CVE-2016-3158

The xrstor function in arch/x86/xstate.c in Xen 4.x does not properly handle writes to the hardware FSW.ES bit when running on AMD64 processors, which allows local guest OS users to obtain sensitive register content information from another guest by leveraging pending exception and mask bits. NOT...

CVE-2016-3159

The fpufxrstor function in arch/x86/i387.c in Xen 4.x does not properly handle writes to the hardware FSW.ES bit when running on AMD64 processors, which allows local guest OS users to obtain sensitive register content information from another guest by leveraging pending exception and mask bits...

CVE-2016-3158

CVE-2016-3158 concerns the Xen hypervisor. The vulnerability stems from the xrstor function in arch/x86/xstate.c when running on AMD64 processors, where writes to the hardware FSW.ES bit are not properly handled. This could allow a local guest OS user to obtain sensitive register content from ano...

KLA10788 Multiple vulnerabilities in Microsoft Graphics Component

Multiple serious vulnerabilities have been found in Microsoft Graphics Component as used in multiple Microsoft products. Malicious users can exploit these vulnerabilities to execute arbitrary code or gain privileges. Below is a complete list of vulnerabilities 1. An improper memory objects handli...

CVE-2016-2113

Samba 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not verify X.509 certificates from TLS servers, which allows man-in-the-middle attackers to spoof LDAPS and HTTPS servers and obtain sensitive information via a crafted certificate...

CVE-2016-2114

The SMB1 protocol implementation in Samba 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not recognize the "server signing = mandatory" setting, which allows man-in-the-middle attackers to spoof SMB servers by modifying the client-server data stream...

mirsoft.info Open Redirect vulnerability

Vulnerable URL: http://www.mirsoft.info/gmb/urlredir.php?url=https://www.openbugbounty.org/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 1742092 Google Pagerank| 4 VIP...

greendaily.co.kr XSS vulnerability

Vulnerable URL: http://www.greendaily.co.kr/searchAPI/moveUrl.html?newsid=158536=https://www.openbugbounty.org/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 158810 Google Pageran...

CVE-2016-2789

Cross-site scripting XSS vulnerability in the Web User Interface in Citrix XenMobile Server 10.0, 10.1 before Rolling Patch 4, and 10.3 before Rolling Patch 1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-2086

Node.js 0.10.x before 0.10.42, 0.12.x before 0.12.10, 4.x before 4.3.0, and 5.x before 5.6.0 allow remote attackers to conduct HTTP request smuggling attacks via a crafted Content-Length HTTP header...

roushperformance.com XSS vulnerability

Vulnerable URL: http://www.roushperformance.com/scripts/search.cgi?query=%22%3E%3Csvg%2Fonload%3Dprompt%28%2Fxpposed%2F%29%3E=GO Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2329...

Threat Outbreak Alert RuleID22063: Email Messages Distributing Malicious Software on April 3, 2016

Medium Alert ID: 44473 First Published: 2016 April 4 13:18 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID22063 may contain the following files: Name | Siz...

Debian: Security Advisory (DSA-3542-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

istitutofantoni.gov.it XSS vulnerability

Vulnerable URL: http://www.istitutofantoni.gov.it/claroline/claroline/backends/download.php?url=aHR0cDovL2cuZTxzdmcgb25sb2FkPWFsZXJ0KCJYU1NQT1NFRCIpPg===true=GRAF022014 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability...

Dr. Parking 4 - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Dr. Parking 4 published at the 'play' market has multiple vulnerabilities...

pissedconsumer.com XSS vulnerability

Vulnerable URL: http://www.pissedconsumer.com/post-complaint.html Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 12078 Google Pagerank| 4 VIP website status:| Yes Check pissedconsumer.com SSL connection:| Grade:...

CVE-2016-0843

The Qualcomm ARM processor performance-event manager in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 allows attackers to gain privileges via a crafted application, aka internal bug 25801197...

CVE-2016-1503

dhcpcd before 6.10.0, as used in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 and other products, mismanages option lengths, which allows remote attackers to execute arbitrary code or cause a denial of service heap-based buffer overflow via a malform...

Train speech for kids 4-7 Free - Dynamic Code Loading, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Train speech for kids 4-7 Free published at the 'play' market has multiple vulnerabilities...

4 фото 1 слово - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application 4 фото 1 слово published at the 'play' market has multiple vulnerabilities...