Lucene search
+L

8741 matches found

attackerkb
attackerkb
•added 2021/12/17 5:15 p.m.•13 views

CVE-2021-4010

A flaw was found in xorg-x11-server in versions before 21.1.2 and before 1.20.14. An out-of-bounds access can occur in the SProcScreenSaverSuspend function. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

7.8CVSS7.1AI score0.00614EPSS
SaveExploits0References15
OSV
OSV
•added 2021/12/17 5:15 p.m.•8 views

DEBIAN-CVE-2021-4010

A flaw was found in xorg-x11-server in versions before 21.1.2 and before 1.20.14. An out-of-bounds access can occur in the SProcScreenSaverSuspend function. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

7.8CVSS7.2AI score0.00614EPSS
SaveExploits0References1
Packet Storm
Packet Storm
•added 2021/12/17 12:00 a.m.•377 views

Backdoor.Win32.Mellpon.b Information Disclosure

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/e499a4c359a8cc46e641f39c0ed548f9.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Mellpon.b Vulnerability: Remote Unauthenticated Information Disclosure Description: T...

7.4AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2021/12/17 12:00 a.m.•13 views

The vulnerability of the Screen Capture function in Microsoft Edge and Google Chrome browsers allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the Screen Capture function in Microsoft Edge and Google Chrome browsers is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code or cause a service failure...

10CVSS8.2AI score0.0128EPSS
SaveExploits0References7Affected Software4
OSV
OSV
•added 2021/12/16 7:10 p.m.•14 views

CLSA-2021-1639681852 Fix CVE(s): CVE-2021-3872, CVE-2021-3875, CVE-2021-3903

SECURITY UPDATE: illegal memory access if buffer name is very long - debian/patches/CVE-2021-3872.patch: make sure not to go over the end of the buffer in screen.c - CVE-2021-3872 SECURITY UPDATE: mlget error after search with range - debian/patches/CVE-2021-3875.patch: limit the line number to t...

7.8CVSS7AI score0.01549EPSS
SaveExploits3References1
OSV
OSV
•added 2021/12/14 12:00 p.m.•15 views

UBUNTU-CVE-2021-4010

A flaw was found in xorg-x11-server in versions before 21.1.2 and before 1.20.14. An out-of-bounds access can occur in the SProcScreenSaverSuspend function. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

7.8CVSS7AI score0.00614EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2021/12/14 12:00 a.m.•11 views

xorg-x11-server 缓冲区错误漏洞

xorg-x11-server is an X Window System display server from the X.Org Foundation. xorg-x11-server 21.1.2 and versions prior to 1.20.14 have an out-of-bounds access vulnerability in the SProcScreenSaverSuspend function, which can be exploited by attackers to threaten data confidentiality, integrity,...

7.8CVSS5.7AI score0.00614EPSS
SaveExploits0References25
CNVD
CNVD
•added 2021/12/12 12:00 a.m.•41 views

Mozilla Firefox conditional competition issue vulnerability

Mozilla Firefox is an open source Web browser from the Mozilla Foundation. Mozilla Firefox is vulnerable to a conditional competition issue, which could be exploited by an attacker to force a notification to receive full-screen and pointer-locked access to the page...

4.3CVSS3.3AI score0.01245EPSS
SaveExploits0References1
OpenVAS
OpenVAS
•added 2021/12/12 12:00 a.m.•26 views

Mozilla Firefox Security Advisory (MFSA2021-52) - Mac OS X

This host is missing a security update for Mozilla Firefox. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefox";...

9.8CVSS6.9AI score0.02172EPSS
SaveExploits2References14
attackerkb
attackerkb
•added 2021/12/10 2:15 p.m.•10 views

CVE-2021-40834

A user interface overlay vulnerability was discovered in F-secure SAFE Browser for Android. When user click on a specially crafted seemingly legitimate URL SAFE browser goes into full screen and hides the user interface. A remote attacker can leverage this to perform spoofing attack...

4.3CVSS5.8AI score0.00751EPSS
SaveExploits0References3Affected Software1
Microsoft CVE
Microsoft CVE
•added 2021/12/10 8:00 a.m.•59 views

Chromium: CVE-2021-4064 Use after free in screen capture

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

8.8CVSS8.5AI score0.0128EPSS
SaveExploits0
Veracode
Veracode
•added 2021/12/10 7:36 a.m.•45 views

Spoofing Attack

Thunderbird and Firefox are vulnerable to spoofing attack. The vulnerability exists due to a misuse of a race in the notification code allowing an attacker to forcefully hide the notification for pages that had received full screen and pointer lock access...

4.3CVSS2.7AI score0.01245EPSS
SaveExploits0References13Affected Software7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/10 12:00 a.m.•6 views

CVE-2021-40834: Improper Restriction of Rendered UI Layers or Frames

A user interface overlay vulnerability was discovered in F-secure SAFE Browser for Android. When user click on a specially crafted seemingly legitimate URL SAFE browser goes into full screen and hides the user interface. A remote attacker can leverage this to perform spoofing attack...

4.3CVSS5.9AI score0.00751EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2021/12/08 2:49 a.m.•57 views

CVE-2021-43538

The Mozilla Foundation Security Advisory describes this flaw as: By misusing a race in our notification code, an attacker could have forcefully hidden the notification for pages that had received full screen and pointer lock access, which could have been used for spoofing attacks...

7.5CVSS7AI score0.01245EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2021/12/08 12:00 a.m.•17 views

Samsung SMR 安全漏洞

Samsung SMR is a system patch package from Samsung South Korea. It provides patches for Samsung mobile applications. A security vulnerability exists in versions prior to Samsung SMR Dec-2021 Release 1, which can be exploited by an attacker to access certain device data on the lock screen...

2.4CVSS5.2AI score0.00109EPSS
SaveExploits0References2
OSV
OSV
•added 2021/12/08 12:00 a.m.•30 views

UBUNTU-CVE-2021-43538

By misusing a race in our notification code, an attacker could have forcefully hidden the notification for pages that had received full screen and pointer lock access, which could have been used for spoofing attacks. This vulnerability affects Thunderbird 91.4.0, Firefox ESR 91.4.0, and Firefox 9...

4.3CVSS7.2AI score0.01245EPSS
SaveExploits0References8
OSV
OSV
•added 2021/12/07 5:15 p.m.•17 views

CVE-2021-37061

There is a Uncontrolled Resource Consumption vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to Screen projection application denial of service...

7.5CVSS7.1AI score0.00677EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2021/12/07 5:15 p.m.•9 views

CVE-2021-37061

There is a Uncontrolled Resource Consumption vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to Screen projection application denial of service...

7.5CVSS7AI score0.00677EPSS
SaveExploits0References2Affected Software1
NVD
NVD
•added 2021/12/07 5:15 p.m.•26 views

CVE-2021-37061

There is a Uncontrolled Resource Consumption vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to Screen projection application denial of service...

7.5CVSS0.00677EPSS
SaveExploits0References1
Prion
Prion
•added 2021/12/07 5:15 p.m.•28 views

Design/Logic Flaw

There is a Uncontrolled Resource Consumption vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to Screen projection application denial of service...

5CVSS7.4AI score0.00677EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder