DjVuLibre before 3.5.25.3, as used in Evince, Sumatra PDF Reader, VuDroid, and other products, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. No vendor patch available.
Buffer Overflow
Code Injection
Denial Of Service
RCE
Djvulibre
NVD
CVSS 2.0
9.3
EPSS
5.4%
The server in Crowbar, as used in SUSE Cloud 1.0, uses weak permissions for the production.log file, which has unspecified impact and attack vectors. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Privilege Escalation
Suse Cloud
NVD
CVSS 2.0
10.0
EPSS
0.2%