827 matches found
Use-After-Free
QEMU 5.0.0 has a use-after-free. The vulnerability exists in hw/usb/hcd-xhci.c because the usbpacketmap return value is not checked which allows an attacker to cause an application crash...
CVE-2020-28916
hw/net/e1000ecore.c in QEMU 5.0.0 has an infinite loop via an RX descriptor with a NULL buffer address...
DEBIAN-CVE-2020-28916
hw/net/e1000ecore.c in QEMU 5.0.0 has an infinite loop via an RX descriptor with a NULL buffer address...
Null pointer dereference
hw/net/e1000ecore.c in QEMU 5.0.0 has an infinite loop via an RX descriptor with a NULL buffer address...
CVE-2020-28916
hw/net/e1000ecore.c in QEMU 5.0.0 has an infinite loop via an RX descriptor with a NULL buffer address...
Zabbix 5.0.0 Cross Site Scripting
Exploit Title: Zabbix 5.0.0 - Stored XSS via URL Widget Iframe Date: 8/11/2020 Exploit Author: Shwetabh Vishnoi Vendor Homepage: https://www.zabbix.com/ Software Link: https://www.zabbix.com/download Affected Version: Zabbix before 3.0.32rc1, 4.x before 4.0.22rc1, 4.1.x through 4.4.x before...
Zabbix 5.0.0 - Stored XSS via URL Widget Iframe
Exploit Title: Zabbix 5.0.0 - Stored XSS via URL Widget Iframe Date: 8/11/2020 Exploit Author: Shwetabh Vishnoi Vendor Homepage: https://www.zabbix.com/ Software Link: https://www.zabbix.com/download Affected Version: Zabbix before 3.0.32rc1, 4.x before 4.0.22rc1, 4.1.x through 4.4.x before...
Stack overflow
hw/usb/hcd-ohci.c in QEMU 5.0.0 has a stack-based buffer over-read via values obtained from the host controller driver...
CVE-2020-25624
hw/usb/hcd-ohci.c in QEMU 5.0.0 has a stack-based buffer over-read via values obtained from the host controller driver...
JVN#57942454: Cybozu Garoon vulnerable to improper input validation
Cybozu Garoon provided by Cybozu, Inc. contains an improper input validation vulnerability CWE-20. Impact A user who can login to the product may delete some data of the bulletin board. Solution Update the software and Apply the patch Update the software to Cybozu Garoon version 5.0.2, and then...
Security Bulletin: Multiple vulnerabilities affect the IBM Spectrum Scale GUI.
Summary Vulnerabilities exist in all levels of IBM Spectrum Scale GUI. A fix for this vulnerability is available. Vulnerability Details CVEID: CVE-2020-4749 DESCRIPTION: IBM Spectrum Scale does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get t...
CVE-2020-25741
fdctrlwritedata in hw/block/fdc.c in QEMU 5.0.0 has a NULL pointer dereference via a NULL block pointer for the current drive...
Null pointer dereference
fdctrlwritedata in hw/block/fdc.c in QEMU 5.0.0 has a NULL pointer dereference via a NULL block pointer for the current drive...
CVE-2020-25741
fdctrlwritedata in hw/block/fdc.c in QEMU 5.0.0 has a NULL pointer dereference via a NULL block pointer for the current drive...
CVE-2020-25741
fdctrlwritedata in hw/block/fdc.c in QEMU 5.0.0 has a NULL pointer dereference via a NULL block pointer for the current drive...
CVE-2020-25741
fdctrlwritedata in hw/block/fdc.c in QEMU 5.0.0 has a NULL pointer dereference via a NULL block pointer for the current drive...
CVE-2020-25741
fdctrlwritedata in hw/block/fdc.c in QEMU 5.0.0 has a NULL pointer dereference via a NULL block pointer for the current drive...
CVE-2020-25085
QEMU 5.0.0 has a heap-based Buffer Overflow in flatviewreadcontinue in exec.c because hw/sd/sdhci.c mishandles a write operation in the SDHCBLKSIZE case...