7008 matches found
Google Android Framework elevation of privilege vulnerability (CNVD-2017-35660)
Android is a set of Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA for short.Framework window manager is one of the window management framework. A power lifting vulnerability exists in Framework window manager in Android 8.0. A remote...
Catalyst Mahara Cross-Site Scripting Vulnerability
Catalyst Mahara is a social networking system from Catalyst IT in New Zealand. The system includes a blog, resume builder, file manager, and more. A cross-site scripting vulnerability exists in Catalyst Mahara versions 1.10 before 1.10.9, 15.04 before 15.04.6, and 15.10 before 15.10.2. A remote...
PT-2017-3217
Name of the Vulnerable Software and Affected Versions Android version 8.0 Description The issue is related to an elevation of privilege vulnerability in the Android framework, specifically in the window manager component. This vulnerability is associated with insufficient access control, which...
X.Org Server: Multiple vulnerabilities
Background The X.Org project provides an open source implementation of the X Window System. Description Multiple vulnerabilities have been discovered in X.Org Server. Please review the referenced CVE identifiers for details. Impact A local attacker could cause a global buffer overflow or a Denial...
PT-2017-14277
Name of the Vulnerable Software and Affected Versions systemd versions 223 through 235 Description The issue allows a remote DNS server to respond with a custom crafted DNS NSEC resource record, triggering an infinite loop in the dns packet read type window function of the 'systemd-resolved'...
kernel: Divide-by-zero in __tcp_select_window
A divide-by-zero vulnerability was found in the tcpselectwindow function in the Linux kernel. This can result in a kernel panic causing a local denial of service...
kernel: Divide-by-zero in __tcp_select_window
A divide-by-zero vulnerability was found in the tcpselectwindow function in the Linux kernel. This can result in a kernel panic causing a local denial of service...
kernel: Divide-by-zero in __tcp_select_window
A divide-by-zero vulnerability was found in the tcpselectwindow function in the Linux kernel. This can result in a kernel panic causing a local denial of service...
[SECURITY] Fedora 26 Update: ImageMagick-6.9.9.19-1.fc26
ImageMagick is an image display and manipulation tool for the X Window System. ImageMagick can read and write JPEG, TIFF, PNM, GIF, and Photo CD image formats. It can resize, rotate, sharpen, color reduce, or add special effects to an image, and when finished you can either save the completed wor...
Kaspersky Anti-Virus Unhandled Windows Messages Denial of Service Vulnerability(CVE-2016-4329)
Summary An local denial of service vulnerability exists in window broadcast message handling functionality of Kaspersky Anti-Virus software. Sending certain unhandled window messages, attacker can cause application termination and in the same way bypass KAV self-protection mechanism. Tested...
UBUNTU-CVE-2017-12176
xorg-x11-server before 1.19.5 was missing extra length validation in ProcEstablishConnection function allowing malicious X client to cause X server to crash or possibly execute arbitrary code...
UBUNTU-CVE-2017-12179
xorg-x11-server before 1.19.5 was vulnerable to integer overflow in SProcXIBarrierReleasePointer functions allowing malicious X client to cause X server to crash or possibly execute arbitrary code...
[SECURITY] Fedora 25 Update: ImageMagick-6.9.9.15-1.fc25
ImageMagick is an image display and manipulation tool for the X Window System. ImageMagick can read and write JPEG, TIFF, PNM, GIF, and Photo CD image formats. It can resize, rotate, sharpen, color reduce, or add special effects to an image, and when finished you can either save the completed wor...
ALPINE-CVE-2017-13721
In X.Org Server aka xserver and xorg-server before 1.19.4, an attacker authenticated to an X server with the X shared memory extension enabled can cause aborts of the X server or replace shared memory segments of other X clients in the same session...
UBUNTU-CVE-2017-13723
In X.Org Server aka xserver and xorg-server before 1.19.4, a local attacker authenticated to the X server could overflow a global buffer, causing crashes of the X server or potentially other problems by injecting large or malformed XKB related atoms and accessing them via xkbcomp...
Open Redirect
forkcms is vulnerable to open redirect attacks. The library uses the target='blank' parameter in its links, granting the linked page partial access to the window.object object, which can then be used to redirect a user to a malicious page...
Stable Channel Updates for Chrome OS
The Stable channel has been updated to 61.0.3163.113 Platform version: 9765.76.0 for most Chrome OS devices . This build contains a number of bug fixes, security updates, and feature enhancements. Systems will be receiving updates over the next several days. Some highlights of these changes are:...
UBUNTU-CVE-2017-7793
A use-after-free vulnerability can occur in the Fetch API when the worker or the associated window are freed when still in use, resulting in a potentially exploitable crash. This vulnerability affects Firefox 56, Firefox ESR 52.4, and Thunderbird 52.4...
SUSE-SU-2017:2589-1 Security update for MozillaFirefox
This update for MozillaFirefox to ESR 52.3 fixes several issues. These security issues were fixed: - CVE-2017-7807 Domain hijacking through AppCache fallback bsc1052829 - CVE-2017-7791 Spoofing following page navigation with data: protocol and modal alerts bsc1052829 - CVE-2017-7792 Buffer overfl...
Apple Mac OS X Multiple Vulnerabilities (HT208144)
Apple Mac OS X is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...