Debian DLA-2888-1 : nvidia-graphics-drivers - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2888 advisory. Multiple security vulnerabilities have been discovered in the NVIDIA binary driver and libraries that provide optimized hardware acceleration which may lead to...

OpenBMCS 2.4 - Information Disclosure

Exploit Title: OpenBMCS 2.4 - Information Disclosure Exploit Author: LiquidWorm Date: 26/10/2021 OpenBMCS 2.4 Secrets Disclosure Vendor: OPEN BMCS Product web page: https://www.openbmcs.com Affected version: 2.4 Summary: Building Management & Controls System BMCS. No matter what the size of your...

The vulnerability of WebKitGTK and WPE WebKit’s display modules is related to authentication procedures that allow attackers to access confidential data and compromise its integrity.

The vulnerability of Web page rendering modules in WebKitGTK and WPE WebKit is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data and compromise its integrity through a malicious website...

The vulnerability of WebKitGTK and WPE WebKit’s display modules, related to memory management after memory is freed, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of Web page rendering modules in WebKitGTK and WPE WebKit relates to the use of memory after it is released. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service failures due to malicious web content...

HuaWei smartphone denial of service vulnerability

A denial of service vulnerability exists in Huawei smartphone, a smartphone from Huawei of China, which stems from an uncontrolled resource consumption vulnerability in the display module of the smartphone. An attacker could exploit this vulnerability to affect service availability...

Google Android elevation of privilege vulnerability (CNVD-2022-15193)

Google Android is a Linux-based open source operating system from Google. A security vulnerability exists in Pixel Display/graphics in Google Android, which arises from a configuration or other error in the operation of a networked system or product. An attacker could exploit the vulnerability to...

Google Android elevation of privilege vulnerability (CNVD-2022-15194)

Google Android is a Linux-based open source operating system from Google. A security vulnerability exists in Pixel Display/graphics in Google Android, which arises from a configuration or other error in the operation of a networked system or product. An attacker could exploit the vulnerability to...

CVE-2021-40038

There is a Double free vulnerability in the AOD module in smartphones. Successful exploitation of this vulnerability may affect service integrity...

CVE-2021-40038

There is a Double free vulnerability in the AOD module in smartphones. Successful exploitation of this vulnerability may affect service integrity...

CVE-2021-40011

There is an uncontrolled resource consumption vulnerability in the display module. Successful exploitation of this vulnerability may affect integrity...

CVE-2021-40011

There is an uncontrolled resource consumption vulnerability in the display module. Successful exploitation of this vulnerability may affect integrity...

CVE-2021-40011

There is an uncontrolled resource consumption vulnerability in the display module. Successful exploitation of this vulnerability may affect integrity...

CVE-2021-40026

There is a Heap-based buffer overflow vulnerability in the AOD module in smartphones. Successful exploitation of this vulnerability may affect service integrity...

CVE-2021-40009

There is an Out-of-bounds write vulnerability in the AOD module in smartphones. Successful exploitation of this vulnerability may affect service integrity...

Denial of service

There is an uncontrolled resource consumption vulnerability in the display module. Successful exploitation of this vulnerability may affect integrity...

Huawei Smartphone 资源管理错误漏洞

A denial of service vulnerability exists in Huawei smartphone, a smartphone from Huawei of China, which stems from an uncontrolled resource consumption vulnerability in the display module of the smartphone. An attacker could exploit this vulnerability to affect service availability...

The vulnerability of Blink’s web page display mechanism in Microsoft Edge browsers allows attackers to circumvent existing access restrictions policies.

The vulnerability of Blink’s web page display mechanism in Microsoft Edge browsers is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to circumvent existing access restrictions...

CVE-2021-40011

There is an uncontrolled resource consumption vulnerability in the display module. Successful exploitation of this vulnerability may affect integrity...

CVE-2021-40011

CVE-2021-40011 describes an uncontrolled resource consumption vulnerability in the display module. Exploitation could impact integrity. No concrete vendor/product/version details are provided in the connected documents; remediation/patch information is not specified in the supplied materials.

Huawei HarmonyOS 资源管理错误漏洞

Huawei HarmonyOS is an operating system from Huawei, a Chinese company that provides a microkernel-based distributed operating system. The Huawei HarmonyOS AOD module is vulnerable to a double-release vulnerability that could be exploited by attackers to compromise integrity...