MSC-2021-0308

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Contacting external host – this package sends...

CVE-2021-41055

Gajim 1.2.x and 1.3.x before 1.3.3 allows remote attackers to cause a denial of service crash via a crafted XMPP Last Message Correction XEP-0308 message in multi-user chat, where the message ID equals the correction ID...

CVE-2021-41055

Gajim vulnerability CVE-2021-41055 affects Gajim 1.2.x and 1.3.x prior to 1.3.3. The flaw arises in XMPP Last Message Correction (XEP-0308) handling in multi-user chat, where a crafted message ID that equals the correction ID can cause a denial of service (crash). The issue is confirmed by the CV...

PT-2021-7306

Name of the Vulnerable Software and Affected Versions Gajim versions 1.2.x through 1.3.2 Description The issue is related to insufficient input validation when checking message IDs in multi-user chat, specifically with the XEP-0308 Last Message Correction extension. This allows remote attackers t...

Backdoor.Win32.Bifrose.acci Buffer Overflow

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/611dbff0d68df777c6d6881e00440143.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Bifrose.acci Vulnerability: Local Stack Buffer Overflow Description: Bifrost doesn't...

Debian: Security Advisory (DLA-2549-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DLA-2549-1 : gdisk security update

CVE-2020-0256 In LoadPartitionTable of gpt.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. CVE-2021-0308 In ReadLogicalParts of basicmbr.cc, there is a possible out of bound...

[SECURITY] [DLA 2549-1] gdisk security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-2549-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta February 08, 2021 https://wiki.debian.org/LTS -...

Updated gdisk package fixes security vulnerabilities

A bug that could cause segfault if GPT header claimed partition entries are oversized CVE-2020-0256. A bug that could cause a crash if a badly-formatted MBR disk was read CVE-2021-0308. The gdisk package has been updated to version 1.0.6, fixing these issues and several other bugs. See the upstre...

CVE-2021-0308

In ReadLogicalParts of basicmbr.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-8.1,...

CVE-2021-0308

CVE-2021-0308: In ReadLogicalParts of basicmbr.cc there is a missing bounds check causing an out-of-bounds write. This could enable local escalation of privilege with no additional execution privileges and no user interaction. Affected products listed include Android versions 8.1–11 (Android-8.1,...

Critical Photon OS Security Update - PHSA-2021-0308

Updates of 'linux-aws', 'glib', 'linux-secure', 'linux-esx', 'linux', 'apache-tomcat', 'openldap', 'influxdb' packages of Photon OS have been released...

CVE-2020-0308

In Window Manager, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-153654357...

CVE-2020-0308

CVE-2020-0308 affects the Android 11 Window Manager. The root cause is an unsafe PendingIntent that enables a permission bypass, allowing local information disclosure without user interaction. Vulnerable component: Window Manager (Android-11). Impact: information disclosure with user privileges; ...

Photon OS 1.0: Apache PHSA-2020-1.0-0308

An update of the apache package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-1.0-0308. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid13851...

CVE-2019-0308

SAP E-Commerce (Business-to-Consumer) vulnerable in versions 7.3, 7.31, 7.32, 7.33, and 7.54 due to an HTML injection that executes during user login. This allows an authenticated attacker to alter product prices to zero and perform checkout, revealing a Code Injection risk. Root cause is imprope...

CVE-2018-0308

CVE-2018-0308 affects Cisco FXOS/NX-OS Fabric Services. The root cause is insufficient validation of headers in Cisco Fabric Services packets, leading to a buffer overflow that could allow an unauthenticated, remote attacker to execute arbitrary code or cause a DoS. Affected products include Fire...

CVE-2017-0308

NVIDIA Windows GPU Display Driver (nvlddmkm.sys)DxgkDdiEscape handling in the kernel-mode layer is vulnerable. The issue (CVE-2017-0308) arises from untrusted input used to calculate the input buffer size, which can lead to denial of service or elevation of privileges. The connected Nessus entry ...

Security Bulletin: NVIDIA GPU Display Driver contains multiple vulnerabilities in the kernel mode layer handler

Vulnerability Details The following sections summarize the vulnerabilities and list their CVSS risk assessments. CVE-2017-0308 NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgkDdiEscape where untrusted input used for buffer size...

CVE-2016-0308

CVE-2016-0308 affects IBM Connections 5.5 and earlier. The vulnerability is a link manipulation issue that could cause display of inappropriate background images. According to NVD, this is a network-based issue with low attack complexity and no confidentiality/availability impact, but partial int...