6504 matches found
Nvidia Fixes High-Severity Flaws in GeForce Experience for Gamers
Nvidia, which makes gaming-friendly graphics processing units GPUs, has patched two high-severity flaws in its GeForce Experience software, which could allow denial of service, information disclosure and privilege escalation on impacted systems. GeForce Experience is software for gamers utilizing...
Shopware 5.5.6 Cross Site Scripting
Information: Advisory by Netsparker Name: Multiple Cross-site Scripting Vulnerabilities in Shopware Affected Software: Shopware Affected Versions: 5.5.6 Homepage: https://en.shopware.com/ Vulnerability: Cross-site Scripting Severity: High Status: Fixed CVSS Score 3.0:...
VFront 0.99.5 Reflective Cross Site Scripting
Multiple Reflected Cross-site Scripting Vulnerabilities in VFront 0.99.5 Information -------------------- Advisory by Netsparker Name: Multiple Reflected Cross-site Scripting in VFront 0.99.5 Affected Software: VFront Affected Versions: 0.99.5 Homepage: http://www.vfront.org/ Vulnerability:...
llvm/llvm-opt-fuzzer--x86_64-loop_vectorize: Heap-use-after-free in WriteAsOperandInternal
Detailed report: https://oss-fuzz.com/testcase?key=5692243106594816 Project: llvm Fuzzer: libFuzzerllvmllvm-opt-fuzzer--x8664-loopvectorize Fuzz target binary: llvm-opt-fuzzer--x8664-loopvectorize Job Type: libfuzzerasanllvm Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address:...
mbedtls/fuzz_client: Heap-use-after-free in mbedtls_x509_crt_free
Project: https://github.com/ARMmbed/mbedtls.git https://github.com/catenacyber/mbedtls.git Detailed report: https://oss-fuzz.com/testcase?key=5142637603979264 Project: mbedtls Fuzzer: aflmbedtlsfuzzclient Fuzz target binary: fuzzclient Job Type: aflasanmbedtls Platform Id: linux Crash Type:...
Cisco Service Provider, WebEx Bugs Offer Up Remote Code Execution
Cisco is warning of critical remote code-execution RCE vulnerabilities in the Cisco Prime Infrastructure PI and Evolved Programmable Network EPN Manager, which is used by telcos, mobile carriers, cable companies and ISPs to manage their hardware infrastructure. The vendor also issued estimated...
DLink DWL-2600AP - Multiple OS Command Injection Vulnerability
Exploit for hardware platform in category web applications Document Title: =============== D-Link DWL-2600AP - Authenticated OS Command Injection Restore Configuration Product & Service Introduction: =============================== The D-Link DWL-2600AP has a web interface for configuration. You...
TianoCore EDK II BIOS Vulnerabilities - Lenovo Support US
No description provided...
TianoCore EDK II BIOS Vulnerabilities - Lenovo Support US
Lenovo Security Advisory: LEN-25869 Potential Impact: Privilege escalation, denial of service Severity: High Scope of Impact: Industry-wide CVE Identifier: N/A Summary Description: Lenovo was notified of vulnerabilities in TianoCore EDK II BIOS that could lead to privilege escalation or denial of...
Intel CSME, Server Platform Services, Trusted Execution Engine and Intel Active Management Technology Vulnerabilities - Lenovo Support US
No description provided...
Intel Firmware Vulnerabilities - Lenovo Support US
No description provided...
D-Link DWL-2600AP - Multiple OS Command Injection
Document Title: =============== D-Link DWL-2600AP - Authenticated OS Command Injection Restore Configuration Product & Service Introduction: =============================== The D-Link DWL-2600AP has a web interface for configuration. You can use any web browser you like to login to the D-Link...
D-Link DWL-2600AP - Multiple OS Command Injection
D-Link DWL-2600AP - Multiple OS Command Injection Document Title: =============== D-Link DWL-2600AP - Authenticated OS Command Injection Restore Configuration Product & Service Introduction: =============================== The D-Link DWL-2600AP has a web interface for configuration. You can use a...
Pair of Cisco Bugs, One Unpatched, Affect Millions of Devices
Cisco has disclosed an unpatched, high-severity vulnerability that impacts millions of devices, in the logic that handles access control to one of the hardware components in Cisco’s proprietary Secure Boot implementation. Cisco has also disclosed a similarly widely-impacting high-severity bug tha...
keystone/fuzz_asm_sparc64be: Crash in llvm_ks::SmallVectorBase::grow_pod
Detailed report: https://oss-fuzz.com/testcase?key=5688354168897536 Project: keystone Fuzzer: libFuzzerkeystonefuzzasmsparc64be Fuzz target binary: fuzzasmsparc64be Job Type: libfuzzermsankeystone Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x7180004447e0 Crash State:...
Nvidia Warns Windows Gamers on GPU Driver Flaws
Graphics chipmaker Nvidia has issued three patches for high-severity vulnerabilities in its GPU display driver, which could lead to information disclosure, escalation of privileges and denial of service DoS in impacted Windows gaming devices. Nvidia’s graphics driver for Windows is used in device...
NVIDIA GPU Display Driver Update - Lenovo Support US
No description provided...
NVIDIA GPU Display Driver Update - Lenovo Support US
Lenovo Security Advisory: LEN-27326 Potential Impact: Denial of service, escalation of privileges, or information disclosure. Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE-2019-5675, CVE-2019-5676, CVE-2019-5677 Summary Description: NVIDIA has released a software update to...
D-Link DWL-2600AP Upgrade Firmware Command Injection Vulnerability
D-Link DWL-2600AP suffers from an authentication OS command injection vulnerability via the upgrade firmware functionality. Document Title: =============== D-Link DWL-2600AP - Authenticated OS Command Injection Upgrade Firmware Product & Service Introduction: =============================== The...
D-Link DWL-2600AP Save Configuration Command Injection
Document Title: =============== D-Link DWL-2600AP - Authenticated OS Command Injection Save Configuration Product & Service Introduction: =============================== The D-Link DWL-2600AP has a web interface for configuration. You can use any web browser you like to login to the D-Link...