Search CVE reports
2901 – 2910 of 49652 results
NVIDIA Nsight Systems for Windows contains a vulnerability in the application’s DLL loading mechanism where an attacker could cause an uncontrolled search path element by exploiting insecure DLL search paths. A successful exploit...
1 affected package
nvidia-cuda-toolkit
| Package | 16.04 LTS |
|---|---|
| nvidia-cuda-toolkit | Needs evaluation |
NVIDIA Nsight Systems for Linux contains a vulnerability in the .run installer, where an attacker could cause an OS command injection by supplying a malicious string to the installation path. A successful exploit of this...
1 affected package
nvidia-cuda-toolkit
| Package | 16.04 LTS |
|---|---|
| nvidia-cuda-toolkit | Needs evaluation |
NVIDIA Nsight Visual Studio for Windows contains a vulnerability in Nsight Monitor where an attacker can execute arbitrary code with the same privileges as the NVIDIA Nsight Visual Studio Edition Monitor application. A successful...
1 affected package
nvidia-cuda-toolkit
| Package | 16.04 LTS |
|---|---|
| nvidia-cuda-toolkit | Needs evaluation |
NVIDIA Nsight Systems contains a vulnerability in the gfx_hotspot recipe, where an attacker could cause an OS command injection by supplying a malicious string to the process_nsys_rep_cli.py script if the script is invoked...
1 affected package
nvidia-cuda-toolkit
| Package | 16.04 LTS |
|---|---|
| nvidia-cuda-toolkit | Needs evaluation |
Calling wordexp with WRDE_REUSE in conjunction with WRDE_APPEND in the GNU C Library version 2.0 to version 2.42 may cause the interface to return uninitialized memory in the we_wordv member, which on subsequent calls to wordfree...
2 affected packages
glibc, eglibc
| Package | 16.04 LTS |
|---|---|
| glibc | Fixed |
| eglibc | — |
node-tar,a Tar for Node.js, has a race condition vulnerability in versions up to and including 7.5.3. This is due to an incomplete handling of Unicode path collisions in the `path-reservations` system. On case-insensitive...
1 affected package
node-tar
| Package | 16.04 LTS |
|---|---|
| node-tar | Needs evaluation |
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-13 and 6.9.13-38, a heap buffer overflow vulnerability in the XBM image decoder (ReadXBMImage) allows an...
1 affected package
imagemagick
| Package | 16.04 LTS |
|---|---|
| imagemagick | Fixed |
ImageMagick is free and open-source software used for editing and manipulating digital images. Versions prior to 7.1.2-13 have a stack overflow via infinite recursion in MSL (Magick Scripting Language) `<write>` command when...
1 affected package
imagemagick
| Package | 16.04 LTS |
|---|---|
| imagemagick | Needs evaluation |
ImageMagick is free and open-source software used for editing and manipulating digital images. The BilateralBlurImage method will allocate a set of double buffers inside AcquireBilateralTLS. But, in versions prior to 7.1.2-13, the...
1 affected package
imagemagick
| Package | 16.04 LTS |
|---|---|
| imagemagick | Not affected |
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.21.0, offscreen bitmap deletion leaves `gdi->drawing` pointing to freed memory, causing UAF when related update packets arrive. A malicious server...
3 affected packages
freerdp, freerdp2, freerdp3
| Package | 16.04 LTS |
|---|---|
| freerdp | Needs evaluation |
| freerdp2 | — |
| freerdp3 | — |