368 matches found
AIX OpenSSH Advisory : openssh_advisory8.asc
The remote AIX host has a version of OpenSSH installed that is affected by the following vulnerabilities : - A remote code execution vulnerability exists in the sshd server component of OpenSSH due to improper sanitization of X11 authentication credentials. An authenticated, remote attacker can...
Microsoft Windows Hyper-V Denial of Service Vulnerability (CNVD-2015-04693)
Microsoft Windows is a popular operating system.Microsoft Hyper-V is a server virtualization product based on the Virtual Machine Monitor. A security vulnerability exists in Microsoft Hyper-V that allows a local attacker to run a specially crafted application that triggers a buffer overflow to...
CVE-2015-3629
Libcontainer 1.6.0, as used in Docker Engine, allows local users to escape containerization "mount namespace breakout" and write to arbitrary file on the host system via a symlink attack in an image when respawning a container...
qemu, xen and VirtualBox OSE -- possible VM escape and code execution ("VENOM")
Jason Geffner, CrowdStrike Senior Security Researcher reports: VENOM, CVE-2015-3456, is a security vulnerability in the virtual floppy drive code used by many computer virtualization platforms. This vulnerability may allow an attacker to escape from the confines of an affected virtual machine VM...
docker: multiple issues
CVE-2014-9356 path traversal Path traversal attacks are possible in the processing of absolute symlinks. In checking symlinks for traversals, only relative links were considered. This allowed path traversals to exist where they should have otherwise been prevented. This was exploitable via both...
Typo3 3.5 b5 Showpic.PHP File Enumeration Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/6982/info TYPO3 is prone to a vulnerability that will allow remote attackers to enumerate whether or not files exist on the system hosting the software. This issue exists in the 'showpic.php' and 'thumbs.php' scripts. Thi...
[SECURITY] [DSA 2904-1] virtualbox security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2904-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff April 15, 2014 http://www.debian.org/security/faq -...
Oracle VM VirtualBox 4.0 - 'tracepath' Local Denial of Service
source: https://www.securityfocus.com/bid/60794/info Oracle VM VirtualBox is prone to a local denial-of-service vulnerability. Attackers can exploit this issue to cause the host system's network to become unusable, resulting in denial-of-service condition. VirtualBox 4.2.12 is affected; other...
DSA-2608-1 qemu - buffer overflow
Bulletin has no description...
Debian Security Advisory DSA 2337-1 (xen)
The remote host is missing an update to xen announced via advisory DSA 2337-1. OpenVAS Vulnerability Test $Id: deb23371.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2337-1 xen Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...
Novell ZENWorks Software Packaging Antique ActiveX Control Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell ZENWorks. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists due to the inclusion an...
Debian DSA-2337-1 : xen - several vulnerabilities
Several vulnerabilities were discovered in the Xen virtual machine hypervisor. - CVE-2011-1166 A 64-bit guest can get one of its vCPUs into non-kernel mode without first providing a valid non-kernel pagetable, thereby locking up the host system. - CVE-2011-1583, CVE-2011-3262 Local users can caus...
FileCOPA FTP Server Multiple Directory Traversal Vulnerabilities
The host is running FileCOPA ftp Server and is prone to directory traversal vulnerabilities. OpenVAS Vulnerability Test $Id: gbfilecopaftpserverdirtravvun.nasl 5306 2017-02-16 09:00:16Z teissa $ FileCOPA FTP Server Multiple Directory Traversal Vulnerabilities Authors: Antu Sanadi Copyright:...
Small FTPD Server Directory Traversal Vulnerability
The host is running Small FTPD Server and is prone to directory traversal vulnerability. OpenVAS Vulnerability Test $Id: gbsmallftpdserverdirtravvun.nasl 5373 2017-02-20 16:27:48Z teissa $ Small FTPD Server Directory Traversal Vulnerability Authors: Antu Sanadi Copyright: Copyright c 2010 Greenbo...
Pre Web Host System - Authentication Bypass
Pre Web Host System - Authentication Bypass Exploit Title: Pre webhost System authentication bypass Date: 16th july 2010 Author: D4rk357 Critical:high contact:d4rk357atyahoodotin Price : 150$ Software Link:http://preproject.com/preweb.asp Greetz to :b0nd, Fbih2s,Beenu,rockey killer,The empty,...
Pre Web Host System - Authentication Bypass
Exploit Title: Pre webhost System authentication bypass Date: 16th july 2010 Author: D4rk357 Critical:high contact:d4rk357atyahoodotin Price : 150$ Software Link:http://preproject.com/preweb.asp Greetz to :b0nd, Fbih2s,Beenu,rockey killer,The empty, punter,eberly,prashant Shoutz to :...
VMWare multiple security vulnerabilities
Privilege escalation in guest system. Directory traversal on access from guest to host system...
Debian DSA-1799-1 : qemu - several vulnerabilities
Several vulnerabilities have been discovered in the QEMU processor emulator. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2008-0928 Ian Jackson discovered that range checks of file operations on emulated disk devices were insufficiently enforced. -...
[SECURITY] [DSA 1799-1] New qemu packages fix several vulnerabilities
------------------------------------------------------------------------ Debian Security Advisory DSA-1799-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff May 11, 2009 http://www.debian.org/security/faq -...