CVE-2018-7169

An issue was discovered in shadow 4.5. newgidmap in shadow-utils is setuid and allows an unprivileged user to be placed in a user namespace where setgroups2 is permitted. This allows an attacker to remove themselves from a supplementary group, which may allow access to certain filesystem paths if...

CVE-2017-1682

The coordinated sources confirm a Cross-Site Scripting vulnerability in IBM Connections Web UI affecting IBM Connections versions 4.0, 4.5, 5.0, 5.5, and 6.0. The issue allows an attacker to embed arbitrary JavaScript in the Web UI, potentially altering functionality and leading to credentials di...

Infogram: Stored XSS On Wordpress Infogram plugin

Hello Team, There is a Stored XSS Vulnerability On Wordpress Infogram plugin. Wordpress version : 4.5 Infogram plugin version : 1.5.1 After installing wordpress and infogram plugin. I created a project to infogram with the following name " and I Created a simple report. Then I go back to my...

When an “Outstanding” rating from CNET isn’t enough

The editors at respected tech site CNET/Download.com recently awarded Malwarebytes for Windows with an “outstanding” rating of 4.5 stars out of five. In the review, editor Tom McNamara recommended Malwarebytes because the scanning engine is of “high quality,” it works well with Windows 10, and do...

CVE-2017-9272

The Bi-directional driver in IDM 4.5 before 4.0.3.0 could be susceptible to a denial of service attack...

CVE-2017-9273

The Bi-directional driver in IDM 4.5 before 4.0.3.0 could be susceptible to unauthorized log configuration changes...

Design/Logic Flaw

The Bi-directional driver in IDM 4.5 before 4.0.3.0 could be susceptible to a denial of service attack...

Design/Logic Flaw

The Bi-directional driver in IDM 4.5 before 4.0.3.0 could be susceptible to unauthorized log configuration changes...

CVE-2017-9272

CVE-2017-9272 affects NetIQ IDM (Identity Manager) 4.5, where the Bi-directional driver prior to 4.0.3.0 is vulnerable to denial-of-service. The CNVD entry confirms the vulnerability in the Bi-directional driver and states exploitation could cause DoS. Remediation is to upgrade to 4.0.3.0 or late...

CVE-2017-9273

CVE-2017-9273 affects Identity Manager (IDM) 4.5, specifically the Bi-directional driver, prior to version 4.0.3.0. The vulnerability allows unauthorized changes to log configuration through the driver component, with network access, low attack complexity, and no authentication required. Impact i...

CVE-2017-9273

The Bi-directional driver in IDM 4.5 before 4.0.3.0 could be susceptible to unauthorized log configuration changes...

CVE-2017-9272

The Bi-directional driver in IDM 4.5 before 4.0.3.0 could be susceptible to a denial of service attack...

Xen 'grant_table.c' elevation of privilege vulnerability

Xen is an open source virtual machine monitor product developed at the University of Cambridge, UK. The product enables different and incompatible operating systems to run on the same computer and supports runtime migration to ensure uptime and avoid downtime. A security vulnerability exists in X...

Null pointer dereference

An issue was discovered in Xen 4.5.x through 4.9.x. The function gnttabcacheflush handles GNTTABOPcacheflush grant table operations. It checks to see if the calling domain is the owner of the page that is to be operated on. If it is not, the owner's grant table is checked to see if a grant mappin...

CVE-2017-14318

An issue was discovered in Xen 4.5.x through 4.9.x. The function gnttabcacheflush handles GNTTABOPcacheflush grant table operations. It checks to see if the calling domain is the owner of the page that is to be operated on. If it is not, the owner's grant table is checked to see if a grant mappin...

CVE-2017-14318

CVE-2017-14318 affects Xen 4.5.x–4.9.x. The vulnerability arises in __gnttab_cache_flush: when operating on a page owned by special domains (DOMID_XEN/IO/COW) that lack a grant table, the code may dereference a NULL pointer since it does not verify the owner’s grant table existence. This can enab...

CVE-2017-14318

An issue was discovered in Xen 4.5.x through 4.9.x. The function gnttabcacheflush handles GNTTABOPcacheflush grant table operations. It checks to see if the calling domain is the owner of the page that is to be operated on. If it is not, the owner's grant table is checked to see if a grant mappin...

CVE-2017-14318

An issue was discovered in Xen 4.5.x through 4.9.x. The function gnttabcacheflush handles GNTTABOPcacheflush grant table operations. It checks to see if the calling domain is the owner of the page that is to be operated on. If it is not, the owner's grant table is checked to see if a grant mappin...

Missing check for grant table

ISSUE DESCRIPTION The function gnttabcacheflush handles GNTTABOPcacheflush grant table operations. It checks to see if the calling domain is the owner of the page that is to be operated on. If it is not, the owner's grant table is checked to see if a grant mapping to the calling domain exists for...

CVE-2017-12855

Xen maintains the GTFread,writing bits as appropriate, to inform the guest that a grant is in use. A guest is expected not to modify the grant details while it is in use, whereas the guest is free to modify/reuse the grant entry when it is not in use. Under some circumstances, Xen will clear the...