Information disclosure

An issue was discovered in Arcserve Unified Data Protection UDP through 6.5 Update 4. There is a DDI-VRT-2018-18 Unauthenticated Sensitive Information Disclosure via /gateway/services/EdgeServiceImpl issue...

Cross site scripting

An issue was discovered in Arcserve Unified Data Protection UDP through 6.5 Update 4. There is a DDI-VRT-2018-21 Reflected Cross-site Scripting via /authenticationendpoint/domain.jsp issue...

Code injection

An issue was discovered in Arcserve Unified Data Protection UDP through 6.5 Update 4. There is a DDI-VRT-2018-19 Unauthenticated XXE in /management/UdpHttpService issue...

CVE-2018-18660

Arcserve UDP (Arcserve Unified Data Protection) up to 6.5 Update 4 is affected by a reflected Cross-Site Scripting (XSS) in /authenticationendpoint/domain.jsp (DDI-VRT-2018-21). Root cause is input handling leading to script injection; this is a client-side vulnerability that could affect users i...

CVE-2018-18660

An issue was discovered in Arcserve Unified Data Protection UDP through 6.5 Update 4. There is a DDI-VRT-2018-21 Reflected Cross-site Scripting via /authenticationendpoint/domain.jsp issue...

CVE-2018-18657

Arcserve UDP up to 6.5 Update 4 is affected by an unauthenticated information disclosure via the EdgeServiceImpl endpoint (/gateway/services/EdgeServiceImpl). The issue, DDI-VRT-2018-18, allows disclosure of sensitive information without authentication. Affected product: Arcserve Unified Data Pro...

CVE-2018-18659

An issue was discovered in Arcserve Unified Data Protection UDP through 6.5 Update 4. There is a DDI-VRT-2018-19 Unauthenticated XXE in /management/UdpHttpService issue...

CVE-2018-18658

An issue was discovered in Arcserve Unified Data Protection UDP through 6.5 Update 4. There is a DDI-VRT-2018-20 Unauthenticated Sensitive Information Disclosure via /UDPUpdates/Config/FullUpdateSettings.xml issue...

CVE-2018-18659

Arcserve UDP (Arcserve Unified Data Protection) up to version 6.5 Update 4 contains an unauthenticated XML External Entity (XXE) issue in the /management/UdpHttpService endpoint (DDI-VRT-2018-19). This vulnerability is documented across multiple sources and affects UDP 6.5 Update 4 and earlier ve...

NVIDIA GPU Display Driver Denial of Service Vulnerability (CNVD-2017-30721)

The NVIDIA Windows GPU Display Driver is a set of graphics processor GPU graphics card drivers for Windows from NVIDIA. kernel mode layer handler for DxgkDdiCreateAllocation is one of the... kernel mode layer handler for DxgkDdiEscape. A security vulnerability exists in the kernel mode layer...

NVIDIA GPU Display Driver Denial of Service Vulnerability (CNVD-2017-30722)

The NVIDIA Windows GPU Display Driver is a set of graphics processor GPU graphics card drivers for Windows from NVIDIA. kernel mode layer handler for DxgkDdiCreateAllocation is one of the... kernel mode layer handler for DxgkDdiEscape. A security vulnerability exists in the kernel mode layer...

NVIDIA Windows GPU Display Driver elevation of privilege vulnerability (CNVD-2017-26299)

The NVIDIA Windows GPU Display Driver is a set of graphics processor GPU graphics card drivers for Windows from NVIDIA. kernel mode layer handler for DxgkDdiEscape is one of the... kernel mode layer handler for DxgkDdiEscape. A security vulnerability exists in the kernel mode layer nvlddmkm.sys...

NVIDIA Windows GPU Display Driver elevation of privilege vulnerability (CNVD-2017-26295)

The NVIDIA Windows GPU Display Driver is a set of graphics processor GPU graphics card drivers for Windows. A security vulnerability in NVIDIA Windows GPU Display Driver nvlddmkm.sys for DxgkDdiEscape allows local attackers to exploit the vulnerability to submit a special request for elevated...

NVIDIA Windows GPU Display Driver Local Elevation of Privilege Vulnerability (CNVD-2017-07446)

NVIDIA Windows GPU Display Driver is a set of graphics processor GPU graphics card drivers for Windows from NVIDIA. A local elevation of privilege vulnerability exists in the kernel mode layer nvlddmkm.sys handler for DxgkDdiEscape in the NVIDIA Windows GPU Display Driver. An attacker could use...

NVIDIA Windows GPU Display Driver Denial of Service Vulnerability

NVIDIA Windows GPU Display Driver is a set of graphics processor GPU graphics card drivers for Windows from NVIDIA. A denial of service vulnerability exists in the kernel mode layer handler for DxgkDdiEscape in the NVIDIA Windows GPU Display Driver. An attacker could exploit this vulnerability to...

NVIDIA Windows GPU Display Driver Null Pointer Reference Denial of Service Vulnerability

NVIDIA Windows GPU Display Driver is a set of graphics processor GPU graphics card drivers for Windows from NVIDIA. A security vulnerability exists in the NVIDIA Windows GPU Display Driver's nvlddmkm.sys processing DxgkDdiEscape, which can be exploited by attackers to cause a denial of service or...

NVIDIA Windows GPU Display Driver Buffer Overflow Vulnerability (CNVD-2017-01869)

NVIDIA Windows GPU Display Driver is a set of graphics processor GPU graphics card drivers for Windows from NVIDIA. A security vulnerability in DxgkDdiEscape in nvlddmkm.sys of the NVIDIA Windows GPU Display Driver can be exploited by an attacker to cause a denial of service or gain elevated...

Design/Logic Flaw

All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer nvlddmkm.sys implementation of the SubmitCommandVirtual DDI DxgkDdiSubmitCommandVirtual where untrusted input is used to reference memory outside of the intended boundary of the buffer leading to...

CVE-2017-0313

All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer nvlddmkm.sys implementation of the SubmitCommandVirtual DDI DxgkDdiSubmitCommandVirtual where untrusted input is used to reference memory outside of the intended boundary of the buffer leading to...

PT-2017-10517

Name of the Vulnerable Software and Affected Versions NVIDIA Windows GPU Display Driver versions affected versions not specified Description The issue is related to a vulnerability in the kernel mode layer implementation of the SubmitCommandVirtual DDI, specifically in the nvlddmkm.sys driver. Th...