15604 matches found
kernel: drm/amd/display: Check correct bounds for stream encoder instances for DCN303
A flaw was found in the Linux kernel's AMD display driver. A missing boundary check when referencing stream encoder instances on DCN303 hardware allows an out-of-bounds memory access. A local user could exploit this vulnerability to cause a denial of service DoS or potentially expose sensitive...
kernel: drm/amd/display: clear optc underflow before turn off odm clock
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: clear optc underflow before turn off odm clock Why After ODM clock off, optc underflow bit will be kept there always and clear not work. We need to clear that before clock off. How Clear that if have when clock o...
kernel: drm/amd/display: Check if modulo is 0 before dividing.
A flaw was found in the Linux kernel's AMD display driver. A missing validation check allows a division-by-zero error to occur during display clock calculations when an expected value is zero. A local user could exploit this vulnerability to trigger a kernel crash, resulting in a Denial of Servic...
Moderate: Red Hat Security Advisory: tigervnc security and bug fix update
An update for tigervnc is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...
xorg-x11-server: XkbGetKbdByName use-after-free
A vulnerability was found in X.Org. This issue occurs because the XkbCopyNames function leaves a dangling pointer to freed memory, resulting in out-of-bounds memory access on subsequent XkbGetKbdByName requests. This flaw can lead to local privilege elevation on systems where the X server runs...
Moderate: Red Hat Security Advisory: wayland security, bug fix, and enhancement update
An update for wayland is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...
sysstat: arithmetic overflow in allocate_structures() on 32 bit systems
An arithmetic overflow issue was discovered in Sysstat on 32-bit systems. The allocatestructures function in sacommon.c insufficiently checks bounds before arithmetic multiplication, allowing an overflow in the size allocated for the buffer representing system activities. The vulnerability can be...
ALSA-2023:2830 Moderate: tigervnc security and bug fix update
Virtual Network Computing VNC is a remote display system which allows users to view a computing desktop environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures. TigerVNC is a suite of VNC servers and clients...
CVE-2023-32977: Improper Neutralization of Input During Web Page Generation
Jenkins Pipeline: Job Plugin does not escape the display name of the build that caused an earlier build to be aborted, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers able to set build display names immediately...
PT-2023-24110 · Jenkins · Jenkins Pipeline: Job Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins Pipeline: Job Plugin versions 1292.v27d8cc3e2602 and earlier Description: The Jenkins Pipeline: Job Plugin does not escape the display name of the build that caused an earlier build to be aborted, resulting in a stored cross-site...
Stored XSS vulnerability in workflow-job
workflow-job 1292.v27d8cc3e2602 and earlier does not escape the display name of the build that caused an earlier build to be aborted, when "Do not allow concurrent builds" is set. This results in a stored cross-site scripting XSS vulnerability exploitable by attackers able to set build display...
PT-2025-26005 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue concerns the Linux kernel, specifically the drm/amd/display component for DCN303. It involves checking the correct bounds for stream encoder instances to prevent potential ou...
bachmann-display.ch Cross Site Scripting vulnerability OBB-3336433
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2023-1890: Undefined Security Weakness
The Tablesome WordPress plugin before 1.0.9 does not escape various generated URLs, before outputting them in attributes when some notices are displayed, leading to Reflected Cross-Site Scripting...
kernel: drm/amd/display: Check if modulo is 0 before dividing.
A flaw was found in the Linux kernel's AMD display driver. A missing validation check allows a division-by-zero error to occur during display clock calculations when an expected value is zero. A local user could exploit this vulnerability to trigger a kernel crash, resulting in a Denial of Servic...
kernel: drm/amd/display: clear optc underflow before turn off odm clock
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: clear optc underflow before turn off odm clock Why After ODM clock off, optc underflow bit will be kept there always and clear not work. We need to clear that before clock off. How Clear that if have when clock o...
Moderate: Red Hat Security Advisory: tigervnc security and bug fix update
An update for tigervnc is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...
xorg-x11-server: memory leak in ProcXkbGetKbdByName() in xkb/xkb.c
A flaw was found in the xorg-x11-server package. The ProcXkbGetKbdByName function in xkb/xkb.c does not release allocated data when an error is encountered, allowing for a memory leak...
xorg-x11-server: ScreenSaverSetAttributes use-after-free
A vulnerability was found in X.Org. This issue occurs because the handler for the ScreenSaverSetAttributes request may write to memory after it has been freed. This flaw can lead to local privileges elevation on systems where the X server runs privileged and remote code execution for ssh X...
ALSA-2023:2257 Moderate: tigervnc security and bug fix update
Virtual Network Computing VNC is a remote display system which allows users to view a computing desktop environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures. TigerVNC is a suite of VNC servers and clients...