Lucene search
+L

37 matches found

OSV
OSV
added 2017/05/11 7:29 p.m.7 views

UBUNTU-CVE-2017-8904

Xen through 4.8.x mishandles the "contains segment descriptors" property during GNTTABOPtransfer aka guest transfer operations, which might allow PV guest OS users to execute arbitrary code on the host OS, aka XSA-214...

8.8CVSS7.7AI score0.00421EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2017/05/11 7:29 p.m.32 views

CVE-2017-8904

Xen through 4.8.x mishandles the "contains segment descriptors" property during GNTTABOPtransfer aka guest transfer operations, which might allow PV guest OS users to execute arbitrary code on the host OS, aka XSA-214...

8.8CVSS7.5AI score0.00421EPSS
SaveExploits0References2
CVE
CVE
added 2017/05/11 7:00 p.m.92 views

CVE-2017-8904

CVE-2017-8904 : Xen up to 4.8.x is affected by a flaw in the handling of the “contains segment descriptors” property during GNTTABOP_transfer (guest transfer). The underlying issue is the mishandling in guest transfer operations, which could allow a PV guest OS user to execute arbitrary code on t...

8.8CVSS7.3AI score0.00421EPSS
SaveExploits0References5Affected Software1
Debian CVE
Debian CVE
added 2017/05/11 7:00 p.m.67 views

CVE-2017-8904

Xen through 4.8.x mishandles the "contains segment descriptors" property during GNTTABOPtransfer aka guest transfer operations, which might allow PV guest OS users to execute arbitrary code on the host OS, aka XSA-214...

8.8CVSS3.1AI score0.00421EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2017/05/10 12:00 a.m.56 views

Debian DSA-3847-1 : xen - security update

Jan Beulich and Jann Horn discovered multiple vulnerabilities in the Xen hypervisor, which may lead to privilege escalation, guest-to-host breakout, denial of service or information leaks. In additional to the CVE identifiers listed above, this update also addresses the vulnerabilities announced ...

8.2CVSS6.3AI score0.01569EPSS
SaveExploits3References6
Debian
Debian
added 2017/05/09 8:52 p.m.53 views

[SECURITY] [DSA 3847-1] xen security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3847-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff May 09, 2017 https://www.debian.org/security/faq -...

8.2CVSS7.5AI score0.01569EPSS
SaveExploits3
OpenVAS
OpenVAS
added 2017/05/09 12:00 a.m.41 views

Debian Security Advisory DSA 3847-1 (xen - security update)

Jan Beulich and Jann Horn discovered multiple vulnerabilities in the Xen hypervisor, which may lead to privilege escalation, guest-to-host breakout, denial of service or information leaks. In additional to the CVE identifiers listed above, this update also addresses the vulnerabilities announced ...

7.2CVSS0.4AI score0.01569EPSS
SaveExploits3References1
Zero Day Initiative
Zero Day Initiative
added 2014/01/10 12:00 a.m.52 views

Hewlett-Packard Data Protector Cell Manager crs.exe Multiple Opcodes Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP Data Protector. Authentication is not required to exploit this vulnerability. The specific flaw exists within crs.exe which listens by default on a random TCP port. When parsing opcodes 214, 215...

7.5CVSS4.9AI score0.10436EPSS
SaveExploits1References1
OpenVAS
OpenVAS
added 2012/09/11 12:00 a.m.36 views

Slackware Advisory SSA:2009-214-01 httpd

The remote host is missing an update as announced via advisory SSA:2009-214-01. OpenVAS Vulnerability Test $Id: esoftslkssa200921401.nasl 6598 2017-07-07 09:36:44Z cfischer $ Description: Auto-generated from the corresponding slackware advisory Authors: Thomas Reinke Copyright: Copyright c 2012...

7.8CVSS0.8AI score0.52988EPSS
SaveExploits14
Vulnerability Lab
Vulnerability Lab
added 2011/06/30 12:00 a.m.20 views

HTC HD2 Mobile Phone - LockScreen Keyboard Bypass

Document Title: =============== HTC HD2 Mobile Phone - LockScreen Keyboard Bypass References: =========== View: http://www.youtube.com/watch?v=84Lf27GrLa4 Download: http://www.vulnerability-lab.com/resources/videos/214.flv Release Date: ============= 2011-06-30 Vulnerability Laboratory ID VL-ID:...

7.1AI score
SaveExploits0
Saint
Saint
added 2010/11/05 12:00 a.m.251 views

IBM Rational Quality Manager and Test Lab Manager Policy Bypass

Added: 11/05/2010 CVE: CVE-2010-4094 BID: 44172 Background IBM Rational Quality Manager is a web-based centralized test management environment for test planning, workflow control, tracking and metrics reporting. IBM Rational Quality Manager incorporates Apache Tomcat 5 to help serve custom web...

5CVSS6AI score0.64496EPSS
SaveExploits10
Saint
Saint
added 2010/11/05 12:00 a.m.41 views

IBM Rational Quality Manager and Test Lab Manager Policy Bypass

Added: 11/05/2010 CVE: CVE-2010-4094 BID: 44172 Background IBM Rational Quality Manager is a web-based centralized test management environment for test planning, workflow control, tracking and metrics reporting. IBM Rational Quality Manager incorporates Apache Tomcat 5 to help serve custom web...

5CVSS6AI score0.64496EPSS
SaveExploits10
Saint
Saint
added 2010/11/05 12:00 a.m.59 views

IBM Rational Quality Manager and Test Lab Manager Policy Bypass

Added: 11/05/2010 CVE: CVE-2010-4094 BID: 44172 Background IBM Rational Quality Manager is a web-based centralized test management environment for test planning, workflow control, tracking and metrics reporting. IBM Rational Quality Manager incorporates Apache Tomcat 5 to help serve custom web...

5CVSS6AI score0.64496EPSS
SaveExploits10
OpenVAS
OpenVAS
added 2009/09/02 12:00 a.m.30 views

Mandrake Security Advisory MDVSA-2009:214 (python-celementtree)

The remote host is missing an update to python-celementtree announced via advisory MDVSA-2009:214. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-on...

5CVSS7.2AI score0.3038EPSS
SaveExploits2References1
zdt
zdt
added 2008/11/26 12:00 a.m.22 views

WebStudio CMS (pageid) Remote Blind SQL Injection Vuln (mil mixup)

Exploit for unknown platform in category web applications ================================================================== WebStudio CMS pageid Remote Blind SQL Injection Vuln mil mixup ================================================================== submitted: 09/01/2008 10:01 AM...

7.1AI score
SaveExploits0
OpenVAS
OpenVAS
added 2008/01/17 12:00 a.m.19 views

Debian Security Advisory DSA 214-1 (kdenetwork)

The remote host is missing an update to kdenetwork announced via advisory DSA 214-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...

7.5CVSS7AI score0.058EPSS
SaveExploits0References1
securityvulns
securityvulns
added 2006/07/09 12:00 a.m.41 views

MT Örümcek Toplist v2.2 Version Microsoft Access Driver ( MDB ) Download

Title : MT rmcek Toplist v2.2 Version Microsoft Access Driver MDB Download - Site : http://www.Cyber-Warrior.org - Author : StorMBoY - Mail : [email protected] - Exploit : http://www.target.com/path/db/orumcektoplist.mdb - Code : Set baglanti = Server.CreateObject"ADODB.Connection" baglanti.Op...

1.7AI score
SaveExploits0
Rows per page
Query Builder