Lucene search
+L

11926 matches found

UbuntuCve
UbuntuCve
added 2022/02/01 12:00 a.m.36 views

CVE-2022-21814

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel driver package, where improper handling of insufficient permissions or privileges may allow an unprivileged local user limited write access to protected memory, which can lead to denial of service...

6.1CVSS6.3AI score0.00232EPSS
SaveExploits0References3
OSV
OSV
added 2022/02/01 12:00 a.m.8 views

UBUNTU-CVE-2022-21813

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel driver, where improper handling of insufficient permissions or privileges may allow an unprivileged local user limited write access to protected memory, which can lead to denial of service...

6.1CVSS6.4AI score0.00232EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2022/02/01 12:00 a.m.45 views

CVE-2022-21813

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel driver, where improper handling of insufficient permissions or privileges may allow an unprivileged local user limited write access to protected memory, which can lead to denial of service...

6.1CVSS6.4AI score0.00232EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2022/02/01 12:00 a.m.5 views

PT-2022-15147 · Nvidia +2 · Nvidia Gpu Display Driver +2

Name of the Vulnerable Software and Affected Versions: NVIDIA GPU Display Driver for Linux affected versions not specified Description: The issue arises from improper handling of insufficient permissions or privileges in the kernel driver, allowing an unprivileged local user to have limited write...

6.1CVSS5.8AI score0.00232EPSS
SaveExploits0References16
OSV
OSV
added 2022/01/28 7:15 p.m.9 views

CVE-2021-41609

SQL injection in the ID parameter of the UploadedImageDisplay.aspx endpoint of SelectSurvey.NET before 5.052.000 allows a remote, unauthenticated attacker to retrieve data from the application's backend database via boolean-based blind and UNION injection...

9.8CVSS5.9AI score0.02138EPSS
SaveExploits1References2
OSV
OSV
added 2022/01/28 7:15 p.m.9 views

CVE-2021-41608

A file disclosure vulnerability in the UploadedImageDisplay.aspx endpoint of SelectSurvey.NET before 5.052.000 allows a remote, unauthenticated attacker to retrieve survey user submitted data by modifying the value of the ID parameter in sequential order beginning from 1...

7.5CVSS5.8AI score0.01973EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2022/01/28 7:15 p.m.6 views

CVE-2021-41608

A file disclosure vulnerability in the UploadedImageDisplay.aspx endpoint of SelectSurvey.NET before 5.052.000 allows a remote, unauthenticated attacker to retrieve survey user submitted data by modifying the value of the ID parameter in sequential order beginning from 1...

7.5CVSS7.1AI score0.01973EPSS
SaveExploits1References3
ATTACKERKB
ATTACKERKB
added 2022/01/28 7:15 p.m.8 views

CVE-2021-41609

SQL injection in the ID parameter of the UploadedImageDisplay.aspx endpoint of SelectSurvey.NET before 5.052.000 allows a remote, unauthenticated attacker to retrieve data from the application's backend database via boolean-based blind and UNION injection...

9.8CVSS7.4AI score0.02138EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2022/01/28 7:09 p.m.52 views

CVE-2021-22813

A CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability exists that could cause arbritrary script execution when a privileged account clicks on a malicious URL specifically crafted for the NMC pointing to an edit policy file. Affected Products:...

6.4AI score0.00745EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2022/01/28 12:00 a.m.9 views

ClassApps SelectSurvey.NET SQL注入漏洞

Net is a survey software from ClassApps, Inc. built using Microsoft's cutting-edge . A SQL injection vulnerability exists in the ID parameter of the UploadedImageDisplay.aspx endpoint, which can be exploited by an unauthenticated attacker to retrieve data from the application's back-end database...

9.8CVSS5.9AI score0.02138EPSS
SaveExploits1References3
OpenVAS
OpenVAS
added 2022/01/28 12:00 a.m.37 views

Mageia: Security Advisory (MGASA-2021-0026)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS6.7AI score0.01777EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2022/01/28 12:00 a.m.8 views

ClassApps SelectSurvey.NET 安全漏洞

ClassApps SelectSurvey.Net is a survey software from ClassApps USA built using Microsoft's cutting-edge . A security vulnerability in the UploadedImageDisplay.aspx endpoint of ClassApps SelectSurvey.NET before 5.052.000 allows remote, unauthenticated attackers to retrieve survey user-submitted da...

7.5CVSS7.3AI score0.01973EPSS
SaveExploits1References3
OpenVAS
OpenVAS
added 2022/01/28 12:00 a.m.29 views

Mageia: Security Advisory (MGASA-2014-0467)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.2CVSS7.6AI score0.03742EPSS
SaveExploits0References7
Microsoft KB
Microsoft KB
added 2022/01/25 12:00 a.m.7 views

January 25, 2022—KB5008353 (OS Build 22000.469) Preview

None None...

6.1AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2022/01/24 12:00 a.m.16 views

PT-2024-11797

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the Linux kernel, specifically with the drm/amd/display component. It involves wrapping the dcn301 calculate wm and dlg function for FPU, mirroring the logic for...

5.5CVSS5.6AI score0.00182EPSS
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2022/01/21 8:00 p.m.6 views

CVE-2021-23631

This affects all versions of package convert-svg-core; all versions of package convert-svg-to-png; all versions of package convert-svg-to-jpeg. Using a specially crafted SVG file, an attacker could read arbitrary files from the file system and then show the file content as a converted PNG file...

7.5CVSS7.1AI score0.01978EPSS
SaveExploits1References5
Tenable Nessus
Tenable Nessus
added 2022/01/18 12:00 a.m.60 views

Debian DLA-2888-1 : nvidia-graphics-drivers - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2888 advisory. Multiple security vulnerabilities have been discovered in the NVIDIA binary driver and libraries that provide optimized hardware acceleration which may lead to...

7.8CVSS6.4AI score0.01777EPSS
SaveExploits0References14
Exploit DB
Exploit DB
added 2022/01/18 12:00 a.m.352 views

OpenBMCS 2.4 - Information Disclosure

Exploit Title: OpenBMCS 2.4 - Information Disclosure Exploit Author: LiquidWorm Date: 26/10/2021 OpenBMCS 2.4 Secrets Disclosure Vendor: OPEN BMCS Product web page: https://www.openbmcs.com Affected version: 2.4 Summary: Building Management & Controls System BMCS. No matter what the size of your...

5.3AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2022/01/17 12:00 a.m.13 views

The vulnerability of WebKitGTK and WPE WebKit’s display modules is related to authentication procedures that allow attackers to access confidential data and compromise its integrity.

The vulnerability of Web page rendering modules in WebKitGTK and WPE WebKit is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data and compromise its integrity through a malicious website...

5.8CVSS6.5AI score0.01372EPSS
SaveExploits0References8Affected Software5
BDU FSTEC
BDU FSTEC
added 2022/01/17 12:00 a.m.9 views

The vulnerability of WebKitGTK and WPE WebKit’s display modules, related to memory management after memory is freed, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of Web page rendering modules in WebKitGTK and WPE WebKit relates to the use of memory after it is released. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service failures due to malicious web content...

9.3CVSS6.9AI score0.0214EPSS
SaveExploits2References8Affected Software5
Rows per page
Query Builder