DEBIAN-CVE-2020-10803

In phpMyAdmin 4.x before 4.9.5 and 5.x before 5.0.2, a SQL injection vulnerability was discovered where malicious code could be used to trigger an XSS attack through retrieving and displaying results in tblgetfield.php and libraries/classes/Display/Results.php. The attacker must be able to insert...

CVE-2020-10803

In phpMyAdmin 4.x before 4.9.5 and 5.x before 5.0.2, a SQL injection vulnerability was discovered where malicious code could be used to trigger an XSS attack through retrieving and displaying results in tblgetfield.php and libraries/classes/Display/Results.php. The attacker must be able to insert...

phpMyAdmin -- SQL injection

phpMyAdmin Team reports: PMASA-2020-2 SQL injection vulnerability in the user accounts page, particularly when changing a password PMASA-2020-3 SQL injection vulnerability relating to the search feature PMASA-2020-4 SQL injection and XSS having to do with displaying results Removing of the...

NVIDIA Windows GPU Display Driver (Feb 2020)

A display driver installed on the remote Windows host is affected by multiple vulnerabilities. - A privilege escalation vulnerability exists in NVIDIA Control Panel component. An unauthenticated, local attacker can exploit this, via corrputing a system file, to gain priviledged access to the...

Cross site scripting

A vulnerability was found in moodle 3.7 before 3.7.3, where there is blind XSS reflected in some locations where user email is displayed...

CVE-2019-14881

A vulnerability was found in moodle 3.7 before 3.7.3, where there is blind XSS reflected in some locations where user email is displayed...

UBUNTU-CVE-2019-14881

A vulnerability was found in moodle 3.7 before 3.7.3, where there is blind XSS reflected in some locations where user email is displayed...

CVE-2019-14881

CVE-2019-14881 concerns Moodle 3.7.x prior to 3.7.3, where a blind XSS vulnerability is reflected in locations that display a user’s email. The vulnerability is triggered via input that is reflected in output in certain contexts, enabling an attacker to execute client-side code in the context of ...

QEMU Buffer Overflow Vulnerability (CNVD-2020-19909)

QEMU Quick Emulator is a set of simulation processor software by French software developer Fabrice Bellard. The software is fast, cross-platform and other characteristics. A buffer overflow vulnerability exists in the hw/display/bochs-display.c file in QEMU version 4.0.0. The vulnerability stems...

PT-2020-11901 · Gitlab · Gitlab

Name of the Vulnerable Software and Affected Versions: GitLab versions 12.1 through 12.8.1 Description: A stored cross-site scripting issue was found when displaying merge requests, allowing for XSS attacks. Recommendations: For versions 12.1 through 12.8.1, update to a version that contains a fi...

CVE-2020-5958

CVE-2020-5958 affects NVIDIA Windows GPU Display Driver (control panel component). The vulnerability allows a local attacker with system access to plant a malicious DLL, potentially enabling code execution, denial of service, or information disclosure. The related NVIDIA security bulletin lists a...

DEBIAN-CVE-2019-15034

hw/display/bochs-display.c in QEMU 4.0.0 does not ensure a sufficient PCI config space allocation, leading to a buffer overflow involving the PCIe extended config space...

CVE-2019-15034

hw/display/bochs-display.c in QEMU 4.0.0 does not ensure a sufficient PCI config space allocation, leading to a buffer overflow involving the PCIe extended config space...

UBUNTU-CVE-2019-15034

hw/display/bochs-display.c in QEMU 4.0.0 does not ensure a sufficient PCI config space allocation, leading to a buffer overflow involving the PCIe extended config space...

CVE-2019-15034

CVE-2019-15034 affects QEMU 4.0.0 where hw/display/bochs-display.c does not allocate enough PCI config space, enabling a buffer overflow in the PCIe extended config space. The issue is local in nature and can impact systems running affected QEMU versions as reported. Exploitation details and a co...

Memory Corruption Vulnerability in KEWEI WSP Series Text Display Screen Configuration Software

Huangshi Kewei Automatic Control Co., Ltd. is a high-tech enterprise and software enterprise that develops, produces and sells embedded PLC, intelligent servo, human-machine interface and other series of industrial control products. KEWEI WSP Series Text Display Screen Configuration Software has ...

NVIDIA Windows GPU Display Driver Vulnerabilities - February 2020 - Lenovo Support US

Lenovo Security Advisory: LEN-30458 Potential Impact: Denial of service, escalation of privileges, code execution, or information disclosure. Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE-2020-5957, CVE-2020-5958, CVE-2020-5959, CVE-2020-5960, CVE-2020-5961 Summary Description...

Design/Logic Flaw

NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the NVIDIA Control Panel component in which an attacker with local system access can corrupt a system file, which may lead to denial of service or escalation of privileges...

CVE-2020-5957

NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the NVIDIA Control Panel component in which an attacker with local system access can corrupt a system file, which may lead to denial of service or escalation of privileges...

CVE-2020-5957

NVIDIA CVE-2020-5957 affects the Windows GPU Display Driver, specifically the NVIDIA Control Panel component. A local attacker can corrupt a system file, yielding denial of service or privilege escalation. Affected products include NVIDIA GeForce/Quadro/NVS/Tesla drivers for Windows (all R440/R43...