NVIDIA Windows GPU Display Driver elevation of privilege vulnerability (CNVD-2017-26295)

The NVIDIA Windows GPU Display Driver is a set of graphics processor GPU graphics card drivers for Windows. A security vulnerability in NVIDIA Windows GPU Display Driver nvlddmkm.sys for DxgkDdiEscape allows local attackers to exploit the vulnerability to submit a special request for elevated...

NVIDIA Windows GPU Display Driver elevation of privilege vulnerability (CNVD-2017-26299)

The NVIDIA Windows GPU Display Driver is a set of graphics processor GPU graphics card drivers for Windows from NVIDIA. kernel mode layer handler for DxgkDdiEscape is one of the... kernel mode layer handler for DxgkDdiEscape. A security vulnerability exists in the kernel mode layer nvlddmkm.sys...

NVIDIA Windows GPU Display Driver Local Elevation of Privilege Vulnerability (CNVD-2017-07446)

NVIDIA Windows GPU Display Driver is a set of graphics processor GPU graphics card drivers for Windows from NVIDIA. A local elevation of privilege vulnerability exists in the kernel mode layer nvlddmkm.sys handler for DxgkDdiEscape in the NVIDIA Windows GPU Display Driver. An attacker could use...

NVIDIA Windows GPU Display Driver Denial of Service Vulnerability

NVIDIA Windows GPU Display Driver is a set of graphics processor GPU graphics card drivers for Windows from NVIDIA. A denial of service vulnerability exists in the kernel mode layer handler for DxgkDdiEscape in the NVIDIA Windows GPU Display Driver. An attacker could exploit this vulnerability to...

NVIDIA Windows GPU Display Driver Null Pointer Reference Denial of Service Vulnerability

NVIDIA Windows GPU Display Driver is a set of graphics processor GPU graphics card drivers for Windows from NVIDIA. A security vulnerability exists in the NVIDIA Windows GPU Display Driver's nvlddmkm.sys processing DxgkDdiEscape, which can be exploited by attackers to cause a denial of service or...

NVIDIA Windows GPU Display Driver Buffer Overflow Vulnerability (CNVD-2017-01869)

NVIDIA Windows GPU Display Driver is a set of graphics processor GPU graphics card drivers for Windows from NVIDIA. A security vulnerability in DxgkDdiEscape in nvlddmkm.sys of the NVIDIA Windows GPU Display Driver can be exploited by an attacker to cause a denial of service or gain elevated...

CVE-2017-0313

All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer nvlddmkm.sys implementation of the SubmitCommandVirtual DDI DxgkDdiSubmitCommandVirtual where untrusted input is used to reference memory outside of the intended boundary of the buffer leading to...

Design/Logic Flaw

All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer nvlddmkm.sys implementation of the SubmitCommandVirtual DDI DxgkDdiSubmitCommandVirtual where untrusted input is used to reference memory outside of the intended boundary of the buffer leading to...

CVE-2016-8809

For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgDdiEscape ID 0x70001b2 where the size of an input buffer is not validated, leading to denial ...

CVE-2016-5840

Trend Micro Deep Discovery Inspector (DDI) is affected by a hotfix_upload.cgi vulnerability that lets remote attackers execute arbitrary code via crafted shell metacharacters in the Content-Disposition filename parameter. Affected products/versions include DDI 3.7, 3.8 SP1 (3.81), and 3.8 SP2 (3....

CVE-2015-2872

Trend Micro Deep Discovery Inspector (DDI) on Deep Discovery Threat appliances is affected by CVE-2015-2872 through input handling flaws in the web interface: crafted input to index.php and the widget feature can trigger cross-site scripting. Documented impact: unauthenticated remote injection of...

CVE-2015-2873

Trend Micro Deep Discovery Inspector DDI on Deep Discovery Threat appliances with software before 3.5.1477, 3.6.x before 3.6.1217, 3.7.x before 3.7.1248, 3.8.x before 3.8.1263, and other versions allows remote attackers to obtain sensitive information or change the configuration via a direct...

CVE-2015-2873

CVE-2015-2873 affects Trend Micro Deep Discovery Inspector (DDI) on Deep Discovery Threat appliances. The root cause is improper authorization checks on direct access to critical management URLs (system log, whitelist, blacklist). An unauthenticated, non-admin user could view or modify sensitive ...

Unfixed XSS vulnerability at www.ddisolutions.com

Security researcher CrashOver, has submitted on 08/11/2008 a cross-site-scripting XSS vulnerability affecting www.ddisolutions.com, which at the time of submission ranked 5110616 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/12/2008. It is...