CVE-2020-5958

NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the NVIDIA Control Panel component in which an attacker with local system access can plant a malicious DLL file, which may lead to code execution, denial of service, or information disclosure...

CVE-2020-5958

CVE-2020-5958 affects NVIDIA Windows GPU Display Driver (control panel component). The vulnerability allows a local attacker with system access to plant a malicious DLL, potentially enabling code execution, denial of service, or information disclosure. The related NVIDIA security bulletin lists a...

PT-2020-18850

Name of the Vulnerable Software and Affected Versions NVIDIA Windows GPU Display Driver, all versions Description The issue concerns a vulnerability in the NVIDIA Control Panel component. An attacker with local system access can plant a malicious DLL file, potentially leading to code execution,...

CVE-2020-5958: Undefined Security Weakness

NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the NVIDIA Control Panel component in which an attacker with local system access can plant a malicious DLL file, which may lead to code execution, denial of service, or information disclosure...

CVE-2019-9859

Vesta Control Panel VestaCP 0.9.7 through 0.9.8-23 is vulnerable to an authenticated command execution that can result in remote root access on the server. The platform works with PHP as the frontend language and uses shell scripts to execute system actions. PHP executes shell script through the...

CVE-2019-9859

Vesta Control Panel VestaCP 0.9.7 through 0.9.8-23 is vulnerable to an authenticated command execution that can result in remote root access on the server. The platform works with PHP as the frontend language and uses shell scripts to execute system actions. PHP executes shell script through the...

Design/Logic Flaw

Vesta Control Panel VestaCP 0.9.7 through 0.9.8-23 is vulnerable to an authenticated command execution that can result in remote root access on the server. The platform works with PHP as the frontend language and uses shell scripts to execute system actions. PHP executes shell script through the...

CVE-2019-9859

Vesta Control Panel VestaCP 0.9.7 through 0.9.8-23 is vulnerable to an authenticated command execution that can result in remote root access on the server. The platform works with PHP as the frontend language and uses shell scripts to execute system actions. PHP executes shell script through the...

CVE-2019-9859

CVE-2019-9859 affects Vesta Control Panel (VestaCP) versions 0.9.7 through 0.9.8-23. An authenticated attacker can trigger command execution via PHP that may escalate to remote root access. The vulnerability stems from how VestaCP uses the PHP function exec to run shell scripts and how escapeshel...

CVE-2019-9859: Improper Neutralization of Special Elements used in an OS Command

Vesta Control Panel VestaCP 0.9.7 through 0.9.8-23 is vulnerable to an authenticated command execution that can result in remote root access on the server. The platform works with PHP as the frontend language and uses shell scripts to execute system actions. PHP executes shell script through the...

PT-2020-11366

Name of the Vulnerable Software and Affected Versions Vesta Control Panel VestaCP versions 0.9.7 through 0.9.8-23 Description The issue concerns an authenticated command execution that can result in remote root access on the server. VestaCP uses PHP as the frontend language and shell scripts to...

CVE-2020-5957

NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the NVIDIA Control Panel component in which an attacker with local system access can corrupt a system file, which may lead to denial of service or escalation of privileges...

CVE-2020-5957

NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the NVIDIA Control Panel component in which an attacker with local system access can corrupt a system file, which may lead to denial of service or escalation of privileges...

CVE-2020-5957

NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the NVIDIA Control Panel component in which an attacker with local system access can corrupt a system file, which may lead to denial of service or escalation of privileges...

CVE-2020-5957: Undefined Security Weakness

NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the NVIDIA Control Panel component in which an attacker with local system access can corrupt a system file, which may lead to denial of service or escalation of privileges...

PT-2020-18849

Name of the Vulnerable Software and Affected Versions NVIDIA Windows GPU Display Driver, all versions Description The issue concerns a vulnerability in the NVIDIA Control Panel component. An attacker with local system access can corrupt a system file, potentially leading to denial of service or...

Exchange Control Panel Viewstate Deserialization

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'bindata' class MetasploitModule 'Exchange Control Panel Viewstate Deserialization', 'Description' = %q This module exploits a .NET serialization vulnerability i...

PT-2020-22883

Уязвимость панели управления NVIDIA Control Panel драйвера графических процессоров NVIDIA GeForce, Quadro, NVS и Tesla для операционных систем Windows связана с недостатками разграничения доступа. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании или повысить свои...

PT-2020-5526

Name of the Vulnerable Software and Affected Versions: NVIDIA Control Panel affected versions not specified Description: The issue is related to errors in path checking for dynamically loaded libraries in the NVIDIA Control Panel driver for NVIDIA GeForce, Quadro, NVS, and Tesla graphics processo...

PT-2020-22881

Уязвимость панели управления NVIDIA Control Panel драйвера графических процессоров NVIDIA GeForce, Quadro, NVS и Tesla для операционных систем Windows связана с ошибками проверки пути загружаемых динамических библиотек. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в...