35 matches found
CVE-2015-10049: Improper Neutralization of Input During Web Page Generation
A vulnerability was found in Overdrive Eletrônica course-builder up to 1.7.x and classified as problematic. Affected by this issue is some unknown functionality of the file coursebuilder/modules/oeditor/oeditor.html. The manipulation leads to cross site scripting. The attack may be launched...
Overdrive Eletrônica course-builder – Cross-site scripting vulnerabilities
course-builder is an open source application from Overdrive Eletrônica. A cross-site scripting vulnerability exists in Overdrive Eletrônica course-builder versions prior to 1.8.0, which stems from some unknown functionality in the file coursebuilder/modules/oeditor/oeditor.html, which is...
AMD OverDrive has an unspecified vulnerability
AMD OverDrive is a tool from AMD USA that supports the management and configuration of CPU, GPU and RAM overclocking settings. A security vulnerability in the AODDriver2.sys file in AMD OverDrive, which stems from not properly filtering the MSR registers, can be exploited by an attacker to execut...
CVE-2019-7247
An issue was discovered in AODDriver2.sys in AMD OverDrive. The vulnerable driver exposes a wrmsr instruction via IOCTL 0x81112ee0 and does not properly filter the Model Specific Register MSR. Allowing arbitrary MSR writes can lead to Ring-0 code execution and escalation of privileges...
Privilege escalation
An issue was discovered in AODDriver2.sys in AMD OverDrive. The vulnerable driver exposes a wrmsr instruction via IOCTL 0x81112ee0 and does not properly filter the Model Specific Register MSR. Allowing arbitrary MSR writes can lead to Ring-0 code execution and escalation of privileges...
CVE-2019-7247
An issue was discovered in AODDriver2.sys in AMD OverDrive. The vulnerable driver exposes a wrmsr instruction via IOCTL 0x81112ee0 and does not properly filter the Model Specific Register MSR. Allowing arbitrary MSR writes can lead to Ring-0 code execution and escalation of privileges...
CVE-2019-7247
CVE-2019-7247 affects AMD OverDrive’s AODDriver2.sys. The driver exposes wrmsr via IOCTL 0x81112ee0 and fails to properly filter MSRs, enabling arbitrary MSR writes that can lead to Ring-0 code execution and privilege escalation. Documents from Red Hat and other sources corroborate the same flaw....
PT-2020-11239
Name of the Vulnerable Software and Affected Versions AMD OverDrive affected versions not specified Description An issue was discovered in AODDriver2.sys, where the vulnerable driver exposes a wrmsr instruction via IOCTL "0x81112ee0" and does not properly filter the Model Specific Register MSR...
CVE-2019-7247: Undefined Security Weakness
An issue was discovered in AODDriver2.sys in AMD OverDrive. The vulnerable driver exposes a wrmsr instruction via IOCTL 0x81112ee0 and does not properly filter the Model Specific Register MSR. Allowing arbitrary MSR writes can lead to Ring-0 code execution and escalation of privileges...
overdrive-repairs.co.uk Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1153596 Security Researcher roker Helped patch 48 vulnerabilities Received 1 Coordinated Disclosure badges Received 4 recommendations , a holder of 1 badges for responsible and coordinated disclosure, found a security vulnerability affecting overdrive-repairs.co.uk website...
overdrive.com XSS vulnerability
Open Bug Bounty ID: OBB-519870 Description| Value ---|--- Affected Website:| overdrive.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated Disclosure based...
overdrive-repairs.co.uk XSS vulnerability
Vulnerable URL: http://www.overdrive-repairs.co.uk/products.php?cat=Overdrive" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 13229273 VIP website status:| No Check...
Asphalt Overdrive - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities
HackApp vulnerability scanner discovered that application Asphalt Overdrive published at the 'play' market has multiple vulnerabilities...
OverDrive - Customized SSL, Exported ContentProvider vulnerabilities
HackApp vulnerability scanner discovered that application OverDrive published at the 'play' market has multiple vulnerabilities...
overdrive.com XSS vulnerability
Open Bug Bounty ID: OBB-143258 Description| Value ---|--- Affected Website:| overdrive.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat She...