6070 matches found
Priority Windows SQL注入漏洞
Priority Window Glass Priority Windows is a web application from Priority Window Glass, Inc. A security vulnerability exists in Priority Windows versions prior to 22.1, which originates from the possibility of executing commands via SQL injection using an unspecified method...
OESA-2023-1069 tmux security update
is a terminal multiplexer. It lets you switch easily between several programs in one terminal, detach them they keep running in the background and reattach them to a different terminal. Security Fixes: A null pointer dereference issue was discovered in function windowpanesetevent in window.c in...
CVE-2023-21440
Improper access control vulnerability in WindowManagerService prior to SMR Feb-2023 Release 1 allows attackers to take a screen capture...
SAMSUNG Mobile devices 安全漏洞
SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from South Korea's Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices SMR Feb-2023 Release 1 prior to Release 1, which stems from incorrect access control in...
Important: Red Hat Security Advisory: tigervnc and xorg-x11-server security update
An update for tigervnc and xorg-x11-server is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
xorg-x11-server: DeepCopyPointerClasses use-after-free leads to privilege elevation
A vulnerability was found in X.Org. This issue occurs due to a dangling pointer in DeepCopyPointerClasses that can be exploited by ProcXkbSetDeviceInfo and ProcXkbGetDeviceInfo to read and write into freed memory. This can lead to local privilege elevation on systems where the X server runs...
PT-2023-1496 · X.Org +10 · X.Org Server +10
Name of the Vulnerable Software and Affected Versions: X.Org Server versions prior to 21.1.7 Description: A vulnerability was found in X.Org due to a dangling pointer in DeepCopyPointerClasses that can be exploited by ProcXkbSetDeviceInfo and ProcXkbGetDeviceInfo to read and write into freed...
CVE-2022-42951
An issue was discovered in Couchbase Server 6.5.x and 6.6.x before 6.6.6, 7.x before 7.0.5, and 7.1.x before 7.1.2. During the start-up of a Couchbase Server node, there is a small window of time before the cluster management authentication has started where an attacker can connect to the cluster...
PT-2023-10627 · Ciubotaru · Share-On-Diaspora
Name of the Vulnerable Software and Affected Versions: ciubotaru share-on-diaspora version 0.7.9 Description: A vulnerability was found in the file new window.php, where the manipulation of the title or url argument leads to cross-site scripting. The attack can be initiated remotely...
Couchbase Server 竞争条件问题漏洞
Couchbase Server is a distributed open source NoSQL non-relational database from Couchbase Inc. in the U.S. It mainly supports data querying, full-text search and active global replication. A security vulnerability in Couchbase Server versions 6.5.x prior to 6.6.6 and 6.6.x, 7.x prior to 7.0.5, a...
ROS-20230203-02
Vim text editor vulnerability is related to division by zero error in 'smoothscroll' function at small window size. window size. Exploitation of the vulnerability could allow an attacker acting remotely to cause the program to crash. program crash...
CWA for Mac - Second window created by published application doesn't work
Custom-built applications that act as a launcher for other applications Sporadically, both the seamless application window and the launched application window disappear on Mac clients In Citrix Viewer, the windows show as transparent and are not clickable, Mac menu barwould not work as well...
xorg security update
CentOS Errata and Security Advisory CESA-2023:0046 An update for xorg-x11-server is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...
EulerOS Virtualization 3.0.2.2 : libgcrypt (EulerOS-SA-2023-1266)
According to the versions of the libgcrypt package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Libgcrypt before 1.8.8 and 1.9.x before 1.9.3 mishandles ElGamal encryption because it lacks exponent blinding to address a...
hw: cpu: LFENCE/JMP Mitigation Update for CVE-2017-5715
A flaw was found in hw. The speculative execution window of AMD LFENCE/JMP mitigation MITIGATION V2-2 may be large enough to be exploited on AMD CPUs...
Command Injection
window-control is vulnerable to command injection. The vulnerability exists due to the lack of validation of user input in the sendKeys function of index.js, which allows an attacker to inject and execute malicious commands...
hw: cpu: LFENCE/JMP Mitigation Update for CVE-2017-5715
A flaw was found in hw. The speculative execution window of AMD LFENCE/JMP mitigation MITIGATION V2-2 may be large enough to be exploited on AMD CPUs...
An issue was discovered in Mbed TLS before 2.28.2 and 3.x before 3.3.0. An adversary with access to precise enough information about memory accesses (typically an untrusted operating system attacking a secure enclave) can recover an RSA private key after observing the victim performing a single private-key operation if the window size (MBEDTLS_MPI_WINDOW_SIZE) used for the exponentiation is 3 or smaller.
...