7647 matches found
Moderate: Red Hat Security Advisory: poppler and evince security update
An update for poppler and evince is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
GHSA-M884-279H-32V2 Exceptions displayed in non-debug configurations in Symfony
Description ----------- When ErrorHandler renders an exception HTML page, it uses un-escaped properties from the related Exception class to render the stacktrace. The security issue comes from the fact that the stacktraces were also displayed in non-debug environments. Resolution ---------- The...
CVE-2020-5274
In Symfony before versions 5.0.5 and 4.4.5, some properties of the Exception were not properly escaped when the ErrorHandler rendered it stacktrace. In addition, the stacktrace were displayed even in a non-debug configuration. The ErrorHandler now escape alls properties of the exception, and the...
[SECURITY] Fedora 30 Update: webkit2gtk3-2.28.0-5.fc30
WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. This package contains WebKit2 based WebKitGTK for GTK 3...
The vulnerability of the web page rendering modules in WebKitGTK and WPE WebKit, related to the use of memory after it is freed, allows attackers to execute arbitrary code.
The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit relates to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...
[SECURITY] Fedora 31 Update: php-horde-Horde-Form-2.0.20-1.fc31
The HordeForm package provides form rendering, validation, and other functionality for the Horde Application Framework...
Fedora: Security Advisory for php-horde-Horde-Form (FEDORA-2020-a55b70b4ab)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
[SECURITY] Fedora 30 Update: php-horde-Horde-Form-2.0.20-1.fc30
The HordeForm package provides form rendering, validation, and other functionality for the Horde Application Framework...
[SECURITY] Fedora 32 Update: php-horde-Horde-Form-2.0.20-1.fc32
The HordeForm package provides form rendering, validation, and other functionality for the Horde Application Framework...
EulerOS Virtualization for ARM 64 3.0.2.0 : freetype (EulerOS-SA-2020-1224)
According to the versions of the freetype package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - The FreeType engine is a free and portable font rendering engine, developed to provide advanced font support for a...
CVE-2019-12278
Opera through 53 on Android allows Address Bar Spoofing. Characters from several languages are displayed in Right-to-Left order, due to mishandling of several Unicode characters. The rendering mechanism, in conjunction with the "first strong character" concept, may improperly operate on a numeric...
Design/Logic Flaw
Opera through 53 on Android allows Address Bar Spoofing. Characters from several languages are displayed in Right-to-Left order, due to mishandling of several Unicode characters. The rendering mechanism, in conjunction with the "first strong character" concept, may improperly operate on a numeric...
Microsoft Word HTML Rendering Use-After-Free Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Word. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of D...
UBUNTU-CVE-2020-6808
When a JavaScript URL javascript: is evaluated and the result is a string, this string is parsed to create an HTML document, which is then presented. Previously, this document's URL as reported by the document.location property, for example was the originating javascript: URL which could lead to...
The vulnerability of Blink’s web page display mechanism in the Google Chrome web browser allows a perpetrator to compromise data integrity, gain access to confidential information, and cause service interruptions.
The vulnerability of Blink’s web page rendering mechanism in the Google Chrome browser is related to a numerical overflow condition. Exploiting this vulnerability could allow an attacker to compromise data integrity, gain access to confidential information, and cause service interruptions through...
[SECURITY] Fedora 30 Update: webkit2gtk3-2.26.4-1.fc30
WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. This package contains WebKit2 based WebKitGTK for GTK 3...
Fedora: Security Advisory for webkit2gtk3 (FEDORA-2020-4d11d35a1f)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Fedora: Security Advisory for poppler (FEDORA-2020-b8b7a4a0e5)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...