CVE-2014-8595: Undefined Security Weakness

arch/x86/x86emulate/x86emulate.c in Xen 3.2.1 through 4.4.x does not properly check privileges, which allows local HVM guest users to gain privileges or cause a denial of service crash via a crafted 1 CALL, 2 JMP, 3 RETF, 4 LCALL, 5 LJMP, or 6 LRET far branch instruction...

Missing privilege level checks in x86 emulation of far branches

ISSUE DESCRIPTION The emulation of far branch instructions CALL, JMP, and RETF in Intel assembly syntax, LCALL, LJMP, and LRET in AT&T assembly syntax incompletely performs privilege checks. However these instructions are not usually handled by the emulator. Exceptions to this are - when a memory...

USN-2319-2 openjdk-7 regression

USN-2319-1 fixed vulnerabilities in OpenJDK 7. Due to an upstream regression, verifying of the init method call would fail when it was done from inside a branch when stack frames are activated. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Several...

CVE-2014-5023

Repository.php in Gitter, as used in Gitlist, allows remote attackers with commit privileges to execute arbitrary commands via shell metacharacters in a branch name, as demonstrated by a "git checkout -b" command...

Command injection

Repository.php in Gitter, as used in Gitlist, allows remote attackers with commit privileges to execute arbitrary commands via shell metacharacters in a branch name, as demonstrated by a "git checkout -b" command...

CVE-2014-5023

CVE-2014-5023 : In Gitter (as used by Gitlist), Repository.php allowed remote attackers with commit privileges to run arbitrary commands via shell metacharacters in a branch name, e.g., using a malicious "git checkout -b". The NVD entry lists a MEDIUM 6.8 CVSS score. Connected sources (Red Hat, C...

CVE-2014-5023: Undefined Security Weakness

Repository.php in Gitter, as used in Gitlist, allows remote attackers with commit privileges to execute arbitrary commands via shell metacharacters in a branch name, as demonstrated by a "git checkout -b" command...

HP Intelligent Management Center Branch Intelligent Management Module 7.x < 7.0-E0201P02 Multiple Vulnerabilities

The version of the HP Intelligent Management Center Branch Intelligent Management System BIMS module on the remote host is version 7.x prior to 7.0-E0201P02 and has multiple vulnerabilities that could allow a remote attacker to access sensitive information via unspecified vectors. %NASLMINLEVEL...

CVE-2014-2618

Unspecified vulnerability in HP Intelligent Management Center iMC before 7.0 E02020P03 and Branch Intelligent Management System BIMS before 7.0 E0201P02 allows remote attackers to obtain sensitive information via unknown vectors, aka ZDI-CAN-2080...

CVE-2014-2620

Unspecified vulnerability in HP Intelligent Management Center iMC before 7.0 E02020P03 and Branch Intelligent Management System BIMS before 7.0 E0201P02 allows remote attackers to obtain sensitive information via unknown vectors, aka ZDI-CAN-2089...

CVE-2014-2621

Unspecified vulnerability in HP Intelligent Management Center iMC before 7.0 E02020P03 and Branch Intelligent Management System BIMS before 7.0 E0201P02 allows remote attackers to obtain sensitive information via unknown vectors, aka ZDI-CAN-2090...

CVE-2014-2619

Unspecified vulnerability in HP Intelligent Management Center iMC before 7.0 E02020P03 and Branch Intelligent Management System BIMS before 7.0 E0201P02 allows remote attackers to obtain sensitive information via unknown vectors, aka ZDI-CAN-2088...

Code injection

Unspecified vulnerability in HP Intelligent Management Center iMC before 7.0 E02020P03 and Branch Intelligent Management System BIMS before 7.0 E0201P02 allows remote authenticated users to obtain sensitive information or modify data via unknown vectors, aka ZDI-CAN-2312...

CVE-2014-2618

Unspecified vulnerability in HP Intelligent Management Center iMC before 7.0 E02020P03 and Branch Intelligent Management System BIMS before 7.0 E0201P02 allows remote attackers to obtain sensitive information via unknown vectors, aka ZDI-CAN-2080...

Code injection

Unspecified vulnerability in HP Intelligent Management Center iMC before 7.0 E02020P03 and Branch Intelligent Management System BIMS before 7.0 E0201P02 allows remote attackers to obtain sensitive information via unknown vectors, aka ZDI-CAN-2088...

CVE-2014-2622

CVE-2014-2622 affects HP Intelligent Management Center (iMC) prior to 7.0 E02020P03 and HP Branch Intelligent Management System (BIMS) prior to 7.0 E0201P02, enabling remote authenticated attackers to obtain sensitive information or modify data via unknown vectors (ZDI-CAN-2312). The accompanying...

CVE-2014-2620

Unspecified vulnerability in HP Intelligent Management Center iMC before 7.0 E02020P03 and Branch Intelligent Management System BIMS before 7.0 E0201P02 allows remote attackers to obtain sensitive information via unknown vectors, aka ZDI-CAN-2089...

CVE-2014-2621

HP iMC (HP Intelligent Management Center) and HP BIMS (Branch Intelligent Management System) are vulnerable to a remote information disclosure in versions before 7.0 E02020P03 (iMC) and before 7.0 E0201P02 (BIMS). The issue is identified as CVE-2014-2621 (ZDI-2090). The HP Security Bulletin HPSBH...

CVE-2014-2619

CVE-2014-2619 is an information-disclosure vulnerability affecting HP Intelligent Management Center (iMC) prior to 7.0 E02020P03 and HP Branch Intelligent Management System (BIMS) prior to 7.0 E0201P02. The HP advisory (HPSBHF02913) indicates remote disclosure of information without authenticatio...

CVE-2014-2622

Unspecified vulnerability in HP Intelligent Management Center iMC before 7.0 E02020P03 and Branch Intelligent Management System BIMS before 7.0 E0201P02 allows remote authenticated users to obtain sensitive information or modify data via unknown vectors, aka ZDI-CAN-2312...