11934 matches found
CVE-2021-43899 Microsoft 4K Wireless Display Adapter Remote Code Execution Vulnerability
...
CVE-2021-43899
CVE-2021-43899 identifies a remote code execution vulnerability in the Microsoft 4K Wireless Display Adapter. Affected product: Microsoft 4K Wireless Display Adapter. POC/root-cause specifics are not detailed in the provided documents, but the CVE is rated CRITICAL (CVSS v3.1 base score 9.8; NETW...
Microsoft 4K Wireless Display Adapter Remote Code Execution Vulnerability
...
PT-2021-6340 · Microsoft · Edge For Android
Name of the Vulnerable Software and Affected Versions: Microsoft Edge for Android affected versions not specified Description: The issue is related to errors in the representation of information by the user interface, which can be exploited by a remote attacker to perform a spoofing attack. There...
Microsoft 4K Wireless Display Adapter 代码注入漏洞
The Microsoft 4K Wireless Display Adapter is a 4K wireless display adapter from Microsoft Corporation USA. A code injection vulnerability exists in the Microsoft 4K Wireless Display Adapter. The vulnerability arises from a network system or product not properly filtering specific elements of...
CVE-2021-24855
The Display Post Metadata WordPress plugin before 1.5.0 adds a shortcode to print out custom fields, however their content is not sanitised or escaped which could allow users with a role as low as Contributor to perform Cross-Site Scripting attacks...
CVE-2021-24855
CVE-2021-24855 affects the WordPress plugin Display Post Metadata (before 1.5.0). The vulnerability arises from unsanitised/unescaped content in a shortcode that prints custom fields, enabling stored Cross-Site Scripting for users with as low as Contributor. Impact is elevated to XSS through the ...
PT-2021-8131 · Linux +2 · Linux Kernel +2
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a NULL pointer dereference in the mediatek component of the Linux kernel, specifically in the mtk hdmi bridge mode valid function. This occurs when a HDMI cable...
WordPress 插件跨站脚本漏洞
WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language. The platform supports the hosting of personal blog sites on PHP and MySQL servers. display Post Metadata plugin is a WordPress open source application plugin. WordPress Display Post Metadata plugin ...
[SECURITY] Fedora 35 Update: ImageMagick-6.9.12.31-1.fc35
ImageMagick is an image display and manipulation tool for the X Window System. ImageMagick can read and write JPEG, TIFF, PNM, GIF, and Photo CD image formats. It can resize, rotate, sharpen, color reduce, or add special effects to an image, and when finished you can either save the completed wor...
NXP i.MX SoC has unspecified vulnerabilities
NXP i.MX SoC is nxp's multi-core solution for multimedia and display applications with scalable, secure and reliable high-performance and low-power features. nXP i.MX SoC devices have a security vulnerability that stems from the OPTEE-OS CSU driver for NXP i.MX SoC devices lacking secure access...
CVE-2021-24914
The Tawk.To Live Chat WordPress plugin before 0.6.0 does not have capability and CSRF checks in the tawktosetwidget and tawktoremovewidget AJAX actions, available to any authenticated user. The first one allows low-privileged users including simple subscribers to change the...
[SECURITY] Fedora 34 Update: chafa-1.2.1-6.fc34
Chafa is a command-line utility that converts all kinds of images, including animated image formats like GIFs, into ANSI/Unicode character output that can be displayed in a terminal. It is highly configurable, with support for alpha transparency and multiple color modes and color spaces, combinin...
[SECURITY] Fedora 34 Update: wireshark-3.6.0-1.fc34
Wireshark allows you to examine protocol data stored in files or as it is captured from wired or wireless WiFi or Bluetooth networks, USB devices, and many other sources. It supports dozens of protocol capture file formats and understands more than a thousand protocols. It has many powerful...
NVIDIA Windows GPU Display Driver (October 2021)
A display driver installed on the remote Windows host is affected by multiple vulnerabilities: - NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for private IOCTLs, where an attacker with local unprivileged system access may cause a NUL...
Xylem Aanderaa GeoView
1. EXECUTIVE SUMMARY CVSS v3 8.2 ATTENTION: Exploitable remotely/low attack complexity Vendor: Xylem, Inc. Equipment: Aanderaa GeoView Vulnerability: SQL Injection 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to manipulate the database server. 3...
CVE-2021-24894
The Reviews Plus WordPress plugin before 1.2.14 does not validate the submitted rating, allowing submission of long integer, causing a Denial of Service in the review section when an authenticated user submit such rating and the reviews are set to be displayed on the post/page...
November 22, 2021—KB5007253 (OS Builds 19041.1387, 19042.1387, 19043.1387, and 19044.1387) Preview
None None...
gcc-toolset-11-binutils security update
2.36.1-1.0.1.1 - Forward port Oracle patches from 2.36.1-1.0.1 - Reviewed-by: Jose E. Marchesi 2.36.1-1.1 - Add ability to control the display of unicode characters. 2009172...