Lucene search
+L

1605 matches found

The Hacker News
The Hacker News
added 2014/02/17 8:8 p.m.8 views

Google Forces Handset Manufacturers to Ship Smartphone with latest Android version

Get bored with the older versions of Google’s Android Operating system? Then there is Good News for Android lovers! Google is putting an end to the older versions of Android newly manufactured Smartphone Handsets. According to a leaked Google Document, the Smartphone Manufacturers will be forced ...

6.8AI score
SaveExploits0
NVD
NVD
added 2014/02/06 5:44 a.m.23 views

CVE-2014-1484

Mozilla Firefox before 27.0 on Android 4.2 and earlier creates system-log entries containing profile paths, which allows attackers to obtain sensitive information via a crafted application...

5CVSS8AI score0.01556EPSS
SaveExploits0References10
Prion
Prion
added 2014/02/06 5:44 a.m.20 views

Code injection

Mozilla Firefox before 27.0 on Android 4.2 and earlier creates system-log entries containing profile paths, which allows attackers to obtain sensitive information via a crafted application...

5CVSS6.3AI score0.01556EPSS
SaveExploits0References10Affected Software6
CVE
CVE
added 2014/02/06 2:0 a.m.115 views

CVE-2014-1484

CVE-2014-1484 affects Mozilla Firefox on Android 4.2 and earlier, where system logs may contain profile paths, enabling a crafted application to access sensitive information. Connected docs reference the CVE within openSUSE Firefox ESR advisories and indicate fixes in later Firefox ESR updates (e...

5CVSS8.5AI score0.01556EPSS
SaveExploits0References10Affected Software3
Cvelist
Cvelist
added 2014/02/06 2:0 a.m.37 views

CVE-2014-1484

Mozilla Firefox before 27.0 on Android 4.2 and earlier creates system-log entries containing profile paths, which allows attackers to obtain sensitive information via a crafted application...

7.9AI score0.01556EPSS
SaveExploits0References10
NVD
NVD
added 2014/01/26 4:58 p.m.23 views

CVE-2014-1642

The IRQ setup in Xen 4.2.x and 4.3.x, when using device passthrough and configured to support a large number of CPUs, frees certain memory that may still be intended for use, which allows local guest administrators to cause a denial of service memory corruption and hypervisor crash and possibly...

4.4CVSS7.4AI score0.00444EPSS
SaveExploits0References11
Cvelist
Cvelist
added 2014/01/26 11:0 a.m.30 views

CVE-2014-1642

The IRQ setup in Xen 4.2.x and 4.3.x, when using device passthrough and configured to support a large number of CPUs, frees certain memory that may still be intended for use, which allows local guest administrators to cause a denial of service memory corruption and hypervisor crash and possibly...

7.3AI score0.00444EPSS
SaveExploits0References11
Xen Project
Xen Project
added 2014/01/23 12:0 p.m.60 views

Out-of-memory condition yielding memory corruption during IRQ setup

ISSUE DESCRIPTION When setting up the IRQ for a passed through physical device, a flaw in the error handling could result in a memory allocation being used after it is freed, and then freed a second time. This would typically result in memory corruption. IMPACT Malicious guest administrators can...

4.4CVSS6.5AI score0.00444EPSS
SaveExploits0Affected Software1
NVD
NVD
added 2014/01/19 6:55 p.m.25 views

CVE-2013-4375

The qdisk PV disk backend in qemu-xen in Xen 4.2.x and 4.3.x before 4.3.1, and qemu 1.1 and other versions, allows local HVM guests to cause a denial of service domain grant reference consumption via unspecified vectors...

2.7CVSS6AI score0.00585EPSS
SaveExploits0References4
Prion
Prion
added 2014/01/19 6:55 p.m.16 views

Design/Logic Flaw

The qdisk PV disk backend in qemu-xen in Xen 4.2.x and 4.3.x before 4.3.1, and qemu 1.1 and other versions, allows local HVM guests to cause a denial of service domain grant reference consumption via unspecified vectors...

2.7CVSS6.5AI score0.00585EPSS
SaveExploits0References4Affected Software2
CVE
CVE
added 2014/01/19 6:0 p.m.78 views

CVE-2013-4375

CVE-2013-4375 affects the qdisk PV disk backend in qemu-xen used by Xen 4.2.x and 4.3.x before 4.3.1, and in qemu 1.1 and other versions. The vulnerability allows a local HVM guest to cause a denial of service via domain grant reference consumption through unspecified vectors. The issue is tied t...

2.7CVSS6AI score0.00585EPSS
SaveExploits0References4Affected Software2
Debian CVE
Debian CVE
added 2014/01/19 6:0 p.m.48 views

CVE-2013-4375

The qdisk PV disk backend in qemu-xen in Xen 4.2.x and 4.3.x before 4.3.1, and qemu 1.1 and other versions, allows local HVM guests to cause a denial of service domain grant reference consumption via unspecified vectors...

2.7CVSS5.9AI score0.00585EPSS
SaveExploits0
Cvelist
Cvelist
added 2014/01/19 6:0 p.m.33 views

CVE-2013-4375

The qdisk PV disk backend in qemu-xen in Xen 4.2.x and 4.3.x before 4.3.1, and qemu 1.1 and other versions, allows local HVM guests to cause a denial of service domain grant reference consumption via unspecified vectors...

5.9AI score0.00585EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2014/01/19 12:0 a.m.31 views

CVE-2013-4375

The qdisk PV disk backend in qemu-xen in Xen 4.2.x and 4.3.x before 4.3.1, and qemu 1.1 and other versions, allows local HVM guests to cause a denial of service domain grant reference consumption via unspecified vectors...

2.7CVSS7.2AI score0.00585EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2014/01/09 12:0 a.m.7 views

PT-2014-3236 · Synology · Synology Diskstation Manager

Name of the Vulnerable Software and Affected Versions: Synology DiskStation Manager DSM versions 4.0 through 4.0-2258 Synology DiskStation Manager DSM versions 4.2 through 4.2-3242 Synology DiskStation Manager DSM versions 4.3 through 4.3-3809 Description: The issue allows remote attackers to...

10CVSS7.9AI score0.84571EPSS
SaveExploits5References6
NVD
NVD
added 2013/12/13 6:55 p.m.15 views

CVE-2013-6400

Xen 4.2.x and 4.3.x, when using Intel VT-d and a PCI device has been assigned, does not clear the flag that suppresses IOMMU TLB flushes when unspecified errors occur, which causes the TLB entries to not be flushed and allows local guest administrators to cause a denial of service host crash or...

6.8CVSS6.3AI score0.00661EPSS
SaveExploits0References8
NVD
NVD
added 2013/11/21 4:40 a.m.24 views

CVE-2013-6176

Multiple SQL injection vulnerabilities in EMC Document Sciences xPression 4.1 SP1 before Patch 47, 4.2 before Patch 26, and 4.5 before Patch 05, as used in Documentum Edition, Enterprise Edition Publish Engine, and Enterprise Edition Compuset Engine, allow remote authenticated users to execute...

6.5CVSS8.1AI score0.02177EPSS
SaveExploits0References4
Prion
Prion
added 2013/11/21 4:40 a.m.22 views

Sql injection

Multiple SQL injection vulnerabilities in EMC Document Sciences xPression 4.1 SP1 before Patch 47, 4.2 before Patch 26, and 4.5 before Patch 05, as used in Documentum Edition, Enterprise Edition Publish Engine, and Enterprise Edition Compuset Engine, allow remote authenticated users to execute...

6.5CVSS8.7AI score0.02177EPSS
SaveExploits0References4Affected Software1
Prion
Prion
added 2013/11/21 4:40 a.m.22 views

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in EMC Document Sciences xPression 4.1 SP1 before Patch 47, 4.2 before Patch 26, and 4.5 before Patch 05, as used in Documentum Edition, Enterprise Edition Publish Engine, and Enterprise Edition Compuset Engine, allow remote attackers to inject...

4.3CVSS6.1AI score0.02261EPSS
SaveExploits0References4Affected Software1
Tenable Nessus
Tenable Nessus
added 2013/11/20 12:0 a.m.78 views

SAP Sybase Adaptive Server Enterprise SQL Injection (SAP Note 1893440)

SAP Sybase Adaptive Server Enterprise ASE contains a flaw that may allow an attacker to carry out a SQL injection attack. The issue is due to the program not properly sanitizing user-supplied input before using it in SQL queries. This may allow an attacker to inject or manipulate SQL queries in t...

5.9AI score
SaveExploits0References2
Rows per page
Query Builder