versions 1.31 and earlier Description: The issue is related to a stored cross-site scripting XSS vulnerability. It occurs because the plugin does not correctly escape report contents before showing them on the Jenkins...

@cardgamesplay/klondike (>=0.1.0, <=0.1.1), @devexpress/analytics-core (>=18.2.7, <=19.1.1-alpha-19071-2010) +61 more potentially affected by CVE-2019-14862 via knockout (>=3.0.0, <=3.4.2)

knockout NPM version =3.0.0, =0.1.0, =18.2.7, =4.0.0, =0.1.0-zgx, =0.1.0, =1.0.0, =0.0.1, =0.2.20, =18.2.7, =17.2.2-beta, =18.2.7, =2.0.1-beta, =2.0.4-beta - dotnetify-path-fix 1.0.0-beta and more Source cves: CVE-2019-14862 Source advisory: OSV:GHSA-VCJJ-XF2R-MWVC...