SUSE SLED12 / SLES12 Security Update : xen (SUSE-SU-2015:1042-1)

Xen was updated to fix seven security issues and one non-security bug. The following vulnerabilities were fixed : - CVE-2015-4103: Potential unintended writes to host MSI message data field via qemu XSA-128 bnc931625 - CVE-2015-4104: PCI MSI mask bits inadvertently exposed to guests XSA-129...

Debian: Security Advisory (DSA-3286-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2015-4104

Xen 3.3.x through 4.5.x does not properly restrict access to PCI MSI mask bits, which allows local x86 HVM guest users to cause a denial of service unexpected interrupt and host crash via unspecified vectors...

CVE-2015-4104

CVE-2015-4104 affects Xen 3.3.x through 4.5.x and arises from failure to restrict access to PCI MSI mask bits, enabling a local x86 HVM guest to trigger a denial of service culminating in a host crash via unspecified vectors. Public advisories indicate fixes are available in Xen maintenance relea...

SUSE-SU-2015:1042-1 Security update for xen

Xen was updated to fix seven security issues and one non-security bug. The following vulnerabilities were fixed: CVE-2015-4103: Potential unintended writes to host MSI message data field via qemu XSA-128 bnc931625 CVE-2015-4104: PCI MSI mask bits inadvertently exposed to guests XSA-129 bnc931626...

OracleVM 3.2 : xen (OVMSA-2015-0063)

The remote OracleVM system is missing necessary patches to address critical security updates : - xen/pt: unknown PCI config space fields should be read-only ... by default. Add a per-device 'permissive' mode similar to pciback's to allow restoring previous behavior and hence break security again,...

CVE-2011-4104

The fromyaml method in serializers.py in Django Tastypie before 0.9.10 does not properly deserialize YAML data, which allows remote attackers to execute arbitrary Python code via vectors related to the yaml.load method...

CVE-2011-4104

CVE-2011-4104 affects Django Tastypie (older than 0.9.10). The vulnerability arises from the from_yaml deserialization in serializers.py, where YAML data is deserialized with yaml.load, allowing remote attackers to execute arbitrary Python code. The connected documents confirm the impact and vect...

CVE-2014-4104

The CVE-2014-4104 entry corresponds to multiple Internet Explorer UAF (Use-After-Free) vulnerabilities reported for IE 6–11, with several ZDI advisories (ZDI-14-306, -308, -317, -315, -312, -316, -318, -314, -313, etc.) describing memory corruption flaws in various IE object handlers (CAttrArray,...

Microsoft Internet Explorer CVE-2014-4104 Remote Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted webpage. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in...

CVE-2012-4104

CVE-2012-4104 affects Cisco UCS Fabric Interconnect’s image-download process, enabling absolute path traversal via a header-defined storage location. The underlying issue allows a local authenticated attacker to overwrite or delete arbitrary files on the filesystem by supplying a crafted image he...

[security bulletin] HPSBMA02606 SSRT100321 rev.1 - HP Insight Orchestration Software for Windows, Remote Arbitrary File Download, Unauthorized Access

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02573285 Version: 1 HPSBMA02606 SSRT100321 rev.1 - HP Insight Orchestration Software for Windows, Remote Arbitrary File Download, Unauthorized Access NOTICE: The information in this Security...

[security bulletin] HPSBMA02606 SSRT100321 rev.1 - HP Insight Orchestration Software for Windows, Remote Arbitrary File Download, Unauthorized Access

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02573285 Version: 1 HPSBMA02606 SSRT100321 rev.1 - HP Insight Orchestration Software for Windows, Remote Arbitrary File Download, Unauthorized Access NOTICE: The information in this Security...

CVE-2010-4104

CVE-2010-4104 affects HP Insight Orchestration before version 6.2. The vulnerability allows remote attackers to read arbitrary files via unknown vectors. The CVSSv2 base score is 5.0 (Network, Low interaction, Partial confidentiality impact). HP’s security bulletin HPSBMA02606/SECURITYVULNS:DOC:2...

CVE-2009-4104

CVE-2009-4104 affects the LyftenBloggie Joomla! component (com_lyftenbloggie) version 1.0.4. The vulnerability is a SQL injection via the author parameter to index.php, allowing remote attackers to execute arbitrary SQL commands. Root cause is improper handling/sanitization of user input in const...

CVE-2008-4104

Multiple open redirect vulnerabilities in Joomla! 1.5 before 1.5.7 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a "passed in" URL...

CVE-2008-4104

CVE-2008-4104 refers to multiple open redirect vulnerabilities in Joomla! 1.5, fixed in 1.5.7. The issues allow remote attackers to redirect users to arbitrary sites and facilitate phishing via a deliberately crafted URL parameter. Affected product: Joomla! core prior to 1.5.7. Root cause: improp...

CVE-2007-4104

WP-FeedStats WordPress plugin (before 2.4) contains multiple XSS vulnerabilities. Attackers can inject arbitrary web script or HTML via unspecified vectors, including an rss2 feed with an invalid or missing blog in the query string. Affects WP-FeedStats up to version 2.3; base CVSS from NVD is 4....

AOL Instant Messenger 6 Version Detection

Binary data 4104.prm...

CVE-2006-4104

The CVE-2006-4104 entry describes a Cross-site Scripting (XSS) vulnerability in MojoGallery’s admin.cgi. The underlying issue is an input handling flaw in the password input field that permits injection of arbitrary web script or HTML, enabling an attacker to potentially execute scripts in the co...