UBUNTU-CVE-2021-1095

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer nvlddmkm.sys handlers for all control calls with embedded parameters where dereferencing an untrusted pointer may lead to denial of service...

Nvidia GPU Display Driver 代码问题漏洞

The Nvidia GPU Display Driver is a driver from Nvidia Corporation that is used for interactive support of graphics card display modules in operating systems. A code issue vulnerability exists in the NVIDIA GPU Display Driver for Windows and Linux platforms that originates from an untrusted pointe...

PT-2021-6691 · Nvidia +2 · Nvidia Gpu Display Driver +2

Name of the Vulnerable Software and Affected Versions: NVIDIA GPU Display Driver for Windows and Linux affected versions not specified Description: The issue is related to an out of bounds array access in the kernel mode layer handler for DxgkDdiEscape, which may lead to denial of service or...

PT-2021-6692 · Nvidia +2 · Nvidia Gpu Display Driver +2

Name of the Vulnerable Software and Affected Versions: NVIDIA GPU Display Driver for Windows and Linux affected versions not specified Description: The issue is related to a vulnerability in the firmware of the NVIDIA GPU Display Driver, where an assert or similar statement can be triggered by an...

PT-2021-3773 · Cockpit +5 · Cockpit +5

Name of the Vulnerable Software and Affected Versions: Cockpit affected versions not specified Description: The issue is related to clickjacking attacks, where a malicious website can render a page from a Cockpit server inside an iframe HTML entry. This could be exploited by a malicious website t...

Nvidia GPU Display Driver 代码问题漏洞

Nvidia GPU Display Driver is a driver software from Nvidia, Inc. for interactive support of graphics card display modules in operating systems. A code issue vulnerability exists in Nvidia GPU Display Driver for Windows and Linux based platforms, which stems from the product's allow reach assertio...

Security Bulletin: NVIDIA GPU Display Drivers - July 2021

NVIDIA has released a software security update for NVIDIA GPU Display Drivers. This update addresses issues that may lead to information disclosure, data tampering, and denial of service. To protect your system, download and install this software update through the NVIDIA Driver Downloads page or...

PT-2021-4737 · Microsoft · Windows Print Spooler +1

Name of the Vulnerable Software and Affected Versions: Windows Print Spooler affected versions not specified Description: The issue is related to errors in the representation of information by the user interface of the Windows Print Spooler in Windows operating systems. This can allow a remote...

PT-2021-6024 · Microsoft · Visual Studio

Name of the Vulnerable Software and Affected Versions: Microsoft Visual Studio affected versions not specified Description: The issue is related to errors in the representation of information by the user interface. It may allow a remote attacker to conduct spoofing attacks using a specially craft...

PT-2021-6954 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue is related to insufficient access restrictions in the Win32k component of Microsoft Windows, allowing an attacker to potentially elevate their privileges. This could...

PT-2021-5718 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in presenting information to the user interface, which can be exploited by a remote attacker to conduct spoofing attacks. This allows attackers to affect the...

Mozilla Thunderbird < 78.12

The version of Thunderbird installed on the remote Windows host is prior to 78.12. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2021-30 advisory. - An out of bounds write in ANGLE could have allowed an attacker to corrupt memory leading to a potentially...

CVE-2021-24454

In the YOP Poll WordPress plugin before 6.2.8, when a pool is created with the options "Allow other answers", "Display other answers in the result list" and "Show results", it can lead to Stored Cross-Site Scripting issues as the 'Other' answer is not sanitised before being output in the page. Th...

CVE-2021-24454

In the YOP Poll WordPress plugin before 6.2.8, when a pool is created with the options "Allow other answers", "Display other answers in the result list" and "Show results", it can lead to Stored Cross-Site Scripting issues as the 'Other' answer is not sanitised before being output in the page. Th...

The vulnerability of the fly-qdm GUI input software, related to the disclosure of information, allows a perpetrator to gain access to confidential data.

The vulnerability of the fly-qdm GUI login software is related to the automatic display of the user’s name. Exploiting this vulnerability allows an intruder to access confidential data...

[ASA-202107-12] spice: multiple issues

Arch Linux Security Advisory ASA-202107-12 ========================================== Severity: Critical Date : 2021-07-06 CVE-ID : CVE-2020-14355 CVE-2021-20201 Package : spice Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-1239 Summary ======= The package spice...

Advisory ROSA-SA-2021-1913

Software: mailman 2.1.15 OS: Cobalt 7.9 CVE-ID: CVE-2016-6893 CVE-Crit: HIGH CVE-DESC: A cross-site request forgery CSRF vulnerability in the user parameter page in GNU Mailman 2.1.x through 2.1.23 allows remote attackers to intercept arbitrary user authentication for requests that modify a...

GHSA-7P8H-86P5-WV3P Cross-site scripting

Two kinds of XSS were found: 1. As mentioned in https://github.com/mongo-express/mongo-express/issues/577 when the content of a cell grows larger than supported size, clicking on a row will show full document unescaped, however this needs admin interaction on cell. 2. Data cells identified as med...

Cross-site scripting

Two kinds of XSS were found: 1. As mentioned in https://github.com/mongo-express/mongo-express/issues/577 when the content of a cell grows larger than supported size, clicking on a row will show full document unescaped, however this needs admin interaction on cell. 2. Data cells identified as med...

Prism 资源管理错误漏洞

Prism is an application software. It is a lightweight, extensible syntax highlighting tool.A security vulnerability exists in versions of Prism prior to 1.24.0, which stems from the fact that when Prism is used to highlight untrusted text, an attacker can exploit the vulnerability to craft a stri...