QEMU: cirrus: OOB access when updating VGA display

Quick Emulator aka QEMU, when built with the Cirrus CLGD 54xx VGA Emulator support, allows local guest OS privileged users to cause a denial of service out-of-bounds access and QEMU process crash by leveraging incorrect region calculation when updating VGA display...

Design/Logic Flaw

Certain Supermicro X11S, X10, X9, X8SI, K1SP, C9X299, C7, B1, A2, and A1 products have a misconfigured Descriptor Region, allowing OS programs to modify firmware...

CVE-2018-13787

CVE-2018-13787 affects certain Supermicro X11S, X10, X9, X8SI, K1SP, C9X299, C7, B1, A2, and A1 products. The issue is a misconfigured Descriptor Region that could allow OS programs to modify firmware. IBM Power Systems advisories (POWER8/POWER9) reference addressing this CVE via firmware updates...

CVE-2018-13787

Certain Supermicro X11S, X10, X9, X8SI, K1SP, C9X299, C7, B1, A2, and A1 products have a misconfigured Descriptor Region, allowing OS programs to modify firmware...

PT-2018-12185

Name of the Vulnerable Software and Affected Versions Supermicro X11S, X10, X9, X8SI, K1SP, C9X299, C7, B1, A2, and A1 products affected versions not specified Description The issue is related to a misconfigured Descriptor Region in certain Supermicro products, which allows operating system...

CVE-2018-13787: Undefined Security Weakness

Certain Supermicro X11S, X10, X9, X8SI, K1SP, C9X299, C7, B1, A2, and A1 products have a misconfigured Descriptor Region, allowing OS programs to modify firmware...

Out-of-bounds

A potential memory corruption and crash when using Skia content when drawing content outside of the bounds of a clipping region. This vulnerability affects Thunderbird 52.1, Firefox ESR 52.1, and Firefox 53...

CVE-2017-5467

A potential memory corruption and crash when using Skia content when drawing content outside of the bounds of a clipping region. This vulnerability affects Thunderbird 52.1, Firefox ESR 52.1, and Firefox 53...

CVE-2017-5467

A potential memory corruption and crash when using Skia content when drawing content outside of the bounds of a clipping region. This vulnerability affects Thunderbird 52.1, Firefox ESR 52.1, and Firefox 53...

Out-of-bounds

An issue was discovered in libtskbase.a in The Sleuth Kit TSK from release 4.0.2 through to 4.6.1. An out-of-bounds read of a memory region was found in the function tskUTF16toUTF8 in tsk/base/tskunicode.c which could be leveraged by an attacker to disclose information or manipulated to read from...

CVE-2018-11740

An issue was discovered in libtskbase.a in The Sleuth Kit TSK from release 4.0.2 through to 4.6.1. An out-of-bounds read of a memory region was found in the function tskUTF16toUTF8 in tsk/base/tskunicode.c which could be leveraged by an attacker to disclose information or manipulated to read from...

Out-of-bounds

An issue was discovered in libtskimg.a in The Sleuth Kit TSK from release 4.0.2 through to 4.6.1. An out-of-bounds read of a memory region was found in the function rawread in tsk/img/raw.c which could be leveraged by an attacker to disclose information or manipulated to read from unmapped memory...

CVE-2018-11740

An issue was discovered in libtskbase.a in The Sleuth Kit TSK from release 4.0.2 through to 4.6.1. An out-of-bounds read of a memory region was found in the function tskUTF16toUTF8 in tsk/base/tskunicode.c which could be leveraged by an attacker to disclose information or manipulated to read from...

Out-of-bounds

An issue was discovered in LibSass through 3.5.4. An out-of-bounds read of a memory region was found in the function Sass::Prelexer::exactly which could be leveraged by an attacker to disclose information or manipulated to read from unmapped memory causing a denial of service...

CVE-2018-11471

Cockpit 0.5.5 has XSS via a collection, form, or region...

Information disclosure

Cockpit 0.5.5 has XSS via a collection, form, or region...

CVE-2018-11471

Cockpit 0.5.5 has XSS via a collection, form, or region...

CVE-2018-11471

Cockpit 0.5.5 has XSS via a collection, form, or region...

CVE-2018-11471

CVE-2018-11471 affects Cockpit 0.5.5, with a cross-site scripting (XSS) vulnerability exposed via a collection, form, or region. The available sources explicitly describe an XSS impact but do not provide additional exploit details, affected versions beyond 0.5.5, or concrete root-cause informatio...

PT-2018-10590

Name of the Vulnerable Software and Affected Versions Cockpit version 0.5.5 Description The issue is related to a Cross-Site Scripting XSS problem. It occurs via a collection, form, or region. Recommendations For Cockpit version 0.5.5, update to a version that fixes this issue. At the moment, the...