59 matches found
RHEL 5 : kvm (RHSA-2011:0028)
The remote Redhat Enterprise Linux 5 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2011:0028 advisory. KVM Kernel-based Virtual Machine is a full virtualization solution for Linux on AMD64 and Intel 64 systems. KVM is a Linux kernel module built for th...
CVE-2011-4525
CVE-2011-4525 affects Advantech/BroadWin WebAccess prior to 7.0. A remote attacker can cause the client to create and execute a batch file by injecting arbitrary web content, enabling potential remote code execution. ICS-CERT notes Advantech released WebAccess 7.0 to address most vulnerabilities;...
kvm security and bug fix update
kvm-83-224.0.1 - Added kvm-add-oracle-workaround-for-libvirt-bug.patch - Added kvm-Introduce-oel-machine-type.patch kvm-83-224.el5 - kvm-kernel-KVM-x86-zero-kvmvcpuevents-interrupt.pad.patch bz665407 - Resolves: bz665407 kvmvcpuevents.interrupt.pad must be zeroed - CVE: CVE-2010-4525 kvm-83-223.e...
Low: Red Hat Security Advisory: kvm security and bug fix update
Updated kvm packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating...
CVE-2010-4525
Linux kernel 2.6.33 and 2.6.34.y does not initialize the kvmvcpuevents-interrupt.pad structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via unspecified vectors...
CVE-2010-4525
Linux kernel 2.6.33 and 2.6.34.y does not initialize the kvmvcpuevents-interrupt.pad structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via unspecified vectors...
CVE-2010-4525
Linux kernel 2.6.33 and 2.6.34.y does not initialize the kvmvcpuevents-interrupt.pad structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via unspecified vectors...
CVE-2010-4525
CVE-2010-4525: The Linux kernel up to 2.6.34.y omits initialization of kvm_vcpu_events->interrupt.pad, enabling local attackers to read potentially sensitive data from kernel stack memory via unspecified vectors. The affected component is kernel/KVM (Linux kernel 2.6.33/2.6.34.y). Multiple adv...
CVE-2009-4525
CVE-2009-4525 is a Drupal Print module XSS vulnerability: versions 5.x before 5.x-4.9 and 6.x before 6.x-1.9 allow remote attackers to inject arbitrary web script or HTML via crafted data in a list of links. Remediation details are not provided in the supplied documents.
CVE-2008-4525
CVE-2008-4525 describes an SQL injection in AmpJuke 0.7.5, exploitable via a special parameter in a performerid action in index.php. The root cause is improper handling of user-supplied input, allowing arbitrary SQL execution by remote attackers (impact on confidentiality, integrity, and availabi...
CVE-2008-4525
creationtimestamp| type| source ---|---|--- 2008-10-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32461...
CVE-2007-4525
PHP remote file inclusion vulnerability in inc-calcul.php3 in SPIP 1.7.2 allows remote attackers to execute arbitrary PHP code via a URL in the squelettecache parameter, a different vector than CVE-2006-1702. NOTE: this issue has been disputed by third party researchers, stating that the...
CVE-2007-4525
PHP remote file inclusion vulnerability in inc-calcul.php3 in SPIP 1.7.2 allows remote attackers to execute arbitrary PHP code via a URL in the squelettecache parameter, a different vector than CVE-2006-1702. NOTE: this issue has been disputed by third party researchers, stating that the...
CVE-2007-4525
SPIP 1.7.2 is affected by a PHP remote file inclusion in inc-calcul.php3, where a URL supplied in the squelette_cache parameter can lead to arbitrary PHP code execution. The vector is distinct from CVE-2006-1702. Some third‑party researchers dispute the vulnerability due to claims about squelette...
CVE-2006-4525
CubeCart versions
CVE-2005-4525
CVE-2005-4525 affects the Sygate Protection Agent 5.0, build 6144, via the SmcGui.exe component. The described flaw is that a local user can trigger the privileged management GUI by launching SmcGui.exe and then terminating the process, which causes the high-privilege management interface to appe...
CVE-2023-4525
This CVE entry is rejected and not used; it does not represent an active vulnerability.
