PT-2021-7716 · Dnsmasq +2 · Dnsmasq +2

Name of the Vulnerable Software and Affected Versions: Dnsmasq affected versions not specified Description: The issue is related to a buffer overflow in the extract name function of the Dnsmasq DNS server. This could allow a remote attacker to access confidential data, compromise its integrity, a...

The vulnerability in the MagickCore/statistic.c component of the console-based image editing tool ImageMagick, related to integer overflows, allows an attacker to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the MagickCore/statistic.c component in the console-based image editing tool ImageMagick is related to a potential overflow of integer values. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and even cause servic...

The vulnerability in the `GetOpenCLCachedFilesDirectory` function of the `magick/opencl.c` component of the ImageMagick console graphics editor allows a hacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the GetOpenCLCachedFilesDirectory function in the magick/opencl.c component of the ImageMagick console-based graphics editor involves the use of a null pointer. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and...

The vulnerability of the ReadMATImageV4 function in the coders/mat.c component of the console-based ImageMagick graphics editor allows a hacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the ReadMATImageV4 function in the ImageMagick console graphics editor’s coders/mat.c component is related to the use of previously uninitialized variables. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cau...

TLB Poisoning Attacks on AMD Secure Encrypted Virtualization (SEV)

Bulletin ID: AMD-SB-1023 Potential Impact: Loss of Integrity, Confidentiality and Availability Summary A malicious hypervisor HV along with an unprivileged process controlled by an attacker and executing in a guest VM, may maliciously control the process of flushing the Translation Lookaside Buff...

PT-2021-4284 · Eterm +4 · Eterm +4

Name of the Vulnerable Software and Affected Versions: rxvt-unicode version 9.22 rxvt version 2.7.10 mrxvt version 0.5.4 Eterm version 0.9.7 Description: The issue is related to improper handling of certain escape sequences, specifically ESC G Q, which can lead to code execution. This could...

CVE-2021-1086

NVIDIA vGPU driver contains a vulnerability in the Virtual GPU Manager vGPU plugin where it allows guests to control unauthorized resources, which may lead to integrity and confidentiality loss or information disclosure. This affects vGPU version 12.x prior to 12.2, version 11.x prior to 11.4 and...

Design/Logic Flaw

NVIDIA vGPU driver contains a vulnerability in the Virtual GPU Manager vGPU plugin where it allows guests to control unauthorized resources, which may lead to integrity and confidentiality loss or information disclosure. This affects vGPU version 12.x prior to 12.2, version 11.x prior to 11.4 and...

CVE-2021-1086

NVIDIA vGPU driver contains a vulnerability in the Virtual GPU Manager vGPU plugin where it allows guests to control unauthorized resources, which may lead to integrity and confidentiality loss or information disclosure. This affects vGPU version 12.x prior to 12.2, version 11.x prior to 11.4 and...

CVE-2021-1086

CVE-2021-1086 affects NVIDIA vGPU software/driver — the Virtual GPU Manager (vGPU plugin). The vulnerability allows guests to control unauthorized resources, potentially compromising integrity and confidentiality. Affected versions are vGPU 12.x (before 12.2), 11.x (before 11.4), and 8.x (before ...

The vulnerability of the CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 97168P, FD1002S, FD1104, FD1104B, FD1104S, FD1104SN, FD1108S, FD1204S-R2, FD1204SN, FD1204SN-R2, FD1208S-R2, FD1216S-R1, FD1608GS, FD1608SN, FD1616GS, FD1616SN, FD8000 optical line terminals is related to rigid encoding of registration data. This vulnerability allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of optical line terminal devices such as CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 97168P, FD1002S, FD1104, FD1104B, FD1104S, FD1104SN, FD1108S, FD1204S-R2, FD1204SN, FD1204SN-R2, FD1208S-R2, FD1216S-R1, FD1608GS, FD1608SN, FD1616GS...

Huawei EulerOS: Security Advisory for python-rtslib (EulerOS-SA-2021-1749)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of the salt-netapi component in the Configuration Management system and remote execution of Salt operations, due to insufficient input data validation, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the salt-netapi component in the Configuration Management system and remote Salt execution operations is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to gain access to confidential data, compromise its integrity, and...

The vulnerability of Google Chrome browser extensions, related to the use of memory areas after they are freed, allows attackers to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of Google Chrome browsers relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...

Vulnerability of the check_output function in output.c. SUID in a isolated programming environment. Firejail, due to the lack of measures to neutralize special elements, allows a violator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability in the checkoutput function of output.c, with the SUID attribute and a isolated programming environment like Firejail, is related to the lack of measures to neutralize special elements. Exploiting this vulnerability can allow an attacker to access confidential data, compromise i...

The vulnerability of the action/cache.py component in the MoinMoin wiki platform, which involves an incorrect restriction on the path name to the catalog, allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability in the action/cache.py component of the MoinMoin wiki platform is related to an incorrect restriction on the path name to the catalog. Exploiting this vulnerability could allow a malicious actor to gain access to confidential data, compromise its integrity, and cause service...

The vulnerability of the implementation of the GPU-based terminal emulator protocol in GPU Kitty relates to the absence of measures to neutralize special elements. This allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the GPU-based terminal emulator’s protocol implementation is related to the lack of filename cleaning when returning error messages. Exploiting this vulnerability can allow remote attackers to gain access to confidential data, compromise its integrity, and cause service...

The vulnerability of Google Chrome’s speech component, related to the use of memory areas after they are freed, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of Google Chrome’s speech component is related to the use of memory areas after they are freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...

The vulnerability of the rebuildAggregateFrames function in the library for reading and modifying metadata in audio files from TagLib allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the rebuildAggregateFrames function in the library for reading and modifying metadata in audio files from TagLib is related to the unlimited loading of dangerous files. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its...

The vulnerability of the TightDecoder::FilterGradient function in the VNC TigerVNC software allows a perpetrator to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the TightDecoder::FilterGradient function in the VNC TigerVNC software is related to the execution of operations within acceptable buffer data limits. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause...