CVE-2015-2045

The HYPERVISORxenversion hypercall in Xen 3.2.x through 4.5.x does not properly initialize data structures, which allows local guest users to obtain sensitive information via unspecified vectors...

CVE-2015-2045

CVE-2015-2045 affects Xen hypervisor: the HYPERVISOR_xen_version hypercall in Xen 3.2.x–4.5.x fails to properly initialize data structures, enabling local guest users to obtain sensitive information via unspecified vectors. The affected lineages are Xen 3.2.x–4.5.x with impact limited to informat...

Debian DSA-3181-1 : xen - security update

Multiple security issues have been found in the Xen virtualisation solution : - CVE-2015-2044 Information leak via x86 system device emulation. - CVE-2015-2045 Information leak in the HYPERVISORxenversion hypercall. - CVE-2015-2151 Missing input sanitising in the x86 emulator could result in...

OracleVM 3.3 : xen (OVMSA-2015-0026)

The remote OracleVM system is missing necessary patches to address critical security updates : - pre-fill structures for certain HYPERVISORxenversion sub-ops ... avoiding to pass hypervisor stack contents back to the caller through space unused by the respective strings. This is XSA-122...

OracleVM 3.2 : xen (OVMSA-2015-0028)

The remote OracleVM system is missing necessary patches to address critical security updates : please see Oracle VM Security Advisory OVMSA-2015-0028 for details. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The package checks in this plugin were extracted from OracleVM Security Advisory...

OracleVM 2.2 : xen (OVMSA-2015-0027)

The remote OracleVM system is missing necessary patches to address critical security updates : - XSA-122: pre-fill structures for certain HYPERVISORxenversion sub-ops Jan Beulich 20588670 CVE-2015-2045 - XSA-121: return all ones on wrong-sized reads of system device I/O ports Jan Beulich 20588358...

Debian: Security Advisory (DSA-3181-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ownCloud 'lib/db.php' SQL Injection Vulnerability

ownCloud is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:owncloud:owncloud"; if...

CVE-2013-2045

CVE-2013-2045 affects ownCloud Server prior to 5.0.6 (and related advisory notes) where lib/db.php does not neutralize special elements passed to SQL queries, enabling SQL injection by remote authenticated users. The issue is limited to authenticated access and the impact is described as arbitrar...

Ubuntu Update for linux USN-2045-1

Check for the Version of linux OpenVAS Vulnerability Test $Id: gbubuntuUSN20451.nasl 8448 2018-01-17 16:18:06Z teissa $ Ubuntu Update for linux USN-2045-1 Authors: System Generated Check Copyright: Copyright C 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; y...

Multiple SQL injection - ownCloud

ownCloud before 5.0.6 does not neutralize special elements that are passed to the SQL query in lib/db.php which therefore allows an authenticated attacker to execute arbitrary SQL commands. CVE-2013-2045 ownCloud before 5.0.6 and 4.5.11 does not neutralize special elements that are passed to the...

Server: Multiple SQL injection

ownCloud before 5.0.6 does not neutralize special elements that are passed to the SQL query in lib/db.php which therefore allows an authenticated attacker to execute arbitrary SQL commands. CVE-2013-2045 ownCloud before 5.0.6 and 4.5.11 does not neutralize special elements that are passed to the...

CVE-2012-2045

Adobe Shockwave Player before 11.6.6.636 allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2012-2043, CVE-2012-2044, CVE-2012-2046, and CVE-2012-2047...

Memory corruption

Adobe Shockwave Player before 11.6.6.636 allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2012-2043, CVE-2012-2044, CVE-2012-2045, and CVE-2012-2047...

Memory corruption

Adobe Shockwave Player before 11.6.6.636 allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2012-2043, CVE-2012-2044, CVE-2012-2045, and CVE-2012-2046...

CVE-2012-2045

CVE-2012-2045 affects Adobe Shockwave Player prior to 11.6.6.636 . The vulnerability is described as memory corruption that allows attackers to execute arbitrary code or cause a denial of service via unspecified vectors. The provided connected documents do not specify the exact root cause details...

Debian Security Advisory DSA 2045-1 (libtheora)

The remote host is missing an update to libtheora announced via advisory DSA 2045-1. OpenVAS Vulnerability Test $Id: deb20451.nasl 6614 2017-07-07 12:09:12Z cfischer $ Description: Auto-generated from advisory DSA 2045-1 libtheora Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

CVE-2010-2045

Directory traversal vulnerability in the Dione Form Wizard aka FDione or comdioneformwizard component 1.0.2 for Joomla! allows remote attackers to read arbitrary files via directory traversal sequences in the controller parameter to index.php...

CVE-2010-2045

Local File Inclusion in Joomla! component FDione Form Wizard (com_dioneformwizard) 1.0.2 allows an attacker to read arbitrary server files via directory traversal in the index.php controller parameter. This vulnerability, categorized as LFI, can lead to partial information disclosure as noted by ...

CVE-2010-2045

Directory traversal vulnerability in the Dione Form Wizard aka FDione or comdioneformwizard component 1.0.2 for Joomla! allows remote attackers to read arbitrary files via directory traversal sequences in the controller parameter to index.php...