Lucene search
+L

4447 matches found

Tenable Nessus
Tenable Nessus
•added 2015/09/18 12:00 a.m.•18 views

Google Drive File Download Detection (deprecated)

Binary data 8867.prm...

7.3AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2015/09/18 12:00 a.m.•18 views

Google Drive Detection

Binary data 8866.prm...

7.3AI score
SaveExploits0
osv_ubuntu
osv_ubuntu
•added 2015/09/11 12:00 a.m.•26 views

UBUNTU-CVE-2015-6855

hw/ide/core.c in QEMU does not properly restrict the commands accepted by an ATAPI device, which allows guest users to cause a denial of service or possibly have unspecified other impact via certain IDE commands, as demonstrated by a WINREADNATIVEMAX command to an empty drive, which triggers a...

7.5CVSS7AI score0.03502EPSS
SaveExploits0References5
myhack58
myhack58
•added 2015/09/09 12:00 a.m.•32 views

American Internet Emergency Response Center CERT: Seagate wireless hard drive to a vulnerability-vulnerability warning-the black bar safety net

! American Internet emergency center released a on Seagate wireless hard drive with a warning, because the products were found to have multiple vulnerabilities could be exploited by attackers to download to disk all of the files. The default“root”login American Internet emergency center noted:...

2.6AI score
SaveExploits0
Openbugbounty
Openbugbounty
•added 2015/08/25 6:12 p.m.•20 views

globus-drive.de XSS vulnerability

Vulnerable URL: http://www.globus-drive.de/ensdorf/search?query=italien%22%3E%3Csvg%3E%3Cscript%3E/%3C@/%3Ealert/XSSPOSED/%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at 30.01.2016 Latest check for patch:| 30.01.2016 22:17 GMT Vulnerability type:| XSS Vulnerability status:|...

6.3AI score
SaveExploits0
osv_debian
osv_debian
•added 2015/08/12 2:59 p.m.•19 views

DEBIAN-CVE-2015-5154

Heap-based buffer overflow in the IDE subsystem in QEMU, as used in Xen 4.5.x and earlier, when the container has a CDROM drive enabled, allows local guest users to execute arbitrary code on the host via unspecified ATAPI commands...

7.2CVSS8.9AI score0.0063EPSS
SaveExploits0References1
Prion
Prion
•added 2015/08/12 2:59 p.m.•40 views

Heap overflow

Heap-based buffer overflow in the IDE subsystem in QEMU, as used in Xen 4.5.x and earlier, when the container has a CDROM drive enabled, allows local guest users to execute arbitrary code on the host via unspecified ATAPI commands...

7.2CVSS8.1AI score0.0063EPSS
SaveExploits0References21Affected Software8
Cvelist
Cvelist
•added 2015/08/12 2:00 p.m.•47 views

CVE-2015-5154

Heap-based buffer overflow in the IDE subsystem in QEMU, as used in Xen 4.5.x and earlier, when the container has a CDROM drive enabled, allows local guest users to execute arbitrary code on the host via unspecified ATAPI commands...

7AI score0.0063EPSS
SaveExploits0References21
Debian CVE
Debian CVE
•added 2015/08/12 2:00 p.m.•49 views

CVE-2015-5154

Heap-based buffer overflow in the IDE subsystem in QEMU, as used in Xen 4.5.x and earlier, when the container has a CDROM drive enabled, allows local guest users to execute arbitrary code on the host via unspecified ATAPI commands...

7.2CVSS7.3AI score0.0063EPSS
SaveExploits0
CVE
CVE
•added 2015/08/12 2:00 p.m.•173 views

CVE-2015-5154

CVE-2015-5154 is a heap-based buffer overflow in QEMU’s IDE subsystem (ATAPI handling). A privileged guest with a CDROM drive enabled could potentially execute arbitrary host code via crafted ATAPI I/O. Public docs specify this as a host-attack surface when CD-ROM access is present; Debian securi...

7.2CVSS6.9AI score0.0063EPSS
SaveExploits0References21Affected Software1
Tenable Nessus
Tenable Nessus
•added 2015/08/05 12:00 a.m.•31 views

FreeBSD : qemu, xen-tools -- QEMU heap overflow flaw with certain ATAPI commands (da451130-365d-11e5-a4a5-002590263bf5)

The Xen Project reports : A heap overflow flaw was found in the way QEMU's IDE subsystem handled I/O buffer access while processing certain ATAPI commands. A privileged guest user in a guest with CDROM drive enabled could potentially use this flaw to execute arbitrary code on the host with the...

7.2CVSS7.9AI score0.0063EPSS
SaveExploits0References4
CNVD
CNVD
•added 2015/08/04 12:00 a.m.•15 views

Unspecified Vulnerability in IBM WebSphere DataPower XC10

IBM WebSphere DataPower XC10 is a caching platform from IBM in the United States. The platform allows distributed caching of data with little or no change to existing applications. A security vulnerability exists in IBM WebSphere DataPower XC10 versions 2.1 and 2.5 due to a program writing...

2.1CVSS6.3AI score0.00329EPSS
SaveExploits0References1
ThreatPost
ThreatPost
•added 2015/07/31 9:21 a.m.•41 views

Xen Patches VM Escape Flaw

The Xen Project has patched a serious vulnerability that could allow an attacker in a guest virtual machine to escape and gain the ability to run arbitrary code on the host machine. The vulnerability is in the QEMU open source machine emulator that ships as part of the Xen hypervisor. The problem...

7.2CVSS2.3AI score0.0063EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2015/07/29 12:00 a.m.•58 views

Scientific Linux Security Update : qemu-kvm on SL7.x x86_64 (20150727)

A heap buffer overflow flaw was found in the way QEMU's IDE subsystem handled I/O buffer access while processing certain ATAPI commands. A privileged guest user in a guest with the CDROM drive enabled could potentially use this flaw to execute arbitrary code on the host with the privileges of the...

7.2CVSS8AI score0.01594EPSS
SaveExploits2References3
RedHat Linux
RedHat Linux
•added 2015/07/28 5:50 p.m.•40 views

Important: Red Hat Security Advisory: qemu-kvm-rhev security update

Updated qemu-kvm-rhev packages that fix two security issues are now available for Red Hat Enterprise Linux OpenStack Platform 6 and Red Hat Enterprise Linux OpenStack Platform 5 for RHEL 7. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability...

7.2CVSS7.5AI score0.01594EPSS
SaveExploits2References3
ThreatPost
ThreatPost
•added 2015/07/28 10:49 a.m.•17 views

New Google Drive Phishing Scam Uncovered

Phishers have again leveraged users’ trust in Google with a newly discovered campaign designed to steal credentials that grant access to the multitude of Google’s online services. New phishing pages hosted on Google Drive were discovered by researcher Aditya K. Sood of Elastica Cloud Threat Labs...

7.3AI score
SaveExploits0References2
RedHat Linux
RedHat Linux
•added 2015/07/27 12:59 p.m.•17 views

qemu: ide: atapi: heap overflow during I/O buffer memory access

A heap buffer overflow flaw was found in the way QEMU's IDE subsystem handled I/O buffer access while processing certain ATAPI commands. A privileged guest user in a guest with the CDROM drive enabled could potentially use this flaw to execute arbitrary code on the host with the privileges of the...

7.2CVSS7.9AI score0.0063EPSS
SaveExploits0References4
Xen Project
Xen Project
•added 2015/07/27 12:00 p.m.•92 views

QEMU heap overflow flaw while processing certain ATAPI commands.

ISSUE DESCRIPTION The QEMU security team has predisclosed the following advisory: A heap overflow flaw was found in the way QEMU's IDE subsystem handled I/O buffer access while processing certain ATAPI commands. A privileged guest user in a guest with CDROM drive enabled could potentially use thi...

7.2CVSS7.4AI score0.0063EPSS
SaveExploits0
FreeBSD
FreeBSD
•added 2015/07/27 12:00 a.m.•37 views

qemu, xen-tools -- QEMU heap overflow flaw with certain ATAPI commands

The Xen Project reports: A heap overflow flaw was found in the way QEMU's IDE subsystem handled I/O buffer access while processing certain ATAPI commands. A privileged guest user in a guest with CDROM drive enabled could potentially use this flaw to execute arbitrary code on the host with the...

7.2CVSS7.4AI score0.0063EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2015/07/27 12:00 a.m.•47 views

CVE-2015-5154

Heap-based buffer overflow in the IDE subsystem in QEMU, as used in Xen 4.5.x and earlier, when the container has a CDROM drive enabled, allows local guest users to execute arbitrary code on the host via unspecified ATAPI commands...

7.2CVSS7.5AI score0.0063EPSS
SaveExploits0References4
Rows per page
Query Builder