Important: Red Hat Security Advisory: qemu-kvm-rhev security update

Updated qemu-kvm-rhev packages that fix two security issues are now available for Red Hat Enterprise Virtualization Hypervisor 7. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

CVE-2015-5154

Heap-based buffer overflow in the IDE subsystem in QEMU, as used in Xen 4.5.x and earlier, when the container has a CDROM drive enabled, allows local guest users to execute arbitrary code on the host via unspecified ATAPI commands...

UBUNTU-CVE-2015-5154

Heap-based buffer overflow in the IDE subsystem in QEMU, as used in Xen 4.5.x and earlier, when the container has a CDROM drive enabled, allows local guest users to execute arbitrary code on the host via unspecified ATAPI commands...

SUSE-SU-2015:1455-1 Security update for kvm

kvm was updated to fix one security issue. This security issue was fixed: - CVE-2015-5154: Host code execution via IDE subsystem CD-ROM bsc938344...

SAP GUI DLL Loading Arbitrary Code Execution (Note 1511179)

The remote host is running a version of SAP GUI that reportedly insecurely looks in its current working directory when resolving DLLs such as 'MFC80LOC.DLL' and 'MFC80RUS.DLL'. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid72211; scriptversion"1.4";...

CVE-2013-5154

The CVE-2013-5154 entry describes a sandbox bypass in Apple iOS prior to 7, where the Sandbox subsystem bases the sandboxing requirement for a #! script on the script interpreter rather than the script itself. This allowed crafted applications that used #! to run scripts to bypass intended access...

Ovidentia 7.9.4 - Multiple Vulnerabilities

Ovidentia 7.9.4 - Multiple Vulnerabilities Ovidentia 7.9.4 Multiple Remote Vulnerabilities Vendor: Cantico Product web page: http://www.ovidentia.org Affected version: 7.9.4 Summary: Ovidentia is both a content management system CMS and a collaborative environment Groupware. Desc: Input passed...

Ovidentia 7.9.4 Cross Site Scripting / SQL Injection

Ovidentia 7.9.4 Multiple Remote Vulnerabilities Vendor: Cantico Product web page: http://www.ovidentia.org Affected version: 7.9.4 Summary: Ovidentia is both a content management system CMS and a collaborative environment Groupware. Desc: Input passed via several parameters is not properly...

CVE-2012-5154

CVE-2012-5154 affects Google Chrome on Windows: an integer overflow in shared memory allocation could cause a denial of service or possibly other impact in versions before 24.0.1312.52. This is documented in the NVD entry and echoed in OpenVAS/NASL entries, but exploitation status is not provided...

CVE-2011-5154

Multiple untrusted search path vulnerabilities in 1 SAPGui.exe and 2 BExAnalyzer.exe in SAP GUI 6.4 through 7.2 allow local users to gain privileges via a Trojan horse MFC80LOC.DLL file in the current working directory, as demonstrated by a directory that contains a .sap file. NOTE: some of these...

CVE-2011-5154

The CVE-2011-5154 entry covers SAP GUI 6.4–7.2 with two vulnerable executables (SAPGui.exe and BExAnalyzer.exe). The issue is an untrusted search path that allows privilege escalation via a Trojan horse MFC80LOC.DLL in the current working directory, demonstrated by a directory containing a .sap f...

CVE-2010-5154

Affected software: BitDefender Total Security 2010, version 13.0.20.347, on Windows XP. Vulnerability: a race condition during kernel-mode hook handling that lets local users bypass hook handlers and potentially run code that would otherwise be blocked by a handler, via certain user-space memory ...

CVE-2008-5154

bluetooth.rc in p3nfs 5.19 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/blue.log temporary file...

CVE-2008-5154

bluetooth.rc in p3nfs 5.19 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/blue.log temporary file...

CVE-2008-5154

bluetooth.rc in p3nfs 5.19 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/blue.log temporary file...

CVE-2008-5154

The CVE-2008-5154 entry concerns bluetooth.rc in p3nfs 5.19, where local users can overwrite arbitrary files by exploiting a symlink attack against the /tmp/blue.log file. This is a local-privilege issue resulting from improper handling of temporary file names, enabling a limited-access user to a...

openSUSE 10 Security Update : opera (opera-5154)

A flaw when processing images could crash opera. Attackers could potentially even exploit that to execute code. This update upgrades opera to version 9.27 to fix the problem. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted...

CVE-2007-5154

Aipo (Aimluck, Inc.) and Aipo ASP 3.0.1.0 and earlier are affected by a session fixation vulnerability. The issue allows an attacker to impersonate a user by obtaining or forcing a valid session ID, enabling potentially privileged actions once the user logs in. The JVN entry describes risk as use...

CVE-2006-5154

DeluxeBB 1.09 and earlier are affected by a PHP remote file inclusion in cp/sig.php. The vulnerability allows an attacker to execute arbitrary PHP code by supplying a malicious URL in the templatefolder parameter, enabling remote code execution. Affected component: cp/sig.php; root cause: unsafe ...