3228 matches found
GSD-2023-1002095 drm/amd/display: Calculate output_color_space after pixel encoding adjustment
drm/amd/display: Calculate outputcolorspace after pixel encoding adjustment This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.90 by commit...
GSD-2023-1001956 drm/amd/display: Calculate output_color_space after pixel encoding adjustment
drm/amd/display: Calculate outputcolorspace after pixel encoding adjustment This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.8 by commit...
Pixel Update Bulletin—February 2023Stay organized with collectionsSave and categorize content based on your preferences.
The Pixel Update Bulletin contains details of security vulnerabilities and functional improvements affecting supported Pixel devices Google devices. For Google devices, security patch levels of 2023-02-05 or later address all issues in this bulletin and all issues in the February 2023 Android...
GSD-2023-1001662 drm/amd/display: Calculate output_color_space after pixel encoding adjustment
drm/amd/display: Calculate outputcolorspace after pixel encoding adjustment This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.8 by commit...
PT-2023-34738 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.8 Description: The issue is related to the calculation of output color space after pixel encoding adjustment in the drm/amd/display component. The actual impact and attack plausibility have not yet been...
WordPress Advanced Social Pixel Plugin <= 2.1.1 is vulnerable to Cross Site Scripting (XSS)
Software Advanced Social Pixel Type Plugin Vulnerable versions = 2.1.1 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-24381 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID b38879873846 Credits Rio Darmawan Requir...
Advanced Social Pixel <= 2.1.1 - Admin+ Stored XSS
The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...
OESA-2023-1024 python-pillow security update
Pillow is the friendly PIL fork by Alex Clark and Contributors. PIL is the Python Imaging Library by Fredrik Lundh and Contributors. As of 2019, Pillow development is supported by Tidelift. Security Fixes: Pillow before 9.3.0 allows denial of service via SAMPLESPERPIXEL.CVE-2022-45199...
Google Pixel Resource Management Error Vulnerability (CNVD-2023-00002)
Google Pixel is a smartphone from the American company Google Google. Google Pixel suffers from a resource management error vulnerability. A remote attacker can exploit this vulnerability to cause a denial of service disk consumption and large number of notifications with the help of a series of...
Google Pixel Buffer Overflow Vulnerability (CNVD-2023-01498)
Google Pixel is a smartphone from Google, Inc. An attacker could exploit this vulnerability to remotely execute arbitrary code...
Google Pixel Buffer Overflow Vulnerability (CNVD-2023-01491)
Google Pixel is a smartphone from the American company Google Google. Google Pixel suffers from a buffer error vulnerability. A remote attacker can exploit the vulnerability to obtain sensitive information...
Google Pixel Buffer Overflow Vulnerability (CNVD-2023-01499)
Google Pixel is a smartphone from Google, Inc. An attacker could exploit this vulnerability to remotely execute arbitrary code...
Google Pixel buffer overflow vulnerability (CNVD-2023-01492)
Google Pixel is a smartphone from Google, Inc. An attacker could use this vulnerability to remotely execute arbitrary code...
Google Pixel Buffer Overflow Vulnerability (CNVD-2023-01490)
Google Pixel is a smartphone from the American company Google Google. Google Pixel suffers from a buffer overflow vulnerability. A remote attacker can exploit the vulnerability to execute arbitrary code...
Google Pixel buffer overflow vulnerability (CNVD-2023-01493)
The Google Pixel is a smartphone from Google, Inc. The vulnerability can be exploited by attackers to execute unauthorized commands, which can gain system privileges and then perform various illegal operations...
Google Pixel Buffer Overflow Vulnerability (CNVD-2023-01494)
Google Pixel is a smartphone from Google, Inc. An attacker could exploit this vulnerability to remotely execute arbitrary code...
CVE-2022-42530
In Pixel firmware, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...
CVE-2022-42532
In Pixel firmware, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...
CVE-2022-20607
In the Pixel cellular firmware, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with LTE authentication needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-238914868References...
CVE-2022-20608
In Pixel cellular firmware, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...