PT-2019-2478 · Microsoft · Windows Hyper-V +1

Name of the Vulnerable Software and Affected Versions: Windows Hyper-V affected versions not specified Description: The issue exists due to insufficient input validation on the host server in the Hyper-V hardware virtualization system of the Windows operating system. This can allow a remote...

Windows Hyper-V Information Disclosure Vulnerability

An information disclosure vulnerability exists when Windows Hyper-V on a host operating system fails to properly validate input from an authenticated user on a guest operating system. To exploit the vulnerability, an attacker on a guest operating system could run a specially crafted application...

PT-2019-16962 · Ibm · Ibm Api Connect

Name of the Vulnerable Software and Affected Versions: IBM API Connect versions 5.0.0.0 through 5.0.8.6 Description: The issue allows app developers to exploit the Developer Portal and download arbitrary files from the host OS, potentially carrying out Server-Side Request Forgery SSRF attacks. SS...

Windows Hyper-V Information Disclosure Vulnerability

An information disclosure vulnerability exists when Windows Hyper-V on a host operating system fails to properly validate input from an authenticated user on a guest operating system. To exploit the vulnerability, an attacker on a guest operating system could run a specially crafted application...

Xen Denial of Service Vulnerability (CNVD-2019-07943)

Xen is an open source virtual machine monitor developed by the Xen Project. A denial-of-service vulnerability exists in 4.11.x and earlier versions of Xen on Intel x86 platforms, which can be exploited by a client operating system user to cause a denial of service host OS hang...

The vulnerability of the Microsoft Hyper-V operating system’s network switch allows a attacker to cause a failure in the host operating system’s maintenance.

The vulnerability of the Microsoft Hyper-V operating system’s network switch is due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure for the host operating system through a specially created payload...

The vulnerability of the Microsoft Hyper-V operating system’s network switch allows a attacker to cause a failure in the host operating system’s maintenance.

The vulnerability of the Microsoft Hyper-V operating system’s network switch is due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure for the host operating system through a specially created payload...

Microsoft Windows Hyper-V Remote Code Execution Vulnerability (CNVD-2019-00958)

Microsoft Windows Server 2019 and others are a series of operating systems released by Microsoft Corporation USA.Windows Hyper-V is one of the virtualization products that supports the creation of virtual machines in Windows. A remote code execution vulnerability exists in Microsoft Windows Hyper...

Microsoft Windows Hyper-V Remote Code Execution Vulnerability (CNVD-2018-26993)

Microsoft Windows 10 and others are products of Microsoft Corporation USA.Microsoft Windows 10 is an operating system for personal computers; Windows Server 2016 is a server operating system. A remote code execution hole exists in Microsoft Windows Hyper-V. The vulnerability stems from a program'...

Windows Hyper-V Information Disclosure Vulnerability

An information disclosure vulnerability exists when Windows Hyper-V on a host operating system fails to properly validate input from an authenticated user on a guest operating system. To exploit the vulnerability, an attacker on a guest operating system could run a specially crafted application...

CVE-2018-1118

CVE-2018-1118 affects the Linux kernel vhost path used by /dev/vhost-net. The issue is improper memory initialization in vhost/vhost.c:vhost_new_msg(), enabling a local unprivileged user to read kernel memory contents. The vulnerability arises from memory not being initialized before being passed...

CVE-2018-1118

Linux kernel vhost since version 4.8 does not properly initialize memory in messages passed between virtual guests and the host operating system in the vhost/vhost.c:vhostnewmsg function. This can allow local privileged users to read some kernel memory contents when reading from the /dev/vhost-ne...

CVE-2018-7669

An issue was discovered in Sitecore Sitecore.NET 8.1 rev. 151207 Hotfix 141178-1 and above. The 'Log Viewer' application is vulnerable to a directory traversal attack, allowing an attacker to access arbitrary files from the host Operating System using a...

Windows Hyper-V Information Disclosure Vulnerability

An information disclosure vulnerability exists when Windows Hyper-V on a host operating system fails to properly validate input from an authenticated user on a guest operating system. To exploit the vulnerability, an attacker on a guest operating system could run a specially crafted application...

Windows Hyper-V Information Disclosure Vulnerability

An information disclosure vulnerability exists when Windows Hyper-V on a host operating system fails to properly validate input from an authenticated user on a guest operating system. To exploit the vulnerability, an attacker on a guest operating system could run a specially crafted application...

Xen Denial of Service Vulnerability (CNVD-2018-04652)

Xen is an open source virtual machine monitor developed by the Xen Project. A denial of service vulnerability exists in 4.10.x and earlier versions of Xen. x86 PV guest OS users can exploit this vulnerability to cause a denial of service host OS CPU hang via a non-preemptive L3/L4 page table...

CVE-2018-1165

This vulnerability allows local attackers to escalate privileges on vulnerable installations of Joyent SmartOS release-20170803-20170803T064301Z. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw...

CVE-2017-12342

A vulnerability in the Open Agent Container OAC feature of Cisco Nexus Series Switches could allow an unauthenticated, local attacker to read and send packets outside the scope of the OAC. The vulnerability is due to insufficient internal security measures in the OAC feature. An attacker could...

CVE-2017-2341

An insufficient authentication vulnerability on platforms where Junos OS instances are run in a virtualized environment, may allow unprivileged users on the Junos OS instance to gain access to the host operating environment, and thus escalate privileges. Affected releases are Juniper Networks Jun...

Cisco IOS XR Software Local Command Injection Vulnerability

Cisco IOS is the interconnected Internet operating system used on most Cisco Systems routers and network switches. Cisco IOS XR Software has a security vulnerability in the CLI implementation, where an authenticated local attacker can execute arbitrary commands with root privileges on the host...