CVE-2016-6898

XML external entity XXE vulnerability in the Hyper Management Module HMM in Huawei E9000 rack servers with software before V100R001C00SPC296 allows remote authenticated users to read arbitrary files or cause a denial of service web service outage via a crafted XML document...

MS16-100: Description of the security update for Secure Boot: August 9, 2016

None None...

MS16-100: Security update for Secure Boot: August 9, 2016

Resolves a vulnerability in Windows that could allow security feature bypass if an attacker installs an affected boot manager and bypasses Windows security features.SummaryThis security update resolves a vulnerability in Microsoft Windows. The vulnerability could allow security feature bypass if ...

MGASA-2016-0259 Updated VirtualBox 5.1 packages fix security vulnerability

This update provides the new VirtualBox 5.1 series, currently based on 5.1.2 providing several perfomance enhancements The highlights include: VMM: new APIC and I/O APIC implementations that result in significantly improved performance in certain situations for example with networking VMM: activa...

multi-OS restore fails on Hyper-V 2008R2

To restore individual files and folders from file systems other than Microsoft Windows, you can use the multi-OS File-Level Restore wizard. To restore files from VM guest OS, Veeam Backup & Replic...

Linux kernel KVM Denial of Service Vulnerability

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the U.S. KVM Kernel-based Virtual Machine is a virtualization infrastructure used in it. A denial of service vulnerability exists in Linux kernel KVM. An attacker can exploit this vulnerability ...

AskAI (=0.1.0), BeerHolderBot (>=0.1.0 <=0.3.8) +15013 more potentially affected by CVE-2016-10932 via hyper (>=0.0.1 <=0.9.18)

hyper CARGO version =0.0.1, =0.1.0, =0.1.0, =1.0.2, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =1.0.0, =1.0.1, =0.0.2, =0.1.0, =0.1.2 and more Source cves: CVE-2016-10932 Source advisory: OSV:RUSTSEC-2016-0002...

HTTPS MitM vulnerability due to lack of hostname verification

When used on Windows platforms, all versions of Hyper prior to 0.9.4 did not perform hostname verification when making HTTPS requests. This allows an attacker to perform MitM attacks by preventing any valid CA-issued certificate, even if there's a hostname mismatch. The problem was addressed by...

RUSTSEC-2016-0002 HTTPS MitM vulnerability due to lack of hostname verification

When used on Windows platforms, all versions of Hyper prior to 0.9.4 did not perform hostname verification when making HTTPS requests. This allows an attacker to perform MitM attacks by preventing any valid CA-issued certificate, even if there's a hostname mismatch. The problem was addressed by...

The vulnerability of the Windows operating system, which allows a perpetrator to obtain confidential information

The vulnerability of the Hyper-V hardware virtualization technology in the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker, operating locally, to obtain confidential information through a specially created...

Vulnerability of the Windows operating system, allowing a perpetrator to execute arbitrary code

The vulnerability of the Hyper-V hardware virtualization technology in the Windows operating system is related to lack of access control mechanisms. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created application...

The vulnerability of the Windows operating system, which allows a perpetrator to obtain confidential information

The vulnerability of the Hyper-V hardware virtualization technology in the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker, operating locally, to obtain confidential information through a specially created...

Hyper-V - vmswitch.sys VmsMpCommonPvtHandleMulticastOids Guest to Host Kernel-Pool Overflow

Exploit for windows platform in category dos / poc / Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=688 This function is reachable by sending a RNDIS Set request with OID 0x01010209 OID8023MULTICASTLIST from the Guest to the Host. This function potentially allocates a buffer...

Hyper-V - 'vmswitch.sys' VmsMpCommonPvtHandleMulticastOids Guest to Host Kernel-Pool Overflow

/ Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=688 This function is reachable by sending a RNDIS Set request with OID 0x01010209 OID8023MULTICASTLIST from the Guest to the Host. This function potentially allocates a buffer based on the addresses sent. The number of entries is...

Hyper-V - vmswitch.sys VmsMpCommonPvtHandleMulticastOids Guest to Host Kernel-Pool Overflow

Hyper-V - vmswitch.sys VmsMpCommonPvtHandleMulticastOids Guest to Host Kernel-Pool Overflow / Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=688 This function is reachable by sending a RNDIS Set request with OID 0x01010209 OID8023MULTICASTLIST from the Guest to the Host. This...

Release Notes for Veeam Management Pack 8.0 Update 2

Challenge Release Notes for Veeam Management Pack 8.0 Update 2. Cause Please confirm you are running Veeam Management Pack 8.0 prior to installing this update. You can check this in Operations Manager console under Administration | Management Packs, the build number should be 8.0.0.2218 or later...

Microsoft Windows Hyper-V Information Leakage Vulnerability

Microsoft Windows is a family of operating systems from Microsoft Corporation, U.S.A. Hyper-V is one of the virtualization products. An information leakage vulnerability exists in Hyper-V for Microsoft Windows, which arises from a program's failure to properly validate input from an authenticated...

Microsoft Windows Hyper-V Remote Code Execution Vulnerability

Microsoft Windows is a series of operating systems from Microsoft.Hyper-V is one of the virtualization products. A remote code execution vulnerability exists in Hyper-V for Microsoft Windows due to the program failing to properly validate authenticated user input on a guest operating system. An...

Microsoft Windows Hyper-V Information Leakage Vulnerability (CNVD-2016-02242)

Microsoft Windows is a family of operating systems from Microsoft Corporation, U.S.A. Hyper-V is one of the virtualization products. An information leakage vulnerability exists in Hyper-V for Microsoft Windows, which arises from a program's failure to properly validate input from an authenticated...

Microsoft Windows Hyper-V Multiple Vulnerabilities (3143118)

This host is missing an important security update according to Microsoft Bulletin MS16-045 SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...