Microsoft DirectWrite / AFDKO suffers from a heap-based out-of-bounds read/write vulnerability in OpenType font handling due to unbounded iFD.
>> AUTHOR: deepcore
Microsoft DirectWrite / AFDKO suffers from a heap-based buffer overflow vulnerability in OpenType font handling in readCharset.
phpFK lite-version suffers from multiple cross site scripting vulnerabilities.
Microsoft DirectWrite / AFDKO suffers from a heap-based buffer overflow vulnerability in OpenType font handling in readEncoding.
Sitecore 9.0 rev 171002 – Persistent Cross-Site Scripting
SNMPc Enterprise Edition 9/10 – Mapping Filename Buffer Overflow
Firefox version 67.0.4 suffers from a denial of service vulnerability.
Karenderia CMS version 5.3 suffers from a cross site scripting vulnerability.
An issue has been discovered where the Microsoft Font Subsetting DLL (fontsub.dll) suffers from a heap-based out-of-bounds read vulnerability in MergeFonts.
Microsoft Windows – Font Subsetting DLL Heap-Based Out-of-Bounds Read in MergeFonts