Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-16253 State: PUBLISHED Published: 2020-08-05T13:42:19 Last Updated: 2024-08-04T13:37:54.191Z Vendors: n/a Products: n/a Problem Types: n/a Description: The PgHero gem through 2.6.0 for Ruby allows CSRF. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ankane/pghero/ - https://github.com/ankane/pghero/issues/330
CVE ID: CVE-2020-16254 State: PUBLISHED Published: 2020-08-05T19:52:30 Last Updated: 2024-08-04T13:37:54.178Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Chartkick gem through 3.3.2 for Ruby allows Cascading Style Sheets (CSS) Injection (without attribute). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ankane/chartkick - https://github.com/ankane/chartkick/issues/546
CVE ID: CVE-2020-16255 State: PUBLISHED Published: 2021-01-15T17:04:47 Last Updated: 2024-08-04T13:37:54.256Z Vendors: n/a Products: n/a Problem Types: n/a Description: ownCloud (Core) before 10.5 allows XSS in login page 'forgot password.' Additional Analyst Notes: - CVE Program Container: References: - https://owncloud.org/security/advisories/ - https://owncloud.com/security-advisories/reflected-xss-in-login-page-forgot-password-functionallity/
CVE ID: CVE-2020-16256 State: PUBLISHED Published: 2020-10-28T17:07:40 Last Updated: 2024-08-04T13:37:54.205Z Vendors: n/a Products: n/a Problem Types: n/a Description: The API on Winston 1.5.4 devices is vulnerable to CSRF. Additional Analyst Notes: - CVE Program Container: References: - https://winstonprivacy.com/ - https://labs.bishopfox.com/advisories/winston-privacy-version-1.5.4
CVE ID: CVE-2020-16257 State: PUBLISHED Published: 2020-10-28T17:02:13 Last Updated: 2024-08-04T13:37:54.198Z Vendors: n/a Products: n/a Problem Types: n/a Description: Winston 1.5.4 devices are vulnerable to command injection via the API. Additional Analyst Notes: - CVE Program Container: References: - https://winstonprivacy.com/ - https://labs.bishopfox.com/advisories/winston-privacy-version-1.5.4
CVE ID: CVE-2020-16258 State: PUBLISHED Published: 2020-10-28T17:18:03 Last Updated: 2024-08-04T13:37:54.200Z Vendors: n/a Products: n/a Problem Types: n/a Description: Winston 1.5.4 devices make use of a Monit service (not managed during the normal user process) which is configured with default credentials. Additional Analyst Notes: - CVE Program Container: References: - https://winstonprivacy.com/ - https://labs.bishopfox.com/advisories/winston-privacy-version-1.5.4
CVE ID: CVE-2020-16259 State: PUBLISHED Published: 2020-10-28T17:20:04 Last Updated: 2024-08-04T13:37:54.205Z Vendors: n/a Products: n/a Problem Types: n/a Description: Winston 1.5.4 devices have an SSH user account with access from bastion hosts. This is undocumented in device documents and is not announced to the user. Additional Analyst Notes: - CVE Program Container: References: - https://winstonprivacy.com/ - https://labs.bishopfox.com/advisories/winston-privacy-version-1.5.4
CVE ID: CVE-2020-16260 State: PUBLISHED Published: 2020-10-28T17:15:56 Last Updated: 2024-08-04T13:37:54.250Z Vendors: n/a Products: n/a Problem Types: n/a Description: Winston 1.5.4 devices do not enforce authorization. This is exploitable from the intranet, and can be combined with other vulnerabilities for remote exploitation. Additional Analyst Notes: - CVE Program Container: References: - https://winstonprivacy.com/ - https://labs.bishopfox.com/advisories/winston-privacy-version-1.5.4
CVE ID: CVE-2020-16261 State: PUBLISHED Published: 2020-10-28T17:10:32 Last Updated: 2024-08-04T13:37:54.235Z Vendors: n/a Products: n/a Problem Types: n/a Description: Winston 1.5.4 devices allow a U-Boot interrupt, resulting in local root access. Additional Analyst Notes: - CVE Program Container: References: - https://winstonprivacy.com/ - https://labs.bishopfox.com/advisories/winston-privacy-version-1.5.4
CVE ID: CVE-2020-16262 State: PUBLISHED Published: 2020-10-28T17:12:13 Last Updated: 2024-08-04T13:37:54.246Z Vendors: n/a Products: n/a Problem Types: n/a Description: Winston 1.5.4 devices have a local www-data user that is overly permissioned, resulting in root privilege escalation. Additional Analyst Notes: - CVE Program Container: References: - https://winstonprivacy.com/ - https://labs.bishopfox.com/advisories/winston-privacy-version-1.5.4
CVE ID: CVE-2020-16263 State: PUBLISHED Published: 2020-10-28T17:13:58 Last Updated: 2024-08-04T13:37:54.210Z Vendors: n/a Products: n/a Problem Types: n/a Description: Winston 1.5.4 devices have a CORS configuration that trusts arbitrary origins. This allows requests to be made and viewed by arbitrary origins. Additional Analyst Notes: - CVE Program Container: References: - https://winstonprivacy.com/ - https://labs.bishopfox.com/advisories/winston-privacy-version-1.5.4
CVE ID: CVE-2020-16266 State: PUBLISHED Published: 2020-08-12T12:59:54 Last Updated: 2024-08-04T13:37:54.255Z Vendors: n/a Products: n/a Problem Types: n/a Description: An XSS issue was discovered in MantisBT before 2.24.2. Improper escaping on view_all_bug_page.php allows a remote attacker to inject arbitrary HTML into the page by saving it into a text Custom Field, leading to possible code execution in the browser of any user subsequently viewing the issue (if CSP settings allow it). Additional Analyst Notes: - CVE Program Container: References: - https://mantisbt.org/bugs/view.php?id=27056 - https://mantisbt.org/blog/archives/mantisbt/665
CVE ID: CVE-2020-16267 State: PUBLISHED Published: 2020-10-06T19:02:42 Last Updated: 2024-08-04T13:37:54.212Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zoho ManageEngine Applications Manager version 14740 and prior allows an authenticated SQL Injection via a crafted jsp request in the RCA module. Additional Analyst Notes: - CVE Program Container: References: - https://www.manageengine.com - https://www.manageengine.com/products/applications_manager/issues.html#v14750 - https://www.manageengine.com/products/applications_manager/security-updates/security-updates-cve-2020-16267.html
CVE ID: CVE-2020-16268 State: PUBLISHED Published: 2020-12-29T20:07:00 Last Updated: 2024-08-04T13:37:54.237Z Vendors: n/a Products: n/a Problem Types: n/a Description: The MSI installer in 1E Client 4.1.0.267 and 5.0.0.745 allows remote authenticated users and local users to gain elevated privileges via the repair option. This applies to installations that have a TRANSFORM (MST) with the option to disable the installation of the Nomad module. An attacker may craft a .reg file in a specific location that will be able to write to any registry key as an elevated user. Additional Analyst Notes: - CVE Program Container: References: - https://help.1e.com/display/GI/1E+Security+Advisory-1E+Client+
nal Analyst Notes: - CVE Program Container: References: - https://help.1e.com/display/GI/1E+Security+Advisory-1E+Client+for+Windows%3A+CVE-2020-16268%2C+CVE-2020-27643%2C+CVE-2020-27644%2C+CVE-2020-27645
CVE ID: CVE-2020-16269 State: PUBLISHED Published: 2020-08-03T15:56:23 Last Updated: 2024-08-04T13:37:54.246Z Vendors: n/a Products: n/a Problem Types: n/a Description: radare2 4.5.0 misparses DWARF information in executable files, causing a segmentation fault in parse_typedef in type_dwarf.c via a malformed DW_AT_name in the .debug_info section. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/radareorg/radare2/issues/17383 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/45SGGCWFIIV7N2X2QZRREHOW7ODT3IH7/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZJET
ZRREHOW7ODT3IH7/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZJET3RR6W7LAK4H6VPTMAZS24W7XYHRZ/
CVE ID: CVE-2020-16270 State: PUBLISHED Published: 2020-10-16T13:08:06 Last Updated: 2024-08-04T13:37:54.198Z Vendors: n/a Products: n/a Problem Types: n/a Description: OLIMPOKS under 3.3.39 allows Auth/Admin ErrorMessage XSS. Remote Attacker can use discovered vulnerability to inject malicious JavaScript payload to victim’s browsers in context of vulnerable applications. Executed code can be used to steal administrator’s cookies, influence HTML content of targeted application and perform phishing-related attacks. Vulnerable application used in more than 3000 organizations in different sectors from retail to industries. Additional Analyst Notes: - CVE Program Container: References: - https:/
in different sectors from retail to industries. Additional Analyst Notes: - CVE Program Container: References: - https://olimpoks.ru/oks/forum/olimpoks5.php - https://bdu.fstec.ru/vul/2020-04623 - https://github.com/Security-AVS/CVE-2020-16270
CVE ID: CVE-2020-16271 State: PUBLISHED Published: 2020-08-03T16:19:23 Last Updated: 2024-08-04T13:37:54.220Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SRP-6a implementation in Kee Vault KeePassRPC before 1.12.0 generates insufficiently random numbers, which allows remote attackers to read and modify data in the KeePass database via a WebSocket connection. Additional Analyst Notes: - CVE Program Container: References: - https://forum.kee.pm/t/a-critical-security-update-for-keepassrpc-is-available/3040 - https://danzinger.wien/exploiting-keepassrpc/
CVE ID: CVE-2020-16272 State: PUBLISHED Published: 2020-08-03T16:19:11 Last Updated: 2024-08-04T13:37:54.216Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SRP-6a implementation in Kee Vault KeePassRPC before 1.12.0 is missing validation for a client-provided parameter, which allows remote attackers to read and modify data in the KeePass database via an A=0 WebSocket connection. Additional Analyst Notes: - CVE Program Container: References: - https://forum.kee.pm/t/a-critical-security-update-for-keepassrpc-is-available/3040 - https://danzinger.wien/exploiting-keepassrpc/
CVE ID: CVE-2020-16273 State: PUBLISHED Published: 2020-11-12T18:53:45 Last Updated: 2024-08-04T13:37:54.222Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Arm software implementing the Armv8-M processors (all versions), the stack selection mechanism could be influenced by a stack-underflow attack in v8-M TrustZone based processors. An attacker can cause a change to the stack pointer used by the Secure World from a non-secure application if the stack is not initialized. This vulnerability affects only the software that is based on Armv8-M processors with the Security Extension. Additional Analyst Notes: - CVE Program Container: References: - https://developer.arm.com/support/
Security Extension. Additional Analyst Notes: - CVE Program Container: References: - https://developer.arm.com/support/arm-security-updates/armv8-m-stack-sealing
CVE ID: CVE-2020-16275 State: PUBLISHED Published: 2020-08-10T22:55:22 Last Updated: 2024-08-04T13:37:54.253Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in the Credential Manager component in SAINT Security Suite 8.0 through 9.8.20 could allow arbitrary script to run in the context of a logged-in user when the user clicks on a specially crafted link. Additional Analyst Notes: - CVE Program Container: References: - https://download.saintcorporation.com/products/saint_advisory15.txt
CVE ID: CVE-2020-16276 State: PUBLISHED Published: 2020-08-10T22:55:26 Last Updated: 2024-08-04T13:37:54.251Z Vendors: n/a Products: n/a Problem Types: n/a Description: An SQL injection vulnerability in the Assets component of SAINT Security Suite 8.0 through 9.8.20 allows a remote, authenticated attacker to gain unauthorized access to the database. Additional Analyst Notes: - CVE Program Container: References: - https://download.saintcorporation.com/products/saint_advisory15.txt
CVE ID: CVE-2020-16277 State: PUBLISHED Published: 2020-08-10T22:55:30 Last Updated: 2024-08-04T13:37:54.245Z Vendors: n/a Products: n/a Problem Types: n/a Description: An SQL injection vulnerability in the Analytics component of SAINT Security Suite 8.0 through 9.8.20 allows a remote, authenticated attacker to gain unauthorized access to the database. Additional Analyst Notes: - CVE Program Container: References: - https://download.saintcorporation.com/products/saint_advisory15.txt
CVE ID: CVE-2020-16278 State: PUBLISHED Published: 2020-08-10T22:55:33 Last Updated: 2024-08-04T13:37:54.218Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in the Permissions component in SAINT Security Suite 8.0 through 9.8.20 could allow arbitrary script to run in the context of a logged-in user when the user clicks on a specially crafted link. Additional Analyst Notes: - CVE Program Container: References: - https://download.saintcorporation.com/products/saint_advisory15.txt
CVE ID: CVE-2020-16279 State: PUBLISHED Published: 2020-08-20T15:22:54 Last Updated: 2024-08-04T13:37:54.207Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Kommbox component in Rangee GmbH RangeeOS 8.0.4 is vulnerable to Remote Code Execution due to untrusted user supplied input being passed to the command line without sanitization. Additional Analyst Notes: - CVE Program Container: References: - https://www.contextis.com/en/resources/advisories/cve-2020-16279
CVE ID: CVE-2020-16280 State: PUBLISHED Published: 2020-08-20T15:22:58 Last Updated: 2024-08-04T13:37:54.248Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple Rangee GmbH RangeeOS 8.0.4 modules store credentials in plaintext including credentials of users for several external facing administrative services, domain joined users, and local administrators. To exploit the vulnerability a local attacker must have access to the underlying operating system. Additional Analyst Notes: - CVE Program Container: References: - https://www.contextis.com/en/resources/advisories/cve-2020-16280
CVE ID: CVE-2020-16281 State: PUBLISHED Published: 2020-08-20T15:23:01 Last Updated: 2024-08-04T13:37:54.247Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Kommbox component in Rangee GmbH RangeeOS 8.0.4 could allow a local authenticated attacker to escape from the restricted environment and execute arbitrary code due to unrestricted context menus being accessible. Additional Analyst Notes: - CVE Program Container: References: - https://www.contextis.com/en/resources/advisories/cve-2020-16281
CVE ID: CVE-2020-16282 State: PUBLISHED Published: 2020-08-20T15:23:07 Last Updated: 2024-08-04T13:37:54.204Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the default configuration of Rangee GmbH RangeeOS 8.0.4, all components are executed in the context of the privileged root user. This may allow a local attacker to break out of the restricted environment or inject malicious code into the application and fully compromise the operating system. Additional Analyst Notes: - CVE Program Container: References: - https://www.contextis.com/en/resources/advisories/cve-2020-16282
CVE ID: CVE-2020-16287 State: PUBLISHED Published: 2020-08-13T02:07:31 Last Updated: 2024-08-04T13:37:54.215Z Vendors: n/a Products: n/a Problem Types: n/a Description: A buffer overflow vulnerability in lprn_is_black() in contrib/lips4/gdevlprn.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is fixed in v9.51. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.ghostscript.com/show_bug.cgi?id=701785 - https://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=450da26a76286a8342ec0864b3d113856709f8f6 - https://lists.debian.org/debian-lts-announce/2020/08/msg00032.html - https://www.debian.org
8342ec0864b3d113856709f8f6 - https://lists.debian.org/debian-lts-announce/2020/08/msg00032.html - https://www.debian.org/security/2020/dsa-4748 - https://security.gentoo.org/glsa/202008-20 - https://usn.ubuntu.com/4469-1/
CVE ID: CVE-2020-16288 State: PUBLISHED Published: 2020-08-13T02:07:45 Last Updated: 2024-08-04T13:37:54.247Z Vendors: n/a Products: n/a Problem Types: n/a Description: A buffer overflow vulnerability in pj_common_print_page() in devices/gdevpjet.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is fixed in v9.51. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.ghostscript.com/show_bug.cgi?id=701791 - http://git.ghostscript.com/?p=ghostpdl.git%3Bh=aba3375ac24f8e02659d9b1eb9093909618cdb9f - https://lists.debian.org/debian-lts-announce/2020/08/msg00032.html - https://www.debian.org/security/2
9093909618cdb9f - https://lists.debian.org/debian-lts-announce/2020/08/msg00032.html - https://www.debian.org/security/2020/dsa-4748 - https://security.gentoo.org/glsa/202008-20 - https://usn.ubuntu.com/4469-1/
CVE ID: CVE-2020-16289 State: PUBLISHED Published: 2020-08-13T02:07:50 Last Updated: 2024-08-04T13:37:54.252Z Vendors: n/a Products: n/a Problem Types: n/a Description: A buffer overflow vulnerability in cif_print_page() in devices/gdevcif.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is fixed in v9.51. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.ghostscript.com/show_bug.cgi?id=701788 - https://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=d31e25ed5b130499e0d880e4609b1b4824699768 - https://lists.debian.org/debian-lts-announce/2020/08/msg00032.html - https://www.debian.org/secur
80e4609b1b4824699768 - https://lists.debian.org/debian-lts-announce/2020/08/msg00032.html - https://www.debian.org/security/2020/dsa-4748 - https://security.gentoo.org/glsa/202008-20 - https://usn.ubuntu.com/4469-1/
CVE ID: CVE-2020-16290 State: PUBLISHED Published: 2020-08-13T02:07:58 Last Updated: 2024-08-04T13:37:54.285Z Vendors: n/a Products: n/a Problem Types: n/a Description: A buffer overflow vulnerability in jetp3852_print_page() in devices/gdev3852.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is fixed in v9.51. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.ghostscript.com/show_bug.cgi?id=701786 - http://git.ghostscript.com/?p=ghostpdl.git%3Bh=93cb0c0adbd9bcfefd021d59c472388f67d3300d - https://lists.debian.org/debian-lts-announce/2020/08/msg00032.html - https://www.debian.org/security/20
72388f67d3300d - https://lists.debian.org/debian-lts-announce/2020/08/msg00032.html - https://www.debian.org/security/2020/dsa-4748 - https://security.gentoo.org/glsa/202008-20 - https://usn.ubuntu.com/4469-1/
CVE ID: CVE-2020-16291 State: PUBLISHED Published: 2020-08-13T02:08:03.000Z Last Updated: 2025-03-04T18:49:33.855Z Vendors: n/a Products: n/a Problem Types: n/a Description: A buffer overflow vulnerability in contrib/gdevdj9.c of Artifex Software GhostScript v9.18 to v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is fixed in v9.51. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.ghostscript.com/show_bug.cgi?id=701787 - http://git.ghostscript.com/?p=ghostpdl.git;h=4f73e8b4d578e69a17f452fa60d2130c5faaefd6 - https://lists.debian.org/debian-lts-announce/2020/08/msg00032.html - https://www.debian.org/security/2020/dsa-4748 -
- https://lists.debian.org/debian-lts-announce/2020/08/msg00032.html - https://www.debian.org/security/2020/dsa-4748 - https://security.gentoo.org/glsa/202008-20 - https://usn.ubuntu.com/4469-1/ - https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/tree/contrib/gdevdj9.c?h=ghostpdl-9.18#n824 - https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=4f73e8b4d578e69a17f452fa60d2130c5faaefd6
CVE ID: CVE-2020-16292 State: PUBLISHED Published: 2020-08-13T02:08:08 Last Updated: 2024-08-04T13:37:54.213Z Vendors: n/a Products: n/a Problem Types: n/a Description: A buffer overflow vulnerability in mj_raster_cmd() in contrib/japanese/gdevmjc.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is fixed in v9.51. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.ghostscript.com/show_bug.cgi?id=701793 - https://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=863ada11f9a942a622a581312e2be022d9e2a6f7 - https://lists.debian.org/debian-lts-announce/2020/08/msg00032.html - https://www.debian.o
42a622a581312e2be022d9e2a6f7 - https://lists.debian.org/debian-lts-announce/2020/08/msg00032.html - https://www.debian.org/security/2020/dsa-4748 - https://security.gentoo.org/glsa/202008-20 - https://usn.ubuntu.com/4469-1/
CVE ID: CVE-2020-16293 State: PUBLISHED Published: 2020-08-13T02:08:12 Last Updated: 2024-08-04T13:37:54.250Z Vendors: n/a Products: n/a Problem Types: n/a Description: A null pointer dereference vulnerability in compose_group_nonknockout_nonblend_isolated_allmask_common() in base/gxblend.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is fixed in v9.51. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.ghostscript.com/show_bug.cgi?id=701795 - https://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=7870f4951bcc6a153f317e3439e14d0e929fd231 - https://lists.debian.org/debian-lts-announce/20
p=ghostpdl.git%3Ba=commit%3Bh=7870f4951bcc6a153f317e3439e14d0e929fd231 - https://lists.debian.org/debian-lts-announce/2020/08/msg00032.html - https://www.debian.org/security/2020/dsa-4748 - https://security.gentoo.org/glsa/202008-20 - https://usn.ubuntu.com/4469-1/
CVE ID: CVE-2020-16294 State: PUBLISHED Published: 2020-08-13T02:08:17 Last Updated: 2024-08-04T13:37:54.237Z Vendors: n/a Products: n/a Problem Types: n/a Description: A buffer overflow vulnerability in epsc_print_page() in devices/gdevepsc.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is fixed in v9.51. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.ghostscript.com/show_bug.cgi?id=701794 - https://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=89f58f1aa95b3482cadf6977da49457194ee5358 - https://lists.debian.org/debian-lts-announce/2020/08/msg00032.html - https://www.debian.org/sec
df6977da49457194ee5358 - https://lists.debian.org/debian-lts-announce/2020/08/msg00032.html - https://www.debian.org/security/2020/dsa-4748 - https://security.gentoo.org/glsa/202008-20 - https://usn.ubuntu.com/4469-1/
CVE ID: CVE-2020-16295 State: PUBLISHED Published: 2020-08-13T02:08:22 Last Updated: 2024-08-04T13:37:54.249Z Vendors: n/a Products: n/a Problem Types: n/a Description: A null pointer dereference vulnerability in clj_media_size() in devices/gdevclj.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is fixed in v9.51. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.ghostscript.com/show_bug.cgi?id=701796 - http://git.ghostscript.com/?p=ghostpdl.git%3Bh=2c2dc335c212750e0fb8ae157063bc06cafa8d3e - https://lists.debian.org/debian-lts-announce/2020/08/msg00032.html - https://www.debian.org/security
57063bc06cafa8d3e - https://lists.debian.org/debian-lts-announce/2020/08/msg00032.html - https://www.debian.org/security/2020/dsa-4748 - https://security.gentoo.org/glsa/202008-20 - https://usn.ubuntu.com/4469-1/
CVE ID: CVE-2020-16296 State: PUBLISHED Published: 2020-08-13T02:08:28.000Z Last Updated: 2025-03-24T20:30:29.525Z Vendors: n/a Products: n/a Problem Types: n/a Description: A buffer overflow vulnerability in GetNumWrongData() in contrib/lips4/gdevlips.c of Artifex Software GhostScript from v9.18 to v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is fixed in v9.51. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.ghostscript.com/show_bug.cgi?id=701792 - https://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=9f39ed4a92578a020ae10459643e1fe72573d134 - https://lists.debian.org/debian-lts-announce/2020/08/msg00032.html - https