DRUPAL-CONTRIB-2020-013

The Webform module allows site builders to create forms. The module doesn't sufficiently prevent malicious code from being render via an options elements i.e select menu, checkboxes, radios, etc... under the scenario where the site builder allows the raw option value to be displayed. This...

Description of the PowerPoint Viewer 2010 update: September 10, 2013

Description of the PowerPoint Viewer 2010 update: September 10, 2013 Notice This update is no longer available. To fix the issues that are described in this article, install the latest Microsoft Office update from the following Microsoft Learn article:Latest updates for versions of Office that us...

edk2 security, bug fix, and enhancement update

20190829git37eef91017ad-9.el8 - edk2-OvmfPkg-QemuVideoDxe-unbreak-secondary-vga-and-bochs.patch bz1806359 - Resolves: bz1806359 bochs-display cannot show graphic wihout driver attach 20190829git37eef91017ad-8.el8 - edk2-MdeModulePkg-Enable-Disable-S3BootScript-dynamically.patch bz1801274 -...

USN-4348-1 mailman vulnerabilities

It was discovered that Mailman incorrectly handled certain inputs. An attacker could possibly use this to issue execute arbitrary scripts or HTML. CVE-2018-0618 It was discovered that Mailman incorrectly handled certain inputs. An attacker could possibly use this issue to display arbitrary text o...

gdm: lock screen bypass when timed login is enabled

A vulnerability was discovered in gdm when timed login is enabled in configuration. An attacker could bypass the lock screen by selecting the timed login user and waiting for the timer to expire at which time they would gain access to the logged-in user's session...

Security Bulletin: NVIDIA Windows and Linux GPU Display drivers are have resolved several security vulnerabilities as described below.

Summary The NVIDIA Windows and Linux GPU Display drivers have resolved several ecurity vulnerabilities as described by the following CVEs: Vulnerability Details CVEID: CVE-2019-5690 DESCRIPTION: NVIDIA Windows GPU Display driver could allow a local authenticated attacker to gain elevated privileg...

DeathRansom - A Ransomware Developed In Python, With Bypass Technics, For Educational Purposes

What is a ransomware? A ransomware is malware that encrypts all your files and shows a ransom request, which tells you to pay a set amount, usually in bitcoins BTC, in a set time to decrypt your files, or he will delete your files. How it works? First, the script checks if it's in a sandbox,...

CVE-2020-9072

Huawei OSD product with versions earlier than OSDuwp9.0.32.0 have a local privilege escalation vulnerability. An authenticated, local attacker can constructs a specific file path to exploit this vulnerability. Successful exploitation may cause the attacker to obtain a higher privilege...

CVE-2020-6827

When following a link that opened an intent://-schemed URL, causing a custom tab to be opened, Firefox for Android could be tricked into displaying the incorrect URI. Note: This issue only affects Firefox for Android. Other operating systems are unaffected.. This vulnerability affects Firefox ESR...

CVE-2020-6827

CVE-2020-6827 affects Mozilla Firefox for Android (Firefox ESR < 68.7) where following a link that opens an intent://-schemed URL could cause a custom tab to display an incorrect URI, enabling URI spoofing. The issue is reported across Firefox ESR

CVE-2020-6827

When following a link that opened an intent://-schemed URL, causing a custom tab to be opened, Firefox for Android could be tricked into displaying the incorrect URI. Note: This issue only affects Firefox for Android. Other operating systems are unaffected.. This vulnerability affects Firefox ESR...

Memory Corruption Vulnerability in Display Controls SamDraw

Ltd. was founded in 2007, the R & D center is located in Shenzhen Software Park in Shenzhen High-tech Zone, the production base is located in the Shenzhen-Shantou Cooperation Zone Fashion Brand Industrial Park, is a professional engaged in the development of industry 4.0 core product development,...

ALBA-2020:1560 tigervnc bugfix and enhancement update

Virtual Network Computing VNC is a remote display system which allows users to view a computing desktop environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures. TigerVNC is a suite of VNC servers and clients. Bug...

tigervnc bugfix and enhancement update

Virtual Network Computing VNC is a remote display system which allows users to view a computing desktop environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures. TigerVNC is a suite of VNC servers and clients. Bug...

The vulnerability of the Poppler library for displaying PDF files, which allows a hacker to trigger a service failure

The vulnerability of the Poppler library for displaying PDF files is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures...

CVE-2020-11687

In JetBrains TeamCity before 2019.2.2, password values were shown in an unmasked format on several pages...

Description of the cumulative update for Office Communications Server 2007 R2, Mediation Server: November 2010

Describes the Office Communications Server 2007 R2, Mediation Server issue that is fixed in the Office Communications Server 2007 R2, Mediation Server update package that is dated November 2010.SummaryThis article describes the Microsoft Office Communications Server 2007 R2, Mediation Server issu...

February 10, 2015 update for PowerPoint Viewer 2010 (KB2880522)

February 10, 2015 update for PowerPoint Viewer 2010 KB2880522 This article describes update KB2880522 for Microsoft PowerPoint Viewer 2010 that was released on February 10, 2015. This update has a prerequisite. Improvements and Fixes Fixes an issue in which the Align Selected Objects andAlign to...

Moderate: Red Hat Security Advisory: tigervnc security update

An update for tigervnc is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

Information disclosure

Information disclosure issue occurs as there is no binding between the secure keypad session and the secure display session that allows user to take control of the REE to stop the secure keypad session and read the keypad input. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,...