912 matches found
QEMU Denial of Service Vulnerability (CNVD-2016-01943)
QEMU is a simulation processor software developed by French programmer Fabrice Bellard. The software is fast and cross-platform. A security vulnerability exists in QEMU versions 1.6.0 through 2.3.1. When a program maps addresses to MemoryRegionSection using 'addressspacetranslate', an attacker ca...
Fedora 22 : qemu-2.3.1-7.fc22 (2015-d5c1048b47)
CVE-2015-7295: virtio-net possible remote DoS bz 1264393 drive-mirror: Fix coroutine reentrance bz 1266936 Fix udp socket 'localaddr' bz 1268708 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...
Fedora 22 : qemu-2.3.1-11.fc22 (2016-275e9ff483)
CVE-2015-8567: net: vmxnet3: host memory leakage bz 1289818 CVE-2016-1922: i386: avoid NULL pointer dereference bz 1292766 CVE-2015-8613: buffer overflow in megasasctrlgetinfo bz 1284008 CVE-2015-8743: ne2000: OOB memory access in ioport r/w functions bz 1294787 Note that Tenable Network Security...
Fedora 22 : qemu-2.3.1-10.fc22 (2016-890e612f52)
CVE-2015-7549: pci: NULL pointer dereference issue bz 1291138 CVE-2015-8558: DoS by infinite loop in ehciadvancestate bz 1291309 CVE-2015-8666: Heap-based buffer overrun during VM migration bz 1294027 CVE-2015-8744: vmxnet3: fix crash with short packets bz 1295440 CVE-2015-8745: vmxnet3: don't...
Debian DLA-428-1 : websvn security update
It was discovered that there was a cross-site scripting vulnerability in websvn, a web-based Subversion repository browser For Debian 6 Squeeze, this issue has been fixed in websvn version 2.3.1-1+deb6u2. NOTE: Tenable Network Security has extracted the preceding description block directly from t...
CVE-2016-0738
CVE-2016-0738 affects OpenStack Swift (Object Storage) prior to 2.3.1 in Kilo, 2.4.x, and prior to 2.5.1 in Liberty. The issue is a memory-leak/unfinished-read vulnerability that can allow a remote attacker (authenticated) to cause a denial of service by exhausting proxy-server resources through ...
PT-2016-4395
Name of the Vulnerable Software and Affected Versions OpenStack Object Storage Swift versions prior to 2.3.1 Kilo OpenStack Object Storage Swift version 2.4.x OpenStack Object Storage Swift versions prior to 2.5.1 Liberty Description The issue allows remote attackers to cause a denial of service ...
[SECURITY] Fedora 22 Update: php-horde-Horde-Service-Weather-2.3.1-1.fc22
Set of classes that provide an abstraction to various online weather service providers. Includes drivers for WeatherUnderground, WorldWeatherOnline, and Google Weather...
Open Source Point of Sale Cross-Site Scripting Vulnerability
Open Source Point of Sale is a Web-based sales system using PHP and MySQL development . A cross-site scripting vulnerability exists in Open Source Point of Sale version 2.3.1. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...
CVE-2015-0299
Multiple cross-site scripting XSS vulnerabilities in Open Source Point of Sale 2.3.1 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...
CVE-2015-0299
Multiple cross-site scripting XSS vulnerabilities in Open Source Point of Sale 2.3.1 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...
Fedora 22 : qemu-2.3.1-1.fc22 (2015-13402)
Rebased to version 2.3.1 - Fix crash in qemuspicecreatedisplay bz 1163047 - Fix qemu-img map crash for unaligned image bz 1229394 - CVE-2015-3209: pcnet: multi-tmd buffer overflow in the tx path bz 1230536 - CVE-2015-3214: i8254: out-of-bounds memory access bz 1243728 - CVE-2015-5158: scsi...
DLA-259-1 shibboleth-sp2 - security update
Bulletin has no description...
PT-2015-1942 · Linux +6 · Linux Kernel +6
Name of the Vulnerable Software and Affected Versions: QEMU versions prior to 2.3.1 Linux kernel versions prior to 2.6.33 Description: The issue is caused by a buffer overflow in the pit ioport read function of the QEMU emulator, which does not properly distinguish between read lengths and write...
The vulnerability of the Red Hat Enterprise Linux operating system allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the libpurple-2.3.1 package for the Red Hat Enterprise Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...
Exponent CMS < 2.3.1 Patch 4 Multiple XSS Vulnerabilities
Exponent CMS is prone to multiple cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Exponent CMS 2.3.1 - Multiple XSS Vulnerabilities
Exploit for php platform in category web applications Exploit Title: Multiple Exponent CMS Cross-Site Scripting Vulnerabilies Discovered by- Mayuresh Dani email protected Narendra Shinde email protected Vendor Homepage: http://www.exponentcms.org/ Software Link:...
Exponent CMS 2.3.1 - Multiple Cross-Site Scripting Vulnerabilities
Exploit Title: Multiple Exponent CMS Cross-Site Scripting Vulnerabilies Discovered by- Mayuresh Dani [email protected] Narendra Shinde [email protected] Vendor Homepage: http://www.exponentcms.org/ Software Link: http://sourceforge.net/projects/exponentcms/files/exponent-2.3.1.zip/download Versio...