328 matches found
QEMU 'hw/net/vmxnet3.c' Denial of Service Vulnerability
QEMU is a simulation processor software developed by French programmer Fabrice Bellard. The software is fast and cross-platform. A denial-of-service vulnerability exists in QEMU 'hw/net/vmxnet3.c', which allows attackers to exploit the vulnerability to crash the application, resulting in a denial...
The vulnerability in Microsoft.NET Framework software allows a malicious attacker to compromise the accessibility of protected information.
Vulnerability exists in Microsoft ASP.NET, allowing attackers to cause server failures in ASP.NET applications...
Microsoft ASP.NET Cross-Site Request Forgery Vulnerability
Microsoft ASP.NET, part of .NET FrameWork, is a Microsoft technology that is a server-side scripting technology that enables scripts embedded in Web pages to be executed by Internet servers. Microsoft ASP.NET suffers from a cross-site request forgery vulnerability that could allow a remote attack...
The vulnerability of the Microsoft .NET Framework software platform allows a perpetrator to inject arbitrary web or HTML code.
The vulnerability of the ASP.NET software platform, Microsoft .NET Framework, exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to inject any desired web or HTML code using a specially crafted variable value...
kernel: vhost-net: insufficiency in handling of big packets in handle_rx()
drivers/vhost/net.c in the Linux kernel before 3.13.10, when mergeable buffers are disabled, does not properly validate packet lengths, which allows guest OS users to cause a denial of service memory corruption and host OS crash or possibly gain privileges on the host OS via crafted packets,...
USN-2182-1 qemu, qemu-kvm vulnerabilities
Michael S. Tsirkin discovered that QEMU incorrectly handled vmxnet3 devices. A local guest could possibly use this issue to cause a denial of service, or possibly execute arbitrary code on the host. This issue only applied to Ubuntu 13.10 and Ubuntu 14.04 LTS. CVE-2013-4544 Michael S. Tsirkin...
NetBSD 5.1 - 'libc/net' Multiple Stack Buffer Overflows
// source: https://www.securityfocus.com/bid/48528/info NetBSD is prone to a stack-based buffer-overflow vulnerability affecting multiple functions in the 'libc/net' library. Successful exploits may allow an attacker to execute arbitrary code in the context of the application using the affected...
Old Y article management system v2. 5 sp2 SQL injection&Cookie spoofing vulnerability-vulnerability warning-the black bar safety net
Old Y article management system v2. 5 sp2/user/ 'UserLogin'. asp file there is a SQL injection vulnerability, a malicious user can exploit to give the database any data. In addition the background of the landing of improper handling, caused by the falsification of the management account password,...