Lucene search
+L

11970 matches found

OSV
OSV
added 2017/10/10 8:29 p.m.7 views

CVE-2017-11048

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in a display driver function, a Use After Free condition can occur...

7.8CVSS5.7AI score0.00169EPSS
SaveExploits0References2
Prion
Prion
added 2017/10/10 8:29 p.m.23 views

Design/Logic Flaw

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, an array out-of-bounds access can potentially occur in a display driver...

4.6CVSS7AI score0.00151EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2017/10/10 8:29 p.m.23 views

CVE-2017-11048

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in a display driver function, a Use After Free condition can occur...

7.8CVSS7.3AI score0.00169EPSS
SaveExploits0References2
CVE
CVE
added 2017/10/10 8:00 p.m.57 views

CVE-2017-9706

Technical details about CVE-2017-9706 are not provided in the supplied documents. The initial description only notes a potential array out-of-bounds in a display driver; no vendor/product/version specifics or fixes are included. Monitor for updates.

7.8CVSS7.1AI score0.00151EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2017/10/10 8:00 p.m.32 views

CVE-2017-9706

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, an array out-of-bounds access can potentially occur in a display driver...

7.3AI score0.00151EPSS
SaveExploits0References2
CVE
CVE
added 2017/10/10 8:00 p.m.55 views

CVE-2017-11048

CVE-2017-11048 affects Qualcomm Video driver in Android on MSM CAF platforms using the Linux kernel. The vulnerability stems from a Use-After-Free in a display driver function, leading to Elevation of Privilege (EoP) on affected devices. Connected sources corroborate the issue as a Qualcomm video...

7.8CVSS7.2AI score0.00169EPSS
SaveExploits0References2Affected Software1
Prion
Prion
added 2017/10/10 1:29 p.m.29 views

Hardcoded credentials

The Epson "EasyMP" software is designed to remotely stream a users computer to supporting projectors.These devices are authenticated using a unique 4-digit code, displayed on-screen - ensuring only those who can view it are streaming.In addition to the password, each projector has a hardcoded...

5CVSS9.3AI score0.0346EPSS
SaveExploits0References1Affected Software1
Talos Blog
Talos Blog
added 2017/10/10 1:25 p.m.124 views

Microsoft Patch Tuesday - October 2017

Microsoft has released its monthly set of security advisories for vulnerabilities that have been identified and addressed in various products. This month's advisory release addresses 63 new vulnerabilities with 28 of them rated critical and 35 rated important. These vulnerabilities impact Graphic...

10CVSS1.9AI score0.81158EPSS
SaveExploits47
Microsoft KB
Microsoft KB
added 2017/10/10 7:00 a.m.127 views

Description of the security update for Office Web Apps Server 2013: October 10, 2017

None None...

9.3CVSS6.8AI score0.81158EPSS
SaveExploits3
CNVD
CNVD
added 2017/10/10 12:00 a.m.11 views

Red Hat FreeIPA Design Vulnerability

Red Hat FreeIPA is an integrated security information management solution from Red Hat, Inc. The solution provides an easy-to-manage identity, policy and audit IPA suite for Linux and Unix computer networks. A security vulnerability exists in Red Hat FreeIPA. An attacker could exploit this...

7.5CVSS7.2AI score0.01065EPSS
SaveExploits1References1
Citrix
Citrix
added 2017/10/09 12:00 a.m.15 views

Unidesk - New desktops show black screens in VMware Horizon View

When connecting to a new desktop from the Horizon View client or a PCoIP Thin/ZeroClient, one or more monitors shows nothing but a black screen...

7.1AI score
SaveExploits0
Mozilla
Mozilla
added 2017/10/09 12:00 a.m.542 views

Security vulnerabilities fixed in Thunderbird 52.4 — Mozilla

A use-after-free vulnerability can occur in the Fetch API when the worker or the associated window are freed when still in use, resulting in a potentially exploitable crash. A use-after-free vulnerability can occur when manipulating arrays of Accessible Rich Internet Applications ARIA elements...

9.8CVSS0.3AI score0.03595EPSS
SaveExploits2References10Affected Software1
RedhatCVE
RedhatCVE
added 2017/10/06 5:49 p.m.35 views

CVE-2017-14929

In Poppler 0.59.0, memory corruption occurs in a call to Object::dictLookup in Object.h after a repeating series of Gfx::display, Gfx::go, Gfx::execOp, Gfx::opFill, Gfx::doPatternFill, Gfx::doTilingPatternFill and Gfx::drawForm calls aka a Gfx.cc infinite loop, a different vulnerability than...

7.5CVSS2.5AI score0.01542EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2017/10/06 10:19 a.m.31 views

CVE-2017-14519

In Poppler 0.59.0, memory corruption occurs in a call to Object::streamGetChar in Object.h after a repeating series of Gfx::display, Gfx::go, Gfx::execOp, Gfx::opShowText, and Gfx::doShowText calls aka a Gfx.cc infinite loop...

7.5CVSS2.7AI score0.01542EPSS
SaveExploits1References1
Fedora
Fedora
added 2017/10/04 2:26 p.m.39 views

[SECURITY] Fedora 27 Update: ImageMagick-6.9.9.15-1.fc27

ImageMagick is an image display and manipulation tool for the X Window System. ImageMagick can read and write JPEG, TIFF, PNM, GIF, and Photo CD image formats. It can resize, rotate, sharpen, color reduce, or add special effects to an image, and when finished you can either save the completed wor...

6.5CVSS0.8AI score0.0207EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2017/10/04 12:00 a.m.54 views

Debian DSA-3991-1 : qemu - security update

Multiple vulnerabilities were found in qemu, a fast processor emulator : - CVE-2017-9375 Denial of service via memory leak in USB XHCI emulation. - CVE-2017-12809 Denial of service in the CDROM device drive emulation. - CVE-2017-13672 Denial of service in VGA display emulation. - CVE-2017-13711...

8.8CVSS7.1AI score0.03841EPSS
SaveExploits0References12
n0where
n0where
added 2017/10/02 1:24 a.m.33 views

Open Source Invalid Traffic Detection: Nameles

Nameles provides an easy to deploy, scalable IVT detection and filtering solution that is proven to detect at a high level of accuracy ad fraud and other types of invalid traffic such as web scraping. Comprehensive Detection Detects display, video and in-app based ad fraud, web scraping and other...

6.7AI score
SaveExploits0References3
OpenVAS
OpenVAS
added 2017/10/02 12:00 a.m.45 views

Debian: Security Advisory (DSA-3991-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS7.3AI score0.03841EPSS
SaveExploits0References3
Fedora
Fedora
added 2017/09/30 7:25 a.m.24 views

[SECURITY] Fedora 27 Update: lightdm-1.24.0-1.fc27

Lightdm is a display manager that: Is cross-desktop - supports different desktops Supports different display technologies Is lightweight - low memory usage and fast performance...

1.1AI score
SaveExploits0
Prion
Prion
added 2017/09/30 1:29 a.m.25 views

Memory corruption

In Poppler 0.59.0, memory corruption occurs in a call to Object::dictLookup in Object.h after a repeating series of Gfx::display, Gfx::go, Gfx::execOp, Gfx::opFill, Gfx::doPatternFill, Gfx::doTilingPatternFill and Gfx::drawForm calls aka a Gfx.cc infinite loop, a different vulnerability than...

5CVSS7.5AI score0.01542EPSS
SaveExploits1References2Affected Software1
Rows per page
Query Builder