310 matches found
The vulnerability of the Intel Graphics Driver lies in a pointer swapping error, which allows attackers to escalate their privileges.
The vulnerability of the Intel Graphics Driver lies in a pointer assignment error. Exploiting this vulnerability can allow an attacker to gain increased privileges...
openSUSE Security Update : spice-vdagent (openSUSE-2018-144)
This update for spice-vdagent provides the following fixes : This security issue was fixed : - CVE-2017-15108: Properly escape save directory that is passed to the shell to prevent local attacker with access to the session the agent runs from injecting arbitrary commands to be executed bsc1070724...
SUSE-SU-2018:0372-1 security update for spice-vdagent
This update for spice-vdagent provides the following fixes: This security issue was fixed: - CVE-2017-15108: Properly escape save directory that is passed to the shell to prevent local attacker with access to the session the agent runs from injecting arbitrary commands to be executed bsc1070724...
The vulnerability of the system call in the TrustZone of the Android CAF-release operating system allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the TrustZone-based system call in the Android CAF-release operating system is related to pointer swapping errors. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...
The vulnerability of the system call in the TrustZone of the Android CAF-release operating system allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the TrustZone-based system call in the Android CAF-release operating system is related to pointer swapping errors. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...
The vulnerability of the LTE component of the Android CAF build’s operating system allows a hacker to use pointer offsets beyond their permissible limits.
The vulnerability of the LTE component of the Android CAF build is related to pointer swapping errors. Exploiting this vulnerability allows a remote attacker to use the offset of the pointer beyond its permissible values...
SUSE SLES11 Security Update : xorg-x11-server (SUSE-SU-2017:1741-1)
This update for xorg-x11-server fixes the following issues: Security issues : - CVE-2017-2624: Prevent timing attack against MIT cookie. bsc1025029, CVE-2017-2624 Non security issues : - Use arc4random to generate cookies. bsc1025084 - XDrawArc performance improvement bsc1019649 - Fix byte swappi...
The vulnerability of WideVine DRM on the Android operating system allows a violator to gain access to local files.
The vulnerability of WideVine DRM on the Android operating system is related to pointer swapping errors. Exploiting this vulnerability can allow a malicious actor to gain access to local files remotely...
The vulnerability of the Mac OS X operating system, which allows a hacker to trigger a service failure
The vulnerability of the Audio component in the Mac OS X operating system is related to pointer swapping errors. Exploiting this vulnerability can allow an attacker, operating locally, to trigger a service failure pointer swapping of the zero pointer using uncertain vectors...
NUUO NVRmini 2 3.0.8 - Remote Root Exploit
Exploit for php platform in category web applications !/usr/bin/env python NUUO Remote Root Exploit Vendor: NUUO Inc. Product web page: http://www.nuuo.com Affected version: =3.0.8 Summary: NUUO NVRmini 2 is the lightweight, portable NVR solution with NAS functionality. Setup is simple and easy,...
NUUO NVRmini 2 3.0.8 - Local File Disclosure
NUUO NVRmini 2 3.0.8 - Local File Disclosure NUUO Local File Disclosure Vulnerability Vendor: NUUO Inc. Product web page: http://www.nuuo.com Affected version: =3.0.8 NE-4160, NT-4040 Summary: NUUO NVRmini 2 is the lightweight, portable NVR solution with NAS functionality. Setup is simple and...
The vulnerability of Xen hypervisors, which allows a malicious actor to trigger a service failure
The vulnerability of the VMX component of the Xen hypervisor is related to pointer swapping errors. Exploiting this vulnerability can allow an attacker, operating locally, to cause a service failure by engaging in actions related to the RIP protocol...
SUSE SLED12 / SLES12 Security Update : xscreensaver (SUSE-SU-2015:2053-1)
The xscreensaver package was updated to fix the following security issue : - CVE-2015-8025: Fixed a crash when hot-swapping monitors while locked bsc952062. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has...
CVE-2015-8025
driver/subprocs.c in XScreenSaver before 5.34 does not properly perform an internal consistency check, which allows physically proximate attackers to bypass the lock screen by hot swapping monitors...
Code injection
driver/subprocs.c in XScreenSaver before 5.34 does not properly perform an internal consistency check, which allows physically proximate attackers to bypass the lock screen by hot swapping monitors...
CVE-2015-8025
CVE-2015-8025 affects the xscreensaver component in XScreenSaver prior to 5.34. The issue is a faulty internal consistency check that can let someone with physical access bypass the lock screen by hot-swapping monitors, exploiting a local access scenario. Public advisories describe the impact as ...
CVE-2015-8025
driver/subprocs.c in XScreenSaver before 5.34 does not properly perform an internal consistency check, which allows physically proximate attackers to bypass the lock screen by hot swapping monitors...
Debian DLA-338-1 : xscreensaver security update
xscreensaver, a screensaver daemon and frontend for X11 was vulnerable to crashing when hot-swapping monitors. For Debian 6 Squeeze, this issue has been fixed in xscreensaver version 5.11-1+deb6u11. NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA...
[SECURITY] [DLA 338-1] xscreensaver security update
Package : xscreensaver Version : 5.11-1+deb6u11 CVE ID : CVE-2015-8025 Debian Bug : 802914 xscreensaver, a screensaver daemon and frontend for X11 was vulnerable to crashing when hot-swapping monitors. For Debian 6 Squeeze, this issue has been fixed in xscreensaver version 5.11-1+deb6u11. Regards...