[SECURITY] [DSA 3573-1] qemu security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3573-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso May 09, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3573-1] qemu security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3573-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso May 09, 2016 https://www.debian.org/security/faq -...

QEMU: Banked access to VGA memory (VBE) uses inconsistent bounds checks

ISSUE DESCRIPTION Qemu VGA module allows banked access to video memory using the window at 0xa00000 and it supports different access modes with different address calculations. But an attacker can easily change access modes after setting the bank register. This is CVE-2016-3710. Qemu VGA module...

CVE-2015-3712

CVE-2015-3712 affects Apple Mac OS X with the NVIDIA graphics driver prior to 10.10.4. The vulnerability is an out-of-bounds write in the NVIDIA graphics driver that can allow arbitrary code execution in a privileged context or cause a denial of service. Affected component: NVIDIA graphics driver...

CVE-2014-3712

Katello vulnerability CVE-2014-3712 allows remote attackers to cause a denial of service via memory consumption. The issue arises in the Katello code paths performing to_sym on user-supplied values: (1) mode parameter in setup_utils (content_search_controller.rb) and (2) action parameter in respo...

CVE-2013-3712

CVE-2013-3712 affects SUSE Studio Onsite 1.3.x before 1.3.6 and SUSE Studio Extension for System z 1.3, which use static secret tokens. The material states the impact and attack vectors as unspecified in the description; no concrete exploitation details, affected component versions, root cause sp...

CVE-2012-3712

WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1...

CVE-2012-3712

CVE-2012-3712 affects WebKit as used by Apple iTunes prior to version 10.7. The vulnerability allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site. The connected sources corroborate this description across ...

Apple iTunes < 10.7 Multiple Vulnerabilities (uncredentialed check)

The version of Apple iTunes on the remote host is prior to version 10.7. It is, therefore, affected by multiple memory corruption vulnerabilities in the WebKit component. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid62078; scriptversion"1.16"; scriptcvsdate"Date:...

CVE-2011-3712

CVE-2011-3712 concerns CakePHP 1.3.7, where a vulnerability allows remote attackers to disclose sensitive information by requesting certain .php files, causing error messages that reveal the installation path (e.g., dispatcher.php). The connected documents consistently describe this information d...

CVE-2010-3712

Cross-site scripting XSS vulnerability in Joomla! 1.5.x before 1.5.21 and 1.6.x before 1.6.1 allows remote attackers to inject arbitrary web script or HTML via vectors involving "multiple encoded entities," as demonstrated by the query string to index.php in the comweblinks or comcontent componen...

CVE-2010-3712

CVE-2010-3712 is a cross-site scripting (XSS) vulnerability in Joomla! affecting 1.5.x before 1.5.21 and 1.6.x before 1.6.1. An attacker can inject arbitrary web script/HTML via vectors using multiple encoded entities, demonstrated by the index.php query strings in the com_weblinks or com_content...

CVE-2009-3712

creationtimestamp| type| source ---|---|--- 2009-07-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9125...

Fedora Core 9 FEDORA-2009-3712 (udev)

The remote host is missing an update to udev announced via advisory FEDORA-2009-3712. OpenVAS Vulnerability Test $Id: fcore20093712.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-3712 udev Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...

CVE-2008-3712

CVE-2008-3712 affects Mambo CMS versions 4.6.2 and 4.6.5 when register_globals is enabled. The vulnerability consists of multiple XSS vectors that allow a remote attacker to inject arbitrary web script or HTML via two parameters: (1) the query string to mambots/editors/mostlyce/jscripts/tiny_mce/...

CVE-2007-3712

CVE-2007-3712 describes multiple cross-site scripting (XSS) vulnerabilities in HiddenChest “is ve Bayi Basvuru Formu” (Yb ve Bayi Babvuru Formu), enabling remote attackers to inject arbitrary web script or HTML via unspecified vectors. The entry notes the provenance is unknown and details come fr...

CVE-2006-3712

CVE-2006-3712 refers to an unspecified vulnerability in OC4J (Oracle Containers for J2EE) within Oracle Application Server versions 9.0.4.2 and 10.1.2.0.0. The available description states the impact and attack vectors are unknown, with the vulnerability also known as Oracle Vuln# AS07. The Conne...

CVE-2005-3712

CVE-2005-3712 is a heap-based buffer overflow in rsync affecting Mac OS X 10.4 through 10.4.5. The issue allows remote authenticated users to execute arbitrary code via long extended attributes. The Connected documents confirm the affected platform (Mac OS X 10.4.x) and component (rsync) with the...

Mac OS X Multiple Vulnerabilities (Security Update 2006-001)

The remote host is running Apple Mac OS X, but lacks Security Update 2006-001. This security update contains fixes for the following applications : apachemodphp automount Bom Directory Services iChat IPSec LaunchServices LibSystem loginwindow Mail rsync Safari Syndication C Tenable Network...