Code injection

Cybozu Office 10.0.0 to 10.7.0 allow remote attackers to display an image located in an external server via unspecified vectors...

CVE-2018-0526

CVE-2018-0526 affects Cybozu Office 10.0.0–10.7.0. The vulnerability in the Message component allows remote attackers to cause information disclosure by causing an external image to be displayed, effectively exposing an image located on an external server via unspecified vectors. Impact, per the ...

CVE-2018-0526

Cybozu Office 10.0.0 to 10.7.0 allow remote attackers to display an image located in an external server via unspecified vectors...

PT-2018-16234 · Pixar · Pixar Renderman It Display Service

Name of the Vulnerable Software and Affected Versions: Pixar Renderman IT Display Service version 21.6 Description: A denial-of-service issue exists due to improper validation of network packets. The application listens for connections on port 4001 after being opened by a user. An attacker can...

Security Bulletin: Vulnerability in the OpenSSL Library Affects IBM Tealeaf Customer Experience (CVE-2017-3735)

Summary A Vulnerability in the OpenSSL library used by the IBM Tealeaf Customer Experience could permit a a remote attacker to obtain sensitive information. Vulnerability Details CVEID: CVE-2017-3735 DESCRIPTION: OpenSSL could allow a remote attacker to obtain sensitive information, caused by an...

Security Bulletin: IBM Datacap Taskmaster Capture ActiveX Vulnerability (CVE-2014-0879)

Summary Taskmaster Web uses ActiveX controls to perform scanning and to display images in the browser on the client computer. One of the controls was found vulnerable to crafted hacking. Vulnerability Details CVEID: CVE-2014-0879 DESCRIPTION: Security vulnerability with Datacap ActiveX installed ...

Security Bulletin: IBM WebSphere MQ Improper access control for some display commands in local runmqsc (CVE-2016-0259)

Summary Various display commands via local runmqsc return data for non-privileged users where they lack appropriate +dsp authority. The problem does not affect remotely connected runmqsc. Vulnerability Details CVEID: CVE-2016-0259 DESCRIPTION: IBM WebSphere MQ could allow a local user with...

Pixar Renderman IT Display Service 0x69 Command Denial-of-Service Vulnerability

Summary A denial-of-service vulnerability exists in the Pixar Renderman IT Display Service 21.6. The vulnerability is present in the parsing of a network packet without proper validation of the packet. The data read-in is not validated, and its use can lead to a null pointer dereference. The IT...

Google Android Qualcomm Snapdragon display engine privilege access control vulnerability

Android on Google Pixel and Nexus is a Linux-based open source operating system for Google Pixel and Nexus smartphones developed by Google Inc. and the Open Handset Alliance OHA.The Qualcomm Snapdragon The Qualcomm Snapdragon display engine is one of the display engine components. A privilege...

Pixar Renderman IT Display Service 0x67 Command Denial of Service Vulnerability

Summary A denial-of-service vulnerability exists in the Pixar Renderman IT Display Service 21.6. The vulnerability is present in the parsing of a network packet without proper validation of the packet. The data read by the application is not validated, and its use can lead to a null pointer...

CVE-2018-5142

If Media Capture and Streams API permission is requested from documents with "data:" or "blob:" URLs, the permission notifications do not properly display the originating domain. The notification states "Unknown protocol" as the requestee, leading to user confusion about which site is asking for...

DEBIAN-CVE-2017-7829

It is possible to spoof the sender's email address and display an arbitrary sender address to the email recipient. The real sender's address is not displayed if preceded by a null character in the display string. This vulnerability affects Thunderbird 52.5.2...

CVE-2017-7838

Punycode format text will be displayed for entire qualified international domain names in some instances when a sub-domain triggers the punycode display instead of the primary domain being displayed in native script and the sub-domain only displaying as punycode. This could be used for limited...

Spoofing

It is possible to spoof the sender's email address and display an arbitrary sender address to the email recipient. The real sender's address is not displayed if preceded by a null character in the display string. This vulnerability affects Thunderbird 52.5.2...

CVE-2017-7829

It is possible to spoof the sender's email address and display an arbitrary sender address to the email recipient. The real sender's address is not displayed if preceded by a null character in the display string. This vulnerability affects Thunderbird 52.5.2...

CVE-2018-5117

If right-to-left text is used in the addressbar with left-to-right alignment, it is possible in some circumstances to scroll this text to spoof the displayed URL. This issue could result in the wrong URL being displayed as a location, which can mislead users to believe they are on a different sit...

CVE-2017-5451

A mechanism to spoof the addressbar through the user interaction on the addressbar and the "onblur" event. The event could be used by script to affect text display to make the loaded site appear to be different from the one actually loaded within the addressbar. This vulnerability affects...

CVE-2018-5845

A race condition in drmatomicnonblockingcommit in the display driver can potentially lead to a Use After Free scenario in all Android releases from CAF Android for MSM, Firefox OS for MSM, QRD Android using the Linux Kernel...

Race condition

A race condition in drmatomicnonblockingcommit in the display driver can potentially lead to a Use After Free scenario in all Android releases from CAF Android for MSM, Firefox OS for MSM, QRD Android using the Linux Kernel...

CVE-2018-5845

A race condition in drmatomicnonblockingcommit in the display driver can potentially lead to a Use After Free scenario in all Android releases from CAF Android for MSM, Firefox OS for MSM, QRD Android using the Linux Kernel...