ZDI-22-845: Adobe InDesign Font Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe InDesign. User interaction is required to exploit this vulnerability in that...
ZDI-22-844: Adobe Bridge Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Bridge. User interaction is required to exploit this vulnerability in that...
ZDI-22-843: Adobe Bridge Font Parsing Use-After-Free Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Bridge. User interaction is required to exploit this vulnerability in that...
Syslogk: Linux Rootkit with Hidden Backdoor Payload
FortiGuard Labs is aware of a report that a new rootkit for Linux that appears to be still in development was discovered. Namaed "Syslogk", the...
Active Exploitation of Confluence vulnerability (CVE-2022-26134)
FortiGuard Labs is aware that an unauthenticated remote code execution vulnerability in Confluence (CVE-2022-26134) continues to be exploited to deploy malware in the field. Deployed...
USN-5478-1: util-linux vulnerability
Christian Moch and Michael Gruhn discovered that the libblkid library of util-linux did not properly manage memory under certain circumstances. A local attacker could possibly...
SEC Consult SA-20220614-0 :: Reflected Cross Site Scripting in SIEMENS-SINEMA Remote Connect
Posted by SEC Consult Vulnerability Lab, Research via Fulldisclosure on Jun 14 SEC Consult Vulnerability Lab Security Advisory < 20220614-0 > ======================================================================= title: Reflected Cross...
ghex-42.3-1.fc36
FEDORA-2022-23adf3d425 Packages in this update: ghex-42.3-1.fc36 Update description: Update to 42.3 main: Hotfix to workaround gtk #4880 (affects Save As dialogs on X11 primarily) config:...
USN-5477-1: ncurses vulnerabilities
Hosein Askari discovered that ncurses was incorrectly performing memory management operations when dealing with long filenames while writing structures into the file system. An attacker...
vim-8.2.5085-1.fc35
FEDORA-2022-c302c5f62d Packages in this update: vim-8.2.5085-1.fc35 Update description: The newest upstream commit Security fix for CVE-2022-2000 Read More