[SECURITY] [DSA 3286-1] xen security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3286-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff June 13, 2015 https://www.debian.org/security/faq -...

[USN-2630-1] QEMU vulnerabilities

========================================================================== Ubuntu Security Notice USN-2630-1 June 10, 2015 qemu, qemu-kvm vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivative...

DSA-3286-1 xen - security update

Bulletin has no description...

[SECURITY] [DSA 3284-1] qemu security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3284-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso June 13, 2015 https://www.debian.org/security/faq -...

SUSE SLED12 / SLES12 Security Update : xen (SUSE-SU-2015:1042-1)

Xen was updated to fix seven security issues and one non-security bug. The following vulnerabilities were fixed : - CVE-2015-4103: Potential unintended writes to host MSI message data field via qemu XSA-128 bnc931625 - CVE-2015-4104: PCI MSI mask bits inadvertently exposed to guests XSA-129...

Citrix XenServer Multiple Security Updates (CTX201145)

A number of security vulnerabilities have been identified in Citrix XenServer that may allow a malicious administrator of a guest VM to crash the host. These vulnerabilities affect all currently supported versions of Citrix XenServer up to and including Citrix XenServer 6.5 Service Pack 1...

CVE-2015-4106

QEMU does not properly restrict write access to the PCI config space for certain PCI pass-through devices, which might allow local x86 HVM guests to gain privileges, cause a denial of service host crash, obtain sensitive information, or possibly have other unspecified impact via unknown vectors...

CVE-2015-4106

CVE-2015-4106 : QEMU does not properly restrict write access to the PCI config space for certain PCI passthrough devices, which the documents describe as enabling local x86 HVM guests to gain privileges, cause host crashes, obtain sensitive information, or suffer other unspecified impact. The con...

SUSE-SU-2015:1042-1 Security update for xen

Xen was updated to fix seven security issues and one non-security bug. The following vulnerabilities were fixed: CVE-2015-4103: Potential unintended writes to host MSI message data field via qemu XSA-128 bnc931625 CVE-2015-4104: PCI MSI mask bits inadvertently exposed to guests XSA-129 bnc931626...

OracleVM 3.2 : xen (OVMSA-2015-0063)

The remote OracleVM system is missing necessary patches to address critical security updates : - xen/pt: unknown PCI config space fields should be read-only ... by default. Add a per-device 'permissive' mode similar to pciback's to allow restoring previous behavior and hence break security again,...

CVE-2014-4106

Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-2799, CVE-2014-4059, CVE-2014-4065,...

CVE-2014-4106

CVE-2014-4106 covers a remote code execution/memory corruption vulnerability in Microsoft Internet Explorer (versions 6–11) triggered by a crafted web page. Connected documents (ZDI advisories) detail multiple Use-After-Free flaws in IE components (e.g., CAttrArray, CFieldSetLayout, CTableCell, C...

Microsoft Internet Explorer CVE-2014-4106 Remote Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted webpage. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in...

Fedora Update for thunderbird FEDORA-2014-4106

Check for the Version of thunderbird OpenVAS Vulnerability Test Fedora Update for thunderbird FEDORA-2014-4106 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

CVE-2011-4106

TimThumb timthumb.php before 2.0 does not validate the entire source with the domain white list, which allows remote attackers to upload and execute arbitrary code via a URL containing a white-listed domain in the src parameter, then accessing it via a direct request to the file in the cache...

CVE-2011-4106

TimThumb (timthumb.php) prior to version 2.0 contains a flaw where the code does not validate the entire image source against the domain whitelist. This allows a remote attacker to craft a URL with a whitelisted domain in the src parameter to upload and subsequently access a file in the cache dir...

CVE-2011-4106

creationtimestamp| type| source ---|---|--- 2011-08-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/17602 2026-06-19 16:45:36+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a009c5fa-c459-4903-9955-a769dbabfd23 2026-06-23 14:04:09+00:00|...

[security bulletin] HPSBMA02607 SSRT100214 rev.1 - HP Insight Control for Linux, Remote Cross Site Request Forgery (CSRF)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02573692 Version: 1 HPSBMA02607 SSRT100214 rev.1 - HP Insight Control for Linux, Remote Cross Site Request Forgery CSRF NOTICE: The information in this Security Bulletin should be acted upon as...

CVE-2010-4106

Cross-site request forgery CSRF vulnerability in HP Insight Control for Linux before 6.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2010-4106

HP Insight Control for Linux is affected by a Cross-Site Request Forgery (CSRF) vulnerability in versions prior to 6.2, which could allow remote attackers to hijack the authentication of unspecified victims via unknown vectors. The issue, CVE-2010-4106, has a CVSSv2 base score of 6.8 (MEDIUM). HP...