Code injection

Vulnerability in the Oracle Email Center product of Oracle E-Business Suite component: Message Display. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Ema...

CVE-2015-5466

Silicon Integrated Systems XGI WindowsXP Display Manager aka XGI VGA Driver Manager and VGA Display Manager 6.14.10.1090 allows local users to gain privileges via a crafted 0x96002404 IOCTL call...

Code injection

Silicon Integrated Systems XGI WindowsXP Display Manager aka XGI VGA Driver Manager and VGA Display Manager 6.14.10.1090 allows local users to gain privileges via a crafted 0x96002404 IOCTL call...

CVE-2015-5466

CVE-2015-5466 affects Silicon Integrated Systems’ XGI VGA Display Manager (XGI VGA Display Manager) version 6.14.10.1090 on Windows XP SP3. A vulnerability in the xrvkp module allows an attacker to perform an arbitrary write (write-what-where) via IOCTL 0x96002404, enabling privilege escalation b...

The vulnerability of the DxgkDdiEscape function in the Display Driver Graphics Processor drivers of NVIDIA GeForce, Quadro, and Tesla allows an attacker to disclose protected information or cause system failures.

The vulnerability of the DxgkDdiEscape function in the Display Driver Graphics Processor NVIDIA GeForce, Quadro, and Tesla driver involves resolution processing errors. Exploiting this vulnerability can allow attackers to disclose sensitive information or cause system failures...

The vulnerability of the `clock_source_create()` function (/gpu /drm/amd/display/dc) in the Linux kernel allows a malicious actor to cause a service failure.

The vulnerability of the clocksourcecreate function /gpu /drm/amd/display/dc in the Linux kernel is related to a memory leak. Exploiting this vulnerability could allow an attacker to cause service interruptions remotely...

The vulnerability of the DxgkDdiEscape function in the Display Driver graphics processor drivers of NVIDIA GeForce, Quadro, and Tesla allows a hacker to cause a system failure.

The vulnerability of the DxgkDdiEscape function in the Display Driver Graphics Processor NVIDIA GeForce, Quadro, and Tesla driver exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause system failures...

Vulnerability of the create_resource_pool() function (drivers/gpu/drm/amd/display/dc) in Linux kernel, allowing a hacker to trigger a service failure

The vulnerability of the createresourcepool function drivers/gpu/drm/amd/display/dc in the Linux operating system is related to a memory leak. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

LTSP LDM Elevation of Privilege Vulnerability

LTSP is a well-known Linux Terminal Server Project program that adds thin client support to Linux servers. An elevation of privilege vulnerability exists in LTSP LDM, which can be exploited by an attacker with certain privileges to gain privileges by performing a symbolic link attack on files wit...

Debian DSA-4601-1 : ldm - security update

It was discovered that a hook script of ldm, the display manager for the Linux Terminal Server Project, incorrectly parsed responses from an SSH server, which could result in local root privilege escalation. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...

UBUNTU-CVE-2019-20373

LTSP LDM through 2.18.06 allows fat-client root access because the LDMUSERNAME variable may have an empty value if the user's shell lacks support for Bourne shell syntax. This is related to a run-x-session script...

OPENSUSE-SU-2020:0003-1 Security update for MozillaThunderbird

This update for MozillaThunderbird fixes the following issues: Mozilla Thunderbird was updated to 68.3esr MFSA 2019-38 bsc1158328 Security issues fixed: - CVE-2019-17008: Fixed a use-after-free in worker destruction bmo1546331 - CVE-2019-13722: Fixed a stack corruption due to incorrect number of...

Ubuntu 16.04 LTS / 18.04 LTS : Linux kernel vulnerabilities (USN-4227-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4227-1 advisory. It was discovered that a heap-based buffer overflow existed in the Marvell WiFi-Ex Driver for the Linux kernel. A physically proximate attack...

CVE-2020-5306

Codoforum 4.8.3 allows XSS via a post using parameters display name, title name, or content...

Cross site scripting

Codoforum 4.8.3 allows XSS via a post using parameters display name, title name, or content...

CVE-2020-5306

Codoforum 4.8.3 allows XSS via a post using parameters display name, title name, or content...

PT-2020-18395 · Codoforum · Codoforum

Name of the Vulnerable Software and Affected Versions: Codoforum version 4.8.3 Description: The issue allows for XSS attacks through posts using parameters such as display name, title name, or content. Recommendations: For Codoforum version 4.8.3, update to a newer version that contains a fix for...

CVE-2019-8793

A consistency issue existed in deciding when to show the screen recording indicator. The issue was resolved with improved state management. This issue is fixed in iOS 13.2 and iPadOS 13.2. A local user may be able to record the screen without a visible screen recording indicator...

CVE-2019-8730

The contents of locked notes sometimes appeared in search results. This issue was addressed with improved data cleanup. This issue is fixed in macOS Catalina 10.15. A local user may be able to view a user’s locked notes...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Mahara 1.4.x before 1.4.3 and 1.5.x before 1.5.2 allow remote attackers to inject arbitrary web script or HTML via vectors related to 1 javascript innerHTML as used when generating login forms, 2 links or 3 resources URLs, and 4 the Display nam...