11930 matches found
[SECURITY] Fedora 35 Update: fribidi-1.0.11-3.fc35
A library to handle bidirectional scripts for example Hebrew, Arabic, so that the display is done in the proper way; while the text data itself is always written in logical order...
CVE-2021-4206
A flaw was found in the QXL display device emulation in QEMU. An integer overflow in the cursoralloc function can lead to the allocation of a small cursor object followed by a subsequent heap-based buffer overflow. This flaw allows a malicious privileged guest user to crash the QEMU process on th...
CVE-2021-4207
A flaw was found in the QXL display device emulation in QEMU. A double fetch of guest controlled values cursor-header.width and cursor-header.height can lead to the allocation of a small cursor object followed by a subsequent heap-based buffer overflow. A malicious privileged guest user could use...
SWHKD Denial of Service Vulnerability
SWHKD is a display protocol independent hotkey daemon made in Rust. A denial of service vulnerability exists in SWHKD version 1.1.5, which stems from the insecure use of the /tmp/swhks.pid pathname and can be exploited by an attacker to potentially cause a denial of service...
PT-2022-2653 · Nvidia +1 · Nvidia Gpu Display Driver +1
Name of the Vulnerable Software and Affected Versions: NVIDIA GPU Display Driver for Windows and Linux affected versions not specified Description: The issue is related to an out-of-bounds read in the kernel mode layer of the NVIDIA GPU Display Driver. This can be exploited by an unprivileged...
PT-2022-3227 · Nvidia +1 · Nvidia Gpu Display Driver +1
Name of the Vulnerable Software and Affected Versions: NVIDIA GPU Display Driver affected versions not specified Description: The issue is related to an out-of-bounds write in the ECC layer of the NVIDIA GPU Display Driver, which can be exploited by an unprivileged regular user. This may lead to...
PT-2022-3250
Name of the Vulnerable Software and Affected Versions NVIDIA GPU Display Driver for Windows affected versions not specified Description The issue is related to a NULL pointer dereference in the kernel mode layer handler for DxgkDdiEscape, which may lead to a system crash. This can be exploited to...
CVE-2022-26269
Suzuki Connect v1.0.15 allows attackers to tamper with displayed messages via spoofed CAN messages...
CVE-2022-0751
Inaccurate display of Snippet files containing special characters in all versions of GitLab CE/EE allows an attacker to create Snippets with misleading content which could trick unsuspecting users into executing arbitrary commands...
CVE-2022-26205
Marky commit 3686565726c65756e was discovered to contain a remote code execution RCE vulnerability via the Display text fields. This vulnerability allows attackers to execute arbitrary code via injection of a crafted payload...
PT-2022-17720 · Marky · Marky
Name of the Vulnerable Software and Affected Versions: Marky commit 3686565726c65756e Description: The issue is related to a remote code execution RCE vulnerability. It allows attackers to execute arbitrary code via injection of a crafted payload through the Display text fields. Recommendations:...
Moderate: Red Hat Security Advisory: Red Hat OpenStack Platform 16.2 (openstack-nova) security update
An update for openstack-nova is now available for Red Hat OpenStack Platform 16.2 Train. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
Apple iMessage iOS 安全漏洞
Apple iMessage iOS is an instant messaging service from Apple Inc. in the United States. A security vulnerability exists in Apple iMessage iOS Messages app version 12.4, which stems from a failure of the user interface in iMessage Messages app iOS version 12.4 and earlier to properly present URI...
The vulnerability of Visual Studio Code’s source editor, related to errors in information representation on the user interface, allows attackers to perform spear-phishing attacks.
The vulnerability of Visual Studio Code’s source editor is related to errors in information representation by the user interface. Exploiting this vulnerability allows a malicious actor to perform spoofing attacks remotely...
credentials: Stored XSS vulnerabilities in jenkins plugin
A flaw was found in the Jenkins credentials plugin. The Jenkins credentials plugin does not escape the name and description of Credentials parameters on views displaying parameters. This issue results in a stored Cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure...
CVE-2022-26174
A remote code execution RCE vulnerability in Beekeeper Studio v3.2.0 allows attackers to execute arbitrary code via a crafted payload injected into the display fields...
CVE-2022-26174
A remote code execution RCE vulnerability in Beekeeper Studio v3.2.0 allows attackers to execute arbitrary code via a crafted payload injected into the display fields...
Remote code execution
A remote code execution RCE vulnerability in Beekeeper Studio v3.2.0 allows attackers to execute arbitrary code via a crafted payload injected into the display fields...
CVE-2022-26174
Beekeeper Studio 3.2.0 is affected by a remote code execution (RCE) via a crafted payload injected into display fields. Multiple connected sources corroborate the vulnerability description (RCE in Beekeeper Studio v3.2.0). The exact root cause is not fully detailed across the provided documents, ...
