CVE-2014-9971

CVE-2014-9971 affects Qualcomm components in Android CAF builds using the Linux kernel. The vulnerability arises when asserts are disabled, causing an instruction inside an assert to be skipped and enabling incorrect control flow. NVD lists a CVSSv3 base score of 9.8 (CRITICAL) with NETWORK attac...

CVE-2014-9411

CVE-2014-9411 concerns a Qualcomm/CAF Android stack issue: in CAF Android releases using the Linux kernel, an out-of-range pointer offset in rollback protection could be triggered. The vulnerability affects Qualcomm components within Android devices and is described as an out-of-range pointer off...

phpMyAdmin Multiple Vulnerabilities (PMASA-2014-15, PMASA-2014-16) - Windows

phpMyAdmin is prone to multiple cross-site scripting XSS and directory traversal vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-on...

phpMyAdmin XSS Vulnerability (PMASA-2014-4) - Windows

phpMyAdmin is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

phpMyAdmin Multiple Cross-Site Scripting Vulnerabilities (Jul 2014) - Windows

phpMyAdmin is prone to multiple cross-site scripting vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Debian DSA-3945-1 : linux - security update (Stack Clash)

Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks. - CVE-2014-9940 A use-after-free flaw in the voltage and current regulator driver could allow a local user to cause a denial of service or potentially...

phpMyAdmin Multiple Vulnerabilities (PMASA-2014-15, PMASA-2014-16) - Linux

phpMyAdmin is prone to multiple cross-site scripting XSS and directory traversal vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-on...

[SECURITY] [DSA 3945-1] linux security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3945-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 17, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3945-1] linux security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3945-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 17, 2017 https://www.debian.org/security/faq -...

Oracle Linux 7 : kernel (ELSA-2017-1842-1) (Stack Clash)

The remote Oracle Linux host is missing a security update for the kernel packages. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The package checks in this plugin were extracted from Oracle Linux Security Advisory ELSA-2017-1842-1. if NASLLEVEL 3000 exit0; include'deprecatednasllevel.inc';...

CVE-2014-9900

The ethtoolgetwol function in net/core/ethtool.c in the Linux kernel through 4.7, as used in Android before 2016-08-05 on Nexus 5 and 7 2013 devices, does not initialize a certain data structure, which allows local users to obtain sensitive information via a crafted application, aka Android...

CVE-2014-0143

Multiple integer overflows in the block drivers in QEMU, possibly before 2.0.0, allow local users to cause a denial of service crash via a crafted catalog size in 1 the parallelsopen function in block/parallels.c or 2 bochsopen function in bochs.c, a large L1 table in the 3 qcow2snapshotloadtmp i...

CVE-2014-0146

The qcow2open function in the block/qcow2.c in QEMU before 1.7.2 and 2.x before 2.0.0 allows local users to cause a denial of service NULL pointer dereference via a crafted image which causes an error, related to the initialization of the snapshotoffset and nbsnapshots fields...

CVE-2014-0143

Multiple integer overflows in the block drivers in QEMU, possibly before 2.0.0, allow local users to cause a denial of service crash via a crafted catalog size in 1 the parallelsopen function in block/parallels.c or 2 bochsopen function in bochs.c, a large L1 table in the 3 qcow2snapshotloadtmp i...

CVE-2014-0145

Multiple buffer overflows in QEMU before 1.7.2 and 2.x before 2.0.0, allow local users to cause a denial of service crash or possibly execute arbitrary code via a large 1 L1 table in the qcow2snapshotloadtmp in the QCOW 2 block driver block/qcow2-snapshot.c or 2 uncompressed chunk, 3 chunk length...

CVE-2014-0143

CVE-2014-0143 involves multiple integer overflows in QEMU block drivers (including parallels_open, bochs_open, qcow2_snapshot_load_tmp, qcow2_grow_l1_table, bdrv_check_byte_request, get_refcount, cloop_open) that can trigger buffer overflows, memory corruption and out-of-bounds reads/writes. A lo...

CVE-2014-0146

CVE-2014-0146 affects QEMU’s QCOW2 block driver. The issue is a NULL pointer dereference in qcow2_open caused by faulty initialization of snapshot_offset and nb_snapshots, allowing local users to crash a guest VM. Affected: QEMU before 1.7.2 and 2.x before 2.0.0. Mitigation: upgrade to QEMU 1.7.2...

CVE-2014-0142

QEMU up to before 2.0.0 is affected by CVE-2014-0142. A local attacker can trigger a divide-by-zero in two code paths: the seek_to_sector driver (block/parallels.c) via a zero tracks value, or the bochs driver (block/bochs.c) via a zero extent_size, potentially crashing the guest. Remediation is ...

CVE-2014-0145

CVE-2014-0145 affects QEMU before 1.7.2 and 2.x before 2.0.0, allowing local users to crash or potentially execute code via buffer overflows in QCOW2 snapshot handling (qcow2_snapshot_load_tmp) or in DMG block handling. Exploitation requires local access; impact is a denial of service and possibl...

CVE-2014-9701

Cross-site scripting XSS vulnerability in MantisBT before 1.2.19 and 1.3.x before 1.3.0-beta.2 allows remote attackers to inject arbitrary web script or HTML via the url parameter to permalinkpage.php...