CVE-2021-25448: Improper Access Control

Improper access control vulnerability in Smart Touch Call prior to version 1.0.0.5 allows arbitrary webpage loading in webview...

Samsung Smart Touch Call security vulnerability

SAMSUNG Smart Touch Call is a smart call application from Samsung South Korea. lets users know immediately that a call is spam, blocks the call, and then lets users report the call. A security vulnerability exists in SAMSUNG Smart Touch Call prior to version 1.0.0.5, which stems from an improper...

KonaWiki2 Unrestricted File Download Execution

The vulnerability of the KonaWiki2 content management system’s web application is related to the unlimited loading of dangerous files. Exploiting this vulnerability allows a malicious actor to download and execute arbitrary files remotely...

Event Banner Plugin Unrestricted File Execution

The vulnerability of the Event Banner plugin for the WordPress content management system is related to the unlimited loading of dangerous files. Exploiting this vulnerability allows a malicious actor to download and execute arbitrary files remotely...

VMware ThinApp DLL Loading Privilege Escalation

The vulnerability of VMware ThinApp’s virtualization and portable application creation tools relates to the insecure loading of DLL libraries. Exploiting this vulnerability can allow attackers to gain increased privileges...

Windows Print Spooler Privilege Escalation

The vulnerability of the Windows Print Spooler in operating systems related to the Windows platform is associated with deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by loading a malicious DLL library remotely...

ColdFusion Unrestricted File Execution

The vulnerability of the ColdFusion software platform is related to the unlimited loading of dangerous files. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

simd:simd_load_fuzzer: Heap-use-after-free in Simd::Base::ImageJpegLoader::FromStream

Detailed Report: https://oss-fuzz.com/testcase?key=6287482038648832 Project: simd Fuzzing Engine: libFuzzer Fuzz Target: simdloadfuzzer Job Type: libfuzzerasansimd Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address: 0x6290027bf80c Crash State:...

CVE-2021-1089

NVIDIA GPU Display Driver for Windows contains a vulnerability in nvidia-smi where an uncontrolled DLL loading path may lead to arbitrary code execution, denial of service, information disclosure, and data tampering...

CVE-2021-1089

NVIDIA GPU Display Driver for Windows contains a vulnerability in nvidia-smi where an uncontrolled DLL loading path may lead to arbitrary code execution, denial of service, information disclosure, and data tampering...

Design/Logic Flaw

NVIDIA GPU Display Driver for Windows contains a vulnerability in nvidia-smi where an uncontrolled DLL loading path may lead to arbitrary code execution, denial of service, information disclosure, and data tampering...

CVE-2021-1089

NVIDIA GPU Display Driver for Windows contains a vulnerability in nvidia-smi where an uncontrolled DLL loading path may lead to arbitrary code execution, denial of service, information disclosure, and data tampering...

CVE-2021-1089

NVIDIA GPU Display Driver for Windows contains a vulnerability in nvidia-smi where an uncontrolled DLL loading path may lead to arbitrary code execution, denial of service, information disclosure, and data tampering...

CVE-2021-1089

CVE-2021-1089 affects NVIDIA GPU Display Driver for Windows, with a vulnerability in nvidia-smi that allows an uncontrolled DLL loading path, potentially enabling local arbitrary code execution, denial of service, information disclosure, or data tampering. NVIDIA’s security bulletin lists Windows...

PT-2021-12389

Name of the Vulnerable Software and Affected Versions Dell SupportAssist for Business PCs versions 2.0 through 2.1.3 Dell SupportAssist for Home PCs versions 2.0 through 3.4 Description The issue is related to an uncontrolled search path vulnerability. A locally authenticated low privileged user...

CVE-2020-5316: Uncontrolled Search Path Element

Dell SupportAssist for Business PCs versions 2.0, 2.0.1, 2.0.2, 2.1, 2.1.1, 2.1.2, 2.1.3 and Dell SupportAssist for Home PCs version 2.0, 2.0.1, 2.0.2, 2.1, 2.1.1, 2.1.2, 2.1.3, 2.2, 2.2.1, 2.2.2, 2.2.3, 3.0, 3.0.1, 3.0.2, 3.1, 3.2, 3.2.1, 3.2.2, 3.3, 3.3.1, 3.3.2, 3.3.3, 3.4 contain an...

PT-2021-3773 · Cockpit +5 · Cockpit +5

Name of the Vulnerable Software and Affected Versions: Cockpit affected versions not specified Description: The issue is related to clickjacking attacks, where a malicious website can render a page from a Cockpit server inside an iframe HTML entry. This could be exploited by a malicious website t...

Security Bulletin: NVIDIA GPU Display Drivers - July 2021

NVIDIA has released a software security update for NVIDIA GPU Display Drivers. This update addresses issues that may lead to information disclosure, data tampering, and denial of service. To protect your system, download and install this software update through the NVIDIA Driver Downloads page or...

kernel/module.c in the Linux kernel before 5.12.14 mishandles Signature Verification aka CID-0c18f29aae7c. Without CONFIG_MODULE_SIG verification that a kernel module is signed for loading via init_module does not occur for a module.sig_enforce=1 command-line argument.

...

CVE-2021-1898

Possible buffer over-read due to incorrect overflow check when loading splash image in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...