GLSA-201702-28 : QEMU: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201702-28 QEMU: Multiple vulnerabilities Multiple vulnerabilities have been discovered in QEMU. Please review the CVE identifiers referenced below for details. Impact : A local attacker could potentially execute arbitrary code wit...

Linux Kernel Denial of Service Vulnerability (CNVD-2017-01068)

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. A denial of service vulnerability exists in the Linux Kernel. An attacker could exploit this vulnerability to crash the host kernel, resulting in a denial of service...

FreeBSD : FreeBSD -- bhyve - privilege escalation vulnerability (a479a725-9adb-11e6-a298-14dae9d210b8)

An unchecked array reference in the VGA device emulation code could potentially allow guests access to the heap of the bhyve process. Since the bhyve process is running as root, this may allow guests to obtain full control of the hosts they are running on. Impact : For bhyve virtual machines with...

Juniper Networks Junos OS vMX Information Leak Vulnerability

Junos OS on vMX is prone to an information leak vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:juniper:junos"; if...

AIX OpenSSH Advisory : openssh_advisory8.asc

The remote AIX host has a version of OpenSSH installed that is affected by the following vulnerabilities : - A remote code execution vulnerability exists in the sshd server component of OpenSSH due to improper sanitization of X11 authentication credentials. An authenticated, remote attacker can...

Microsoft Windows Hyper-V Denial of Service Vulnerability (CNVD-2015-04693)

Microsoft Windows is a popular operating system.Microsoft Hyper-V is a server virtualization product based on the Virtual Machine Monitor. A security vulnerability exists in Microsoft Hyper-V that allows a local attacker to run a specially crafted application that triggers a buffer overflow to...

CVE-2015-3629

Libcontainer 1.6.0, as used in Docker Engine, allows local users to escape containerization "mount namespace breakout" and write to arbitrary file on the host system via a symlink attack in an image when respawning a container...

qemu, xen and VirtualBox OSE -- possible VM escape and code execution ("VENOM")

Jason Geffner, CrowdStrike Senior Security Researcher reports: VENOM, CVE-2015-3456, is a security vulnerability in the virtual floppy drive code used by many computer virtualization platforms. This vulnerability may allow an attacker to escape from the confines of an affected virtual machine VM...

docker: multiple issues

CVE-2014-9356 path traversal Path traversal attacks are possible in the processing of absolute symlinks. In checking symlinks for traversals, only relative links were considered. This allowed path traversals to exist where they should have otherwise been prevented. This was exploitable via both...

Typo3 3.5 b5 Showpic.PHP File Enumeration Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/6982/info TYPO3 is prone to a vulnerability that will allow remote attackers to enumerate whether or not files exist on the system hosting the software. This issue exists in the 'showpic.php' and 'thumbs.php' scripts. Thi...

[SECURITY] [DSA 2904-1] virtualbox security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2904-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff April 15, 2014 http://www.debian.org/security/faq -...

Oracle VM VirtualBox 4.0 - 'tracepath' Local Denial of Service

source: https://www.securityfocus.com/bid/60794/info Oracle VM VirtualBox is prone to a local denial-of-service vulnerability. Attackers can exploit this issue to cause the host system's network to become unusable, resulting in denial-of-service condition. VirtualBox 4.2.12 is affected; other...

DSA-2608-1 qemu - buffer overflow

Bulletin has no description...

Debian Security Advisory DSA 2337-1 (xen)

The remote host is missing an update to xen announced via advisory DSA 2337-1. OpenVAS Vulnerability Test $Id: deb23371.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2337-1 xen Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

Novell ZENWorks Software Packaging Antique ActiveX Control Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell ZENWorks. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists due to the inclusion an...

Debian DSA-2337-1 : xen - several vulnerabilities

Several vulnerabilities were discovered in the Xen virtual machine hypervisor. - CVE-2011-1166 A 64-bit guest can get one of its vCPUs into non-kernel mode without first providing a valid non-kernel pagetable, thereby locking up the host system. - CVE-2011-1583, CVE-2011-3262 Local users can caus...

FileCOPA FTP Server Multiple Directory Traversal Vulnerabilities

The host is running FileCOPA ftp Server and is prone to directory traversal vulnerabilities. OpenVAS Vulnerability Test $Id: gbfilecopaftpserverdirtravvun.nasl 5306 2017-02-16 09:00:16Z teissa $ FileCOPA FTP Server Multiple Directory Traversal Vulnerabilities Authors: Antu Sanadi Copyright:...

Small FTPD Server Directory Traversal Vulnerability

The host is running Small FTPD Server and is prone to directory traversal vulnerability. OpenVAS Vulnerability Test $Id: gbsmallftpdserverdirtravvun.nasl 5373 2017-02-20 16:27:48Z teissa $ Small FTPD Server Directory Traversal Vulnerability Authors: Antu Sanadi Copyright: Copyright c 2010 Greenbo...

Pre Web Host System - Authentication Bypass

Pre Web Host System - Authentication Bypass Exploit Title: Pre webhost System authentication bypass Date: 16th july 2010 Author: D4rk357 Critical:high contact:d4rk357atyahoodotin Price : 150$ Software Link:http://preproject.com/preweb.asp Greetz to :b0nd, Fbih2s,Beenu,rockey killer,The empty,...

Pre Web Host System - Authentication Bypass

Exploit Title: Pre webhost System authentication bypass Date: 16th july 2010 Author: D4rk357 Critical:high contact:d4rk357atyahoodotin Price : 150$ Software Link:http://preproject.com/preweb.asp Greetz to :b0nd, Fbih2s,Beenu,rockey killer,The empty, punter,eberly,prashant Shoutz to :...