Command injection

gnome-shell 3.22 through 3.24.1 mishandles extensions that fail to reload, which can lead to leaving extensions enabled in the lock screen. With these extensions, a bystander could launch applications but not interact with them, see information from the extensions e.g., what applications you have...

UBUNTU-CVE-2017-8288

gnome-shell 3.22 through 3.24.1 mishandles extensions that fail to reload, which can lead to leaving extensions enabled in the lock screen. With these extensions, a bystander could launch applications but not interact with them, see information from the extensions e.g., what applications you have...

CVE-2017-8288

gnome-shell 3.22 through 3.24.1 mishandles extensions that fail to reload, which can lead to leaving extensions enabled in the lock screen. With these extensions, a bystander could launch applications but not interact with them, see information from the extensions e.g., what applications you have...

DEBIAN-CVE-2017-8288

gnome-shell 3.22 through 3.24.1 mishandles extensions that fail to reload, which can lead to leaving extensions enabled in the lock screen. With these extensions, a bystander could launch applications but not interact with them, see information from the extensions e.g., what applications you have...

CVE-2017-8288

gnome-shell 3.22 through 3.24.1 mishandles extensions that fail to reload, which can lead to leaving extensions enabled in the lock screen. With these extensions, a bystander could launch applications but not interact with them, see information from the extensions e.g., what applications you have...

PT-2017-18261 · Gnome +3 · Gnome Shell +3

Name of the Vulnerable Software and Affected Versions: gnome-shell versions 3.22 through 3.24.1 Description: The issue arises from the mishandling of extensions that fail to reload, potentially leaving them enabled on the lock screen. This could allow a bystander to launch applications, although...

CVE-2017-8288

GNOME Shell vulnerability CVE-2017-8288 affects gnome-shell versions 3.22–3.24.1 due to missing exception handling in js/ui/extensionSystem.js, leaving enabled extensions on the lock screen. An attacker could launch applications, view extension-derived info, or execute arbitrary commands via exte...

CVE-2017-8288

gnome-shell 3.22 through 3.24.1 mishandles extensions that fail to reload, which can lead to leaving extensions enabled in the lock screen. With these extensions, a bystander could launch applications but not interact with them, see information from the extensions e.g., what applications you have...

April 25, 2017—KB4016240 (OS Build 15063.250)

None None...

The vulnerability of the iOS operating system allows a hacker to obtain an Apple ID identifier.

The vulnerability of the iOS operating system’s Accounts component is related to the lack of protection for service data. Exploiting this vulnerability could allow a local attacker to obtain an Apple ID, by taking advantage of authentication vulnerabilities during a quick screen lock in iCloud...

S2-045 Remote Code Execution Vulnerability in Wando ezOffice Login Jump Screen

Manto ezOffice is a comprehensive information base application platform. Wando ezOffice uses Apache middleware as the framework, the login jump interface exists S2-045 remote code execution vulnerability. This vulnerability allows an attacker to remotely execute commands and gain server privilege...

[SECURITY] Fedora 26 Update: xorgxrdp-0.2.1-1.fc26

xorgxrdp is a set of X11 modules that make Xorg act as a backend for xrdp. Xorg with xorgxrdp is the most advanced xrdp backend with support for screen resizing and multiple monitors...

The vulnerability of the iOS operating system, which allows a hacker to read text messages on the lock screen

The vulnerability of the Siri component of the iOS operating system is related to the lack of protection for service data. Exploiting this vulnerability allows a local attacker to read text messages on the lock screen using uncertain vectors...

[SECURITY] Fedora 26 Update: ghostscript-9.20-8.fc26

Ghostscript is a set of software that provides a PostScript interpreter, a set of C procedures the Ghostscript library, which implements the graphics capabilities in the PostScript language and an interpreter for Portable Document Format PDF files. Ghostscript translates PostScript code into many...

[SECURITY] Fedora 25 Update: ghostscript-9.20-7.fc25

Ghostscript is a set of software that provides a PostScript interpreter, a set of C procedures the Ghostscript library, which implements the graphics capabilities in the PostScript language and an interpreter for Portable Document Format PDF files. Ghostscript translates PostScript code into many...

Huawei FusionAccess Input Validation Vulnerability

Huawei FusionAccess is a desktop management system for Huawei's FusionCloud desktop cloud solution from Huawei China. The system distributes, maintains, and recycles virtual desktops for users through a graphical Portal interface. An input validation vulnerability exists in Huawei FusionAccess...

cURL Information Disclosure Vulnerability

cURL is a command line file transfer tool that supports FTP, FTPS, HTTP, HTTPS, GOPHER, TELNET, DICT, FILE and LDAP. An information disclosure vulnerability exists in the ourWriteOut function of toolwriteout.c in cURL 7.53.1, where an attacker can obtain sensitive information by reading the...

CVE-2017-7407

The ourWriteOut function in toolwriteout.c in curl 7.53.1 might allow physically proximate attackers to obtain sensitive information from process memory in opportunistic circumstances by reading a workstation screen during use of a --write-out argument ending in a '%' character, which leads to a...

DEBIAN-CVE-2017-7407

The ourWriteOut function in toolwriteout.c in curl 7.53.1 might allow physically proximate attackers to obtain sensitive information from process memory in opportunistic circumstances by reading a workstation screen during use of a --write-out argument ending in a '%' character, which leads to a...

CVE-2017-7407

The ourWriteOut function in toolwriteout.c in curl 7.53.1 might allow physically proximate attackers to obtain sensitive information from process memory in opportunistic circumstances by reading a workstation screen during use of a --write-out argument ending in a '%' character, which leads to a...