7656 matches found
[SECURITY] Fedora 30 Update: mupdf-1.16.1-1.fc30
MuPDF is a lightweight PDF viewer and toolkit written in portable C. The renderer in MuPDF is tailored for high quality anti-aliased graphics. MuPDF renders text with metrics and spacing accurate to within fractions of a pixel for the highest fidelity in reproducing the look of a printed page on...
Mozilla Firefox ESR < 31.2 Multiple Vulnerabilities
Binary data 701248.prm...
[SECURITY] Fedora 30 Update: webkit2gtk3-2.26.1-3.fc30
WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. This package contains WebKit2 based WebKitGTK for GTK 3...
iSeeQ Hybrid DVR WH-H4 2.0.0.P - (get_jpeg) Stream Disclosure
iSeeQ Hybrid DVR WH-H4 2.0.0.P - getjpeg Stream Disclosure Title: iSeeQ Hybrid DVR WH-H4 2.0.0.P - getjpeg Stream Disclosure Date: 2019-10-29 Author: LiquidWorm Vendor:iSeeQ Link: http://www.iseeq.co.kr CVE: N/A !/bin/bash iSeeQ Hybrid DVR WH-H4 1.03R / 2.0.0.P getjpeg Stream Disclosure Vendor:...
@ia-cloud/node-red-contrib-ia-cloud-dashboard (>=0.0.1, <=0.0.4), @telligro/opal-setup (>=0.3.0, <=0.3.1) +4 more potentially affected by CVE-2019-10756 via node-red-dashboard (>=2.3.11, <=2.15.0)
node-red-dashboard NPM version =2.3.11, =0.0.1, =0.3.0, =0.0.5, =0.1.0, =0.3.3, =1.0.11, =1.0.17 Source cves: CVE-2019-10756 Source advisory: OSV:GHSA-XG59-M7WX-853Q...
CVE-2019-17115
Multiple cross-site scripting XSS vulnerabilities in WiKID 2FA Enterprise Server through 4.2.0-b2047 allow remote attackers to inject arbitrary web script or HTML that is triggered when Logs.jsp is visited. The renderedmessage column is retrieved and displayed, unsanitized, on Logs.jsp. A remote...
The vulnerability of Blink’s web page display mechanism in the Google Chrome web browser allows attackers to compromise data integrity, gain unauthorized access to protected information, and cause service interruptions.
The vulnerability of Blink’s web page rendering mechanism in the Google Chrome browser is related to a processing error in the Cross-Origin Resource Sharing CORS policy. Exploiting this vulnerability could allow an attacker to compromise data integrity, gain unauthorized access to protected...
The vulnerability of the Google Chrome browser’s chooser file allows a perpetrator to compromise data integrity, gain unauthorized access to protected information, and cause service interruptions.
The vulnerability of the Google Chrome browser’s chooser file relates to the use of memory after it is freed during rendering. Exploiting this vulnerability can allow an attacker to compromise data integrity, gain unauthorized access to protected information, and cause service failures...
October 15, 2019-KB4519564 Cumulative Update for .NET Framework 4.8 for Windows 10 Version 1709
None None...
October 15, 2019-KB4519562 Cumulative Update for .NET Framework 4.8 for Windows 10 Version 1607 and Windows Server 2016
None None...
Android-Gif-Drawable Open Source Stock in Code Execution Vulnerability
Android-Gif-Drawable is an open source library for Android Gif view and drawing . Android-Gif-Drawable through the JNI bundled Giflib way to render the number of frames , based on this way of rendering will be more efficient than the use of WebView class or Movie class . Android-Gif-Drawable open...
Juniper Junos J-Web CVE-2019-0047 HTML Injection Vulnerability
Description Juniper Junos is prone to an HTML-injection vulnerability. Successful exploits will allow attacker-supplied HTML and script code to run in the context of the affected browser, potentially allowing the attacker to steal cookie-based authentication credentials or control how the site is...
Description of the security update for SharePoint Enterprise Server 2013: October 8, 2019
None None...
PRODSECBUG-2272: XPath Injection via front end rendering functionality
More info at https://magento.com/security/patches/magento-2.3.3-and-2.2.10-security-update...
Fedora 31 : firefox (2019-7f7bace5b4)
Updated to new upstream 69.0.1 - Wayland rendering fixes ---- - The update to 69.0.1 - Fix flickering issues - Fix disappearing webrtc dialogs ---- - Fixed rendering artifacts on Wayland backend Note that Tenable Network Security has extracted the preceding description block directly from the...
The vulnerabilities of Firefox and Firefox ESR browsers, as well as the Thunderbird email client, allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerabilities of Firefox and Firefox ESR browsers, as well as the Thunderbird email client, are caused by buffer overflows. Exploiting these vulnerabilities allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information during page renderin...
Debian DLA-1939-1 : poppler security update
Several issues in poppler, a PDF rendering library, have been fixed. CVE-2018-20650 A missing check for the dict data type could lead to a denial of service. CVE-2018-21009 An integer overflow might happen in Parser::makeStream. CVE-2019-12493 A stack-based buffer over-read by a crafted PDF file...
The vulnerability of Blink’s web page display mechanism in the Google Chrome web browser allows attackers to compromise data integrity, gain unauthorized access to protected information, and cause service interruptions.
The vulnerability of Blink’s web page rendering mechanism in the Google Chrome browser is related to the reutilization of dynamic memory after it is freed by a “trash collector”. Exploiting this vulnerability can allow an attacker to compromise data integrity, gain unauthorized access to protecte...
Debian: Security Advisory (DLA-1939-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DLA 1939-1] poppler security update
Package : poppler Version : 0.26.5-2+deb8u11 CVE ID : CVE-2018-20650 CVE-2018-21009 CVE-2019-12493 Several issues in poppler, a PDF rendering library, have been fixed. CVE-2018-20650 A missing check for the dict data type could lead to a denial of service. CVE-2018-21009 An integer overflow might...