8767 matches found
Novel ‘Nerbian’ Trojan Uses Advanced Anti-Detection Tricks
A newly discovered and complex remote access trojan RAT is spreading via malicious email campaigns using COVID-19 lures and includes numerous features to evade analysis or detection by researchers, Proofpoint has found. Dubbed Nerbian RAT, the novel malware variant is written in the OS-agnostic G...
xorg-x11-server: SProcScreenSaverSuspend out-of-bounds access
A flaw was found in xorg-x11-server where an out-of-bounds access can occur in the SProcScreenSaverSuspend function...
gnome-shell: Password from logged-out user may be shown on login screen
An issue was discovered in certain configurations of GNOME gnome-shell through 3.36.4. When logging out of an account, the password box from the login dialog reappears with the password still visible. If the user had decided to have the password shown in cleartext at login time, it is then visibl...
PT-2022-2493
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 101.0.4951.64 Description The issue is related to a use after free in the screen sharing function, which can lead to heap corruption. A remote attacker could potentially exploit this by convincing a user to...
KOYO Electronics Screen Creator Advance2 vulnerable to authentication bypass
Overview Screen Creator Advance2 provided by KOYO ELECTRONICS INDUSTRIES CO., LTD. is a screen development tool for KOYO ELECTRONICS's HMI. Screen Creator Advance2 contains an authentication bypass vulnerability CWE-807 due to the improper check for the Remote control setting's account names. KOY...
NewStart CGSL CORE 5.05 / MAIN 5.05 : screen Vulnerability (NS-SA-2022-0035)
The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has screen packages installed that are affected by a vulnerability: - encoding.c in GNU Screen through 4.8.0 allows remote attackers to cause a denial of service invalid write access and application crash or possibly have...
Koyo Electronics Industries Screen Creator Advance 2 security vulnerability
Koyo Electronics Industries Screen Creator Advance 2 is a drawing program for the GC-A2 series from Koyo Electronics Industries, Japan. A security vulnerability exists in Koyo Electronics Industries Screen Creator Advance 2 versions prior to 0.1.1.3 Build01, which stems from improper account name...
JVN#50337155: KOYO Electronics Screen Creator Advance2 vulnerable to authentication bypass
Screen Creator Advance2 provided by KOYO ELECTRONICS INDUSTRIES CO., LTD. is a screen development tool for KOYO ELECTRONICS's HMI. Screen Creator Advance2 contains an authentication bypass vulnerability CWE-807 due to the improper check for the Remote control setting's account names. Impact An...
Mozilla: Fullscreen notification bypass using popups
A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes the issue of when reusing existing popups; Firefox allowed them to cover the fullscreen notification UI, which possibly enabled browser spoofing attacks...
Mozilla Firefox security vulnerabilities
Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla Firefox that originates from the reuse of an existing pop-up window. A remote attacker exploits the vulnerability to trick a victim into visiting a specially...
ASB-A-205996517
In mPreference of DefaultUsbConfigurationPreferenceController.java, there is a possible way to enable file transfer mode due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitati...
ALBA-2022:1564 gdm bug fix and enhancement update
The GNOME Display Manager GDM provides the graphical login screen. The screen is shown shortly after boot, after log out, and when switching the current user. Bug Fixes and Enhancements: "DisallowTCP=false" option is not being used by /etc/gdm/custom.conf file BZ2029202...
gdm bug fix and enhancement update
The GNOME Display Manager GDM provides the graphical login screen. The screen is shown shortly after boot, after log out, and when switching the current user. Bug Fixes and Enhancements: "DisallowTCP=false" option is not being used by /etc/gdm/custom.conf file BZ2029202...
gdm bug fix and enhancement update
An update is available for gdm. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The GNOME Display Manager GDM provides the graphical login screen. The screen is...
Apple’s child safety features are coming to a Messages app near you
Apple will soon be rolling out its promised child safety features in the Messages app for users in Australia, Canada, New Zealand, and the UK. The announcement comes four months after the features initial launch in the US on the iOS, iPad, and macOS devices. To make communicating with Messages...
ALPINE-CVE-2022-28506
There is a heap-buffer-overflow in GIFLIB 5.2.1 function DumpScreen2RGB in gif2rgb.c:298:45...
CVE-2022-28506
There is a heap-buffer-overflow in GIFLIB 5.2.1 function DumpScreen2RGB in gif2rgb.c:298:45...
PT-2022-6963
Name of the Vulnerable Software and Affected Versions GIFLIB version 5.2.1 Description The issue is related to a heap-buffer-overflow in the DumpScreen2RGB function, located in the gif2rgb.c file of the GIFLIB library. This can allow a remote attacker to gain unauthorized access to protected...
GIFLIB buffer error vulnerability
GIFLIB is a library for reading and editing gif images. A security vulnerability exists in GIFLIB version 5.2.1, which stems from a heap-based buffer overflow in the DumpScreen2RGB function of gif2rgb.c. The vulnerability is caused by a heap-based buffer overflow in the DumpScreen2RGB function...