4429 matches found
CVE-2022-31610
CVE-2022-31610 concerns the NVIDIA GPU Display Driver for Windows. The vulnerability resides in the kernel-mode layer (nvlddmkm.sys) and can be triggered by a local user with basic capabilities, causing an out-of-bounds write. This may lead to code execution, denial of service, privilege escalati...
CVE-2022-31607
CVE-2022-31607 affects the NVIDIA GPU Display Driver for Linux, specifically the kernel mode driver (nvidia.ko). A local user with basic privileges can trigger improper input validation, leading to denial of service, privilege escalation, data tampering, and partial information disclosure. Connec...
CVE-2022-31606
NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgkDdiEscape, where a failure to properly validate data might allow an attacker with basic user capabilities to cause an out-of-bounds access in kernel mode, which could lead to denia...
CVE-2022-31608
NVIDIA GPU Display Driver for Linux contains a vulnerability in an optional D-Bus configuration file, where a local user with basic capabilities can impact protected D-Bus endpoints, which may lead to code execution, denial of service, escalation of privileges, information disclosure, and data...
CVE-2022-31606
CVE-2022-31606 affects the NVIDIA GPU Display Driver for Windows. The vulnerability resides in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, where improper validation can allow a local attacker with basic user privileges to trigger out-of-bounds kernel-mode access, potentially l...
CVE-2022-31607
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer nvidia.ko, where a local user with basic capabilities can cause improper input validation, which may lead to denial of service, escalation of privileges, data tampering, and limited information disclosure...
CVE-2022-31608
NVIDIA GPU Display Driver for Linux contains a vulnerability in an optional D-Bus configuration file, where a local user with basic capabilities can impact protected D-Bus endpoints, which may lead to code execution, denial of service, escalation of privileges, information disclosure, and data...
IBAX go-ibax vulnerable to SQL injection
SQL Injection vulnerability in /packages/api/database.go of go-ibax via where parameter allows attacker to spoof identity, tamper with existing data, allow the complete disclosure of all data on the system, destroy the data or make it otherwise unavailable, and become administrators of the databa...
GHSA-G23G-MW97-65C8 IBAX go-ibax vulnerable to SQL injection
SQL Injection vulnerability in /packages/api/database.go of go-ibax via where parameter allows attacker to spoof identity, tamper with existing data, allow the complete disclosure of all data on the system, destroy the data or make it otherwise unavailable, and become administrators of the databa...
PT-2022-24172
Name of the Vulnerable Software and Affected Versions go-ibax versions starting from commits on Jul 18, 2020 Description A critical issue has been found in go-ibax, allowing for SQL injection. This is due to the manipulation of the where argument in the /api/v2/open/rowsInfo endpoint, which can b...
NVIDIA Display Driver Advisory - August 2022 - Lenovo Support US
No description provided...
Hardcoded credentials
Juiker app hard-coded its AES key in the source code. A physical attacker, after getting the Android root privilege, can use the AES key to decrypt users’ ciphertext and tamper with it...
CVE-2022-38117: Use of Hard-coded Credentials
Juiker app hard-coded its AES key in the source code. A physical attacker, after getting the Android root privilege, can use the AES key to decrypt users’ ciphertext and tamper with it...
NVIDIA GPU Display Driver Advisory - May 2022 - Lenovo Support US
No description provided...
dialog window OPC-server Data Compromise
The vulnerability of the dialog window, the call-response OPC-server WorkstationST, is related to the failure to handle CRLF sequences in HTTP headers. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of the protected information...
Mageia: Security Advisory (MGASA-2022-0286)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
MGASA-2022-0285 Updated nvidia-current packages fix security vulnerabilities
Updated nvidia-current packages fix security vulnerabilities: NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer nvidia.ko, where a local user with basic capabilities can cause improper input validation, which may lead to denial of service, escalation of...
Updated nvidia390 packages fix security vulnerabilities
Updated nvidia390 packages fix security vulnerabilities: NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer nvidia.ko, where a local user with basic capabilities can cause improper input validation, which may lead to denial of service, escalation of privileges,...
CVE-2022-32583
Operation restriction bypass vulnerability in Scheduler of Cybozu Office 10.0.0 to 10.8.5 allows a remote authenticated attacker to alter the data of Scheduler via unspecified vectors...
PT-2022-37651 · Nvidia · Nvidia Windows Gpu Display Driver +1
Name of the Vulnerable Software and Affected Versions: NVIDIA GPU Display Driver for Linux versions prior to the fixed version NVIDIA GPU Display Driver for Windows versions prior to the fixed version Description: The issue is related to improper input validation and null-pointer dereferences in...