9703 matches found
Microsoft Windows Hyper-V CVE-2019-0720 Remote Code Execution Vulnerability
Description Microsoft Windows is prone to a remote code-execution vulnerability. An attacker can exploit this issue to execute arbitrary code in the context of an affected system. Technologies Affected Microsoft Hyper-V Microsoft Windows 10 Version 1607 for x64-based Systems Microsoft Windows 10...
Microsoft Windows Hyper-V CVE-2019-0718 Denial of Service Vulnerability
Description Microsoft Windows is prone to a denial of service vulnerability. An attacker can exploit this issue to crash the host machine, resulting in a denial of service condition. Technologies Affected Microsoft Hyper-V Microsoft Windows 10 Version 1607 for x64-based Systems Microsoft Windows ...
PT-2019-3033 · Microsoft · Hyper-V +1
Name of the Vulnerable Software and Affected Versions: Microsoft Hyper-V affected versions not specified Description: A denial of service issue exists due to insufficient input validation on the host server. This could allow a remote attacker to cause a denial of service using a specially crafted...
KLA11534 Multiple vulnerabilities in Microsoft Windows
Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to obtain sensitive information, execute arbitrary code, gain privileges, cause denial of service, spoof user interface, bypass security restrictions. Below is a complete list of...
Security fix for the ALT Linux 8 package kde4libs version 4.14.38-alt5
4.14.38-alt5 built Aug. 12, 2019 Sergey V Turchin in task 235765 Aug. 8, 2019 Sergey V Turchin - security fixes: CVE-2019-14744...
A case study in industry collaboration: Poisoned RDP vulnerability disclosure and response
Earlier this year, I reached out to Check Point researcher Eyal Itkin, who had published multiple flaws in several Remote Desktop Protocol RDP clients, including a vulnerability in mstsc.exe, the built-in RDP client application in Windows. While there were no active exploits detected in the wild,...
Black Hat 2019: Microsoft Protocol Flaw Leaves Azure Users Open to Attack
LAS VEGAS – A path-traversal vulnerability in Microsoft’s Remote Desktop Protocol RDP leaves unpatched Azure customers open to attack. The flaw could allow for a virtual machine VM escape in Microsoft’s Hyper-V Manager, part of its Azure cloud platform. Researchers with Check Point at a Wednesday...
Reverse RDP Attack Also Enables Guest-to-Host Escape in Microsoft Hyper-V
Remember the Reverse RDP Attack? Earlier this year, researchers disclosed clipboard hijacking and path-traversal issues in Microsoft's Windows built-in RDP client that could allow a malicious RDP server to compromise a client computer, reversely. You can find details and a video demonstration for...
Reverse RDP Attack Also Enables Guest-to-Host Escape in Microsoft Hyper-V
Remember the Reverse RDP Attack? Earlier this year, researchers disclosed clipboard hijacking and path-traversal issues in Microsoft's Windows built-in RDP client that could allow a malicious RDP server to compromise a client computer, reversely. You can find details and a video demonstration for...
kernel: use-after-free Read in vhost_transport_send_pkt
A flaw was found where an attacker may be able to have an uncontrolled read to kernel-memory from within a vm guest. A race condition between connect and close function may allow an attacker using the AFVSOCK protocol to gather a 4 byte information leak or possibly impersonate AFVSOCK messages...
CVE-2019-7163
The web interface of Alcatel LINKZONE MW40-V-V1.0 MW40LU02.0002 devices is vulnerable to an authentication bypass that allows an unauthenticated user to have access to the web interface without knowing the administrator's password...
CVE-2019-7163: Improper Authentication
The web interface of Alcatel LINKZONE MW40-V-V1.0 MW40LU02.0002 devices is vulnerable to an authentication bypass that allows an unauthenticated user to have access to the web interface without knowing the administrator's password...
PT-2019-18446
Name of the Vulnerable Software and Affected Versions Alcatel LINKZONE MW40-V-V1.0 MW40 LU 02.00 02 Description The web interface of the device is susceptible to an authentication bypass, allowing unauthorized access without the need for the administrator's password. Recommendations For Alcatel...
Google Chrome V8 Engine DoS
The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to the blocking/“freezing” of V8 elements. Exploiting this vulnerability can allow a remote attacker to cause a service failure through a specially crafted web page...
kernel security, bug fix, and enhancement update
3.10.0-957.27.2.OL7 - Oracle Linux certificates Alexey Petrenko - Oracle Linux RHCK Module Signing Key was compiled into kernel [email protected] - Update x509.genkey bug 24817676 3.10.0-957.27.2 - x86 hyper-v: fix hyperv.h UAPI header Vitaly Kuznetsov 1727109 169249...
CVE-2019-1010174
CImg The CImg Library v.2.3.3 and earlier is affected by: command injection. The impact is: RCE. The component is: loadnetwork function. The attack vector is: Loading an image from a user-controllable url can lead to command injection, because no string sanitization is done on the url. The fixed...
CVE-2019-1010174: Improper Neutralization of Special Elements used in a Command
CImg The CImg Library v.2.3.3 and earlier is affected by: command injection. The impact is: RCE. The component is: loadnetwork function. The attack vector is: Loading an image from a user-controllable url can lead to command injection, because no string sanitization is done on the url. The fixed...
Hyper-V Hardware Virtualization DoS
The vulnerability of the Hyper-V hardware virtualization technology for Windows operating systems exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to trigger a service failure through a specially created application executed in the guest...
Security Bulletin: Spoofing and denial of service vulnerabilities in WebSphere Application Server Liberty affect IBM Spectrum Protect Client web user interface and IBM Spectrum Protect for Virtual Environments (CVE-2018-1902, CVE-2019-4046)
Summary Potential spoofing and denial of service vulnerabilities in IBM WebSphere Application Server Liberty affect IBM Spectrum Protect formerly Tivoli Storage Manager Backup-Archive Client web user interface and IBM Spectrum Protect formerly Tivoli Storage Manager for Virtual Environments...
CVE-2019-0966
A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate input from a privileged user on a guest operating system, aka 'Windows Hyper-V Denial of Service Vulnerability'...