CVE-2024-22452

Dell Display and Peripheral Manager for macOS prior to 1.3 contains an improper access control vulnerability. A low privilege user could potentially exploit this vulnerability by modifying files in the installation folder to execute arbitrary code, leading to privilege escalation...

CVE-2024-0119

NVIDIA GPU Display Driver for Windows contains a vulnerability in the user mode layer, where an unprivileged regular user can cause an out-of-bounds read. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure,...

CVE-2024-0089

NVIDIA GPU Display Driver for Windows contains a vulnerability where the information from a previous client or another process could be disclosed. A successful exploit of this vulnerability might lead to code execution, information disclosure, or data tampering...

CVE-2024-0107

NVIDIA GPU Display Driver for Windows contains a vulnerability in the user mode layer, where an unprivileged regular user can cause an out-of-bounds read. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure,...

CVE-2025-22675: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bPlugins Alert Box Block – Display notice/alerts in the front end alert-box-block allows Stored XSS.This issue affects Alert Box Block – Display notice/alerts in the front end: from n/a through =...

PT-2025-2545

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description A missing permission check in wifi display could lead to local escalation of privilege with no additional execution privileges needed. Recommendations At the moment, there is no information...

CVE-2024-45573

Memory corruption may occour while generating test pattern due to negative indexing of display ID...

CVE-2024-45573

CVE-2024-45573 : Memory corruption can occur when generating test patterns due to negative indexing of the display ID in Qualcomm chipsets. CVSS v3.1 base score 7.8 (HIGH) with LOCAL attacker, low privileges, no user interaction; impacts to confidentiality, integrity, and availability are noted a...

CVE-2024-45573 Use of Out-of-range Pointer Offset in Display

Memory corruption may occour while generating test pattern due to negative indexing of display ID...

CVE-2024-45573 Use of Out-of-range Pointer Offset in Display

Memory corruption may occour while generating test pattern due to negative indexing of display ID...

CVE-2024-45573: Use of Out-of-range Pointer Offset

Memory corruption may occour while generating test pattern due to negative indexing of display ID...

PT-2025-14366

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue concerns out-of-bound accesses in the Linux kernel, specifically in the drm/amd/display component. The problem arises because hpo stream to link encoder mapping has a size of M...

Qualcomm Chipsets security vulnerabilities

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that stems from a negative indexing of display IDs, where memory corruption may occur when generating test patterns...

Linux DRM AMD Display Kernel DoS

The vulnerability of components such as DRM, AMD, and display kernels in the Linux operating system is related to improper validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures...

Linux DRM AMD Display Kernel DoS

The vulnerability of components such as DRM, AMD, and display kernels in the Linux operating system is related to improper error handling. Exploiting this vulnerability can allow an attacker to cause service failures...

PT-2025-27685

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel has been resolved. The issue is related to the drm/amd/display component, where a drm wb connector was incorrectly treated as an amdgpu dm connector...

CVE-2024-10847

The Storely theme for WordPress is vulnerable to Stored Cross-Site Scripting via a malicious display name in all versions up to, and including, 16.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and...

CVE-2024-10847: Improper Neutralization of Input During Web Page Generation

The Storely theme for WordPress is vulnerable to Stored Cross-Site Scripting via a malicious display name in all versions up to, and including, 18 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and abov...

WordPress plugin Storely has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site...

Google Rejection Page Text Injection

Google's unusual traffic activity page appears to allow for text injection but cross site scripting is mitigated. The page https://www.google.com/sorry/index is familiar to Tor and VPN users. It is the one that says "Our systems have detected unusual traffic from your computer network. Please try...