CVE-2015-4105

Xen 3.3.x through 4.5.x enables logging for PCI MSI-X pass-through error messages, which allows local x86 HVM guests to cause a denial of service host disk consumption via certain invalid operations...

SUSE-SU-2015:1042-1 Security update for xen

Xen was updated to fix seven security issues and one non-security bug. The following vulnerabilities were fixed: CVE-2015-4103: Potential unintended writes to host MSI message data field via qemu XSA-128 bnc931625 CVE-2015-4104: PCI MSI mask bits inadvertently exposed to guests XSA-129 bnc931626...

OracleVM 3.2 : xen (OVMSA-2015-0063)

The remote OracleVM system is missing necessary patches to address critical security updates : - xen/pt: unknown PCI config space fields should be read-only ... by default. Add a per-device 'permissive' mode similar to pciback's to allow restoring previous behavior and hence break security again,...

CVE-2014-4105

CVE-2014-4105 is linked to multiple Microsoft Internet Explorer use-after-free vulnerabilities described in ZDI advisories (e.g., ZDI-14-306, -14-308, -14-317, -14-315, -14-312, -14-316, -14-318, -14-314, -14-313). These entries indicate remote code execution via crafted web content, requiring us...

Microsoft Internet Explorer CVE-2014-4105 Remote Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted webpage. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in...

CVE-2012-4105

The CVE-2012-4105 issue affects the Cisco UCS fabric interconnect; the vulnerability arises from improper filtering of user-supplied parameters in the debug hardware command, allowing an authenticated, local attacker to crash the FI (DoS) via crafted parameters (Bug ID CSCtq86468). Affected compo...

Ubuntu Update for lightdm USN-1262-1

Ubuntu Update for Linux kernel vulnerabilities USN-1262-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN12621.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for lightdm USN-1262-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This...

Ubuntu: Security Advisory (USN-1262-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2011-4105

CVE-2011-4105 affects LightDM prior to 1.0.6. A local user can change the ownership of arbitrary files via a symlink attack on ~/.Xauthority. This is a local-privilege/teardown-style issue, with low CVSS in the base data but clear impact on file ownership. Remediation: upgrade LightDM to 1.0.6 or...

Ubuntu 11.10 : lightdm vulnerabilities (USN-1262-1)

It was discovered that Light Display Manager incorrectly handled privileges when reading .dmrc files. A local attacker could exploit this issue to read arbitrary configuration files, bypassing intended permissions. CVE-2011-3153 It was discovered that Light Display Manager incorrectly handled lin...

USN-1262-1: Light Display Manager vulnerabilities

It was discovered that Light Display Manager incorrectly handled privileges when reading .dmrc files. A local attacker could exploit this issue to read arbitrary configuration files, bypassing intended permissions. CVE-2011-3153 It was discovered that Light Display Manager incorrectly handled lin...

VulnCheck KEV: CVE-2007-4105

A certain ActiveX control in BaiduBar.dll in Baidu Soba Search Bar 5.4 allows remote attackers to execute arbitrary code via a request containing "a link to download and a file to execute," possibly involving remote file inclusion...

[security bulletin] HPSBMA02606 SSRT100321 rev.1 - HP Insight Orchestration Software for Windows, Remote Arbitrary File Download, Unauthorized Access

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02573285 Version: 1 HPSBMA02606 SSRT100321 rev.1 - HP Insight Orchestration Software for Windows, Remote Arbitrary File Download, Unauthorized Access NOTICE: The information in this Security...

[security bulletin] HPSBMA02606 SSRT100321 rev.1 - HP Insight Orchestration Software for Windows, Remote Arbitrary File Download, Unauthorized Access

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02573285 Version: 1 HPSBMA02606 SSRT100321 rev.1 - HP Insight Orchestration Software for Windows, Remote Arbitrary File Download, Unauthorized Access NOTICE: The information in this Security...

CVE-2010-4105

HP Insight Orchestration for Windows is affected by CVE-2010-4105: prior to v6.2, remote attackers can bypass access controls and potentially read/modify data or gain unauthorized access. The HP security bulletin HPSBMA02606/SSRT100321 rev.1 states vulnerable versions are HP Insight Orchestration...

CVE-2009-4105

creationtimestamp| type| source ---|---|--- 2009-11-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10223...

CVE-2008-4105

Affected product: Joomla! 1.5 (before 1.5.7). The issue arises from JRequest::setVar not being sanitized, allowing remote attackers to perform variable injection with unspecified impact. Base CVSS v2.0 score 7.5 (HIGH) with network access, low attack complexity, no authentication required. Remedi...

CVE-2007-4105

A certain ActiveX control in BaiduBar.dll in Baidu Soba Search Bar 5.4 allows remote attackers to execute arbitrary code via a request containing "a link to download and a file to execute," possibly involving remote file inclusion...

CVE-2007-4105

The Baidu Soba Search Bar 5.4 is vulnerable to remote code execution due to a security weakness in the BaiduBar.dll ActiveX control. A remote attacker can exploit this by sending a request containing a link to download and a file to execute, potentially leveraging remote file inclusion . This all...

CVE-2007-4105

A certain ActiveX control in BaiduBar.dll in Baidu Soba Search Bar 5.4 allows remote attackers to execute arbitrary code via a request containing "a link to download and a file to execute," possibly involving remote file inclusion...