CVE-2021-1098

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager vGPU plugin, where it doesn't release some resources during driver unload requests from guests. This flaw allows a malicious guest to perform operations by reusing those resources, which may lead to information disclosure,...

CVE-2021-1098

NVIDIA vGPU Software contains CVE-2021-1098: a vulnerability in the Virtual GPU Manager where it does not release certain resources during driver unload from guests. This can allow a malicious guest to reuse freed resources, potentially leading to information disclosure, data tampering, or denial...

CVE-2020-1098 Windows Shell Infrastructure Component Elevation of Privilege Vulnerability

...

CVE-2020-1098

CVE-2020-1098 is a Windows privilege-escalation in the Shell infrastructure component where memory object handling could be improperly managed. An attacker must log on and run a crafted application to elevate, gaining control of the system in an elevated context. The issue is addressed by Microso...

Security fix for the ALT Linux 10 package etcd version 3.4.7-alt1

April 26, 2020 Alexey Shabalin 3.4.7-alt1 - 3.4.7 Fixes: CVE-2018-1098, CVE-2018-1099, CVE-2018-16886...

CVE-2018-1098

A cross-site request forgery flaw has been discovered in etcd. A remote attacker could set up a malicious website that execute POST requests to an etcd server to modify or add a key. Mitigation Configure and enable authentication on the etcd server...

CVE-2008-1098

Multiple cross-site scripting XSS vulnerabilities in MoinMoin 1.5.8 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 certain input processed by formatter/textgedit.py aka the gui editor formatter; 2 a page name, which triggers an injection in PageEditor.py when the...

CVE-2019-1098

Technical details for CVE-2019-1098 (affected products, vulnerable component, root cause, impact, and fixes) are not publicly provided in the supplied documents. Please monitor for new information or updates.

Microsoft Windows GDI Component CVE-2019-1098 Information Disclosure Vulnerability

Description Microsoft Windows is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in launching further attacks. Technologies Affected Microsoft Windows 7 for 32-bit Systems SP1 Microsoft Windows 7 for x64-based Systems...

Fedora 29 : etcd (2019-219b0b0b6a)

etcd.service: do not pass command line flags already defined in environment ---- Fix building of etcd ---- Bump to commit f29b1ada19713544b698dab8c94c97cfa1e83dac ---- Bump to commit e1ca3b4434945e57e8e3a451cdbde74a903cc8e1 Security fix for CVE-2018-16886 Security fix for CVE-2018-1098...

Oracle Linux 6 : firefox (ELSA-2018-1098)

The remote Oracle Linux 6 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2018-1098 advisory. 52.7.3-1.0.1 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat one - Force requirement of newer gdk-pixbuf2 to ensure a proper update...

CVE-2018-1098

A cross-site request forgery flaw was found in etcd 3.3.1 and earlier. An attacker can set up a website that tries to send a POST request to the etcd server and modify a key. Adding a key is done with PUT so it is theoretically safe can't PUT from an HTML form or such but POST allows creating...

CVE-2018-1098

CVE-2018-1098 affects etcd 3.3.1 and earlier, where CSRF allows an attacker to induce the etcd server to perform unauthorized actions by sending crafted POST requests via a malicious site. The description notes that PUT is safer for adding keys, but POST can be used to create in-order keys. The N...

Microsoft IE And Microsoft Edge Flash Player Multiple Vulnerabilities (3157993)

This host is missing a critical security update according to Microsoft Bulletin MS16-064. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Memory corruption

Adobe Flash Player before 18.0.0.352 and 19.x through 21.x before 21.0.0.242 on Windows and OS X and before 11.2.202.621 on Linux allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2016-1096,...

Memory corruption

Adobe Flash Player before 18.0.0.352 and 19.x through 21.x before 21.0.0.242 on Windows and OS X and before 11.2.202.621 on Linux allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2016-1096,...

Memory corruption

Adobe Flash Player before 18.0.0.352 and 19.x through 21.x before 21.0.0.242 on Windows and OS X and before 11.2.202.621 on Linux allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2016-1096,...

Memory corruption

Adobe Flash Player before 18.0.0.352 and 19.x through 21.x before 21.0.0.242 on Windows and OS X and before 11.2.202.621 on Linux allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2016-1096,...

Google Chrome < 50.0.2661.102 Multiple Vulnerabilities

Binary data 9371.pasl...

SUSE SLED12 Security Update : flash-player (SUSE-SU-2016:1305-1)

This update for flash-player fixes the following issues : - Security update to 11.2.202.621 bsc979422 : - APSA16-02, APSB16-15, CVE-2016-1096, CVE-2016-1097, CVE-2016-1098, CVE-2016-1099, CVE-2016-1100, CVE-2016-1101, CVE-2016-1102, CVE-2016-1103, CVE-2016-1104, CVE-2016-1105, CVE-2016-1106,...