transfig: global buffer overflow in the get_line() in read.c

fig2dev 3.2.7b contains a global buffer overflow in the get_line function in read.c.

transfig: stack-based buffer overflow in the read_textobject() in read.c

fig2dev 3.2.7b contains a stack buffer overflow in the read_textobject function in read.c.

transfig: global buffer overflow in the setfigfont() in genepic.c

fig2dev 3.2.7b contains a global buffer overflow in the setfigfont function in genepic.c.

transfig: global buffer overflow in conv_pattern_index() in gencgm.c

fig2dev 3.2.7b contains a global buffer overflow in the conv_pattern_index function in gencgm.c.

transfig: segmentation fault in the read_objects() in read.c

fig2dev 3.2.7b contains a segmentation fault in the read_objects function in read.c.

transfig: stack-based buffer overflow in bezier_spline() in genepic.c

fig2dev 3.2.7b contains a stack buffer overflow in the bezier_spline function in genepic.c.

Directory traversal vulnerability in wkhtmltopdf through 0.12.5 allows remote attackers to read local files and disclose sensitive information via a crafted html file running with the default configurations.

Buffer Overflow vulnerability exists in FFmpeg 4.1 via apng_do_inverse_blend in libavcodec/pngenc.c, which could let a remote malicious user cause a Denial of Service

PDFResurrect before 0.20 lack of header validation checks causes heap-buffer-overflow in pdf_get_version().

im_vips2dz in /libvips/libvips/deprecated/im_vips2dz.c in libvips before 8.8.2 has an uninitialized variable which may cause the leakage of remote server path or stack address.

FFmpeg 4.2 is affected by a Divide By Zero issue via libavcodec/aaccoder, which allows a remote malicious user to cause a Denial of Service

Denial of Service issue in FFmpeg 4.2 due to resource management errors via fftools/cmdutils.c.

FFmpeg 4.2 is affected by null pointer dereference passed as argument to libavformat/aviobuf.c, which could cause a Denial of Service.

FFmpeg 4.2 is affected by a Divide By Zero issue via libavcodec/aacpsy.c, which allows a remote malicious user to cause a Denial of Service.

FFmpeg 4.2 is affected by a Divide By Zero issue via libavcodec/lpc.h, which allows a remote malicious user to cause a Denial of Service.

libslirp: use after free vulnerability cause a denial of service.

A use after free vulnerability in ip_reass() in ip_input.c of libslirp 4.2.0 and prior releases allows crafted packets to cause a denial of service.

shiro: Spring dynamic controllers, a specially crafted request may cause an authentication bypass

Apache Shiro before 1.5.2, when using Apache Shiro with Spring dynamic controllers, a specially crafted request may cause an authentication bypass.

A carefully crafted or corrupt PSD file can cause an infinite loop in Apache Tika's PSDParser in versions 1.0-1.23.

tika: excessive memory usage in PSDParser

A carefully crafted or corrupt PSD file can cause excessive memory usage in Apache Tika's PSDParser in versions 1.0-1.23.

There is a vulnerability in Apache Traffic Server 6.0.0 to 6.2.3, 7.0.0 to 7.1.8, and 8.0.0 to 8.0.5 with a smuggling attack and Transfer-Encoding and Content length headers. Upgrade to versions 7.1.9 and 8.0.6 or later versions.