8037 matches found
CVE-2015-3710
CVE-2015-3710 affects Apple Mail on iOS <= 8.3/8.4? and OS X
Fedora 22 : xen-4.5.0-11.fc22 (2015-10001)
stubs-32.h is back, so revert to previous behaviour. Heap overflow in QEMU PCNET controller, allowing guest-host escape XSA-135, CVE-2015-3209. GNTTABOPswapgrantref operation misbehavior XSA-134, CVE-2015-4163. vulnerability in the iret hypercall handler XSA-136, CVE-2015-4164. Note that Tenable...
kernel: pipe: iovec overrun leading to memory corruption
It was found that the Linux kernel's implementation of vectored pipe read and write functionality did not take into account the I/O vectors that were already processed when retrying after a failed atomic access operation, potentially resulting in memory corruption due to an I/O vector array...
ClickHeat Cross-Site Request Forgery Vulnerability
ClickHeat is Labsmedia Cloud Computing Center developed a set of open source website heat map generation tool . The tool can count the heat distribution map of user clicks on a page , and support for Chinese display . ClickHeat 1.14 and previous versions of cross-site request forgery vulnerabilit...
UBUNTU-CVE-2015-4163
GNTTABOPswapgrantref in Xen 4.2 through 4.5 does not check the grant table operation version, which allows local guest domains to cause a denial of service NULL pointer dereference via a hypercall without a GNTTABOPsetuptable or GNTTABOPsetversion...
Multiple Local Memory Corruption Vulnerabilities in Linux Kernel 'fs/pipe.c'
The Linux Kernel is the kernel of the Linux operating system. A memory corruption vulnerability exists in the Linux kernel's implementation of the vectored pipe read/write function, which fails to take into account already processed I/O vectors when retrying after an atomic access operation has...
Backup Copy Job Failures when using ExaGrid de-duplicating storage
Challenge Backup Copy Jobs can fail when writing to ExaGrid storage. Cause De-duplicating storage can incorrectly update existing backup files during Veeam "merge" operation. Solution Make sure your ExaGrid Storage firmware version is 4.7.0 P52 or newer. For additional information please contact...
Problem with directory permissions in JP1/Automatic Operation
Overview There is a problem of permissions on file transfer directory in JP1/Automatic Operation. Impact Malicious local users might refer or modify transferred files. Solution Please refer to the 'Vendor Information' section for the official countermeasure and take appropriate action...
Updated Firefox, Thunderbird & sqlite3 packages fix security vulnerabilities
Updated firefox, thunderbird, and sqlite3 packages fix security vulnerabilities: Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox or Thunderbird to crash or, potentially, execute arbitrary code with the privileges of...
74CMS一逻辑漏洞导致两处二次注入
简要描述： 74CMS一逻辑漏洞导致两处二次注入 详细说明： 1.首先还是注册一个企业用户，在注册的过程中用burp抓包，修改里面的username字段 username=1′,1,1001,1,user,1,1,1,1,1,1,1 — a 2.74cms本来是不允许注册带有特殊字符的用户名的，但是使用这样的方法可以绕过过滤，我们来看一下数据库。 3.我们再来看哪里对该用户进行了二次数据库操作。找了很久，看到了对很多操作都提供了日志记录的功能。writememberslog函数 function...
The vulnerability of Google Chrome browser allows a malicious intruder to trigger a service denial or otherwise affect the system.
The use of Google Chrome browser during the execution of RenderFrameImpl::OnMessageReceived in content/renderer/renderframeimpl.cc may allow remote attackers to trigger service failures or cause other effects on the system by using message interactions between rendering processes during the...
USN-2598-1 linux vulnerability
A race condition between chown and execve was discovered in the Linux kernel. A local attacker could exploit this race by using chown on a setuid-user-binary to gain administrative privileges...
Mandriva Linux Security Advisory : sqlite3 (MDVSA-2015:217)
Multiple vulnerabilities has been found and corrected in sqlite3 : SQLite before 3.8.9 does not properly implement the dequoting of collation-sequence names, which allows context-dependent attackers to cause a denial of service uninitialized memory access and application crash or possibly have...
Fedora 21 : wpa_supplicant-2.0-13.fc21 (2015-6860)
This update addresses a security vulnerability identified as CVE-2015-1863 . More information on this vulnerability is provided by upstream at https://w1.fi/security/2015-1/wpasupplicant-p2p-ssid-overflow.txt . An extract : Attacker or a system controlled by the attacker needs to be within radio...
Xen 'arch_do_domctl()' Information Disclosure Vulnerability
Xen is a virtualization technology for the Linux kernel that allows multiple operating systems to run simultaneously. An information disclosure vulnerability exists in the 'archdodomctl' function when Xen handles the XENDOMCTLgettscinfo operation, which could be exploited by a local attacker to...
CVE-2015-3415
The CVE-2015-3415 entry concerns SQLite: the sqlite3VdbeExec function in vdbe.c does not correctly implement comparison operators, enabling context-dependent attackers to trigger a DoS (invalid free) or other unspecified impacts via a crafted CHECK clause (e.g., CHECK(0&O>O) in a CREATE TABLE)...
cmseasy最新版 一枚注入
简要描述： 可惜没绕过360webscan其实是轻松绕过的 详细说明： cmseasy最新版0318 存在一个注入 漏洞文件：/lib/default/archiveact.php 250-251行: function searchaction //printr$SESSION;exit; if front::get'ule' front::$get'keyword' = strreplace'-', '%', front::$get'keyword'; front::$get'keyword' = urldecodefront::$get'keyword'; if...
FreeBSD : sqlite -- multiple vulnerabilities (dec3164f-3121-45ef-af18-bb113ac5082f)
NVD reports : SQLite before 3.8.9 does not properly implement the dequoting of collation-sequence names, which allows context-dependent attackers to cause a denial of service uninitialized memory access and application crash or possibly have unspecified other impact via a crafted COLLATE clause, ...
CVE-2015-1237
Use-after-free vulnerability in the RenderFrameImpl::OnMessageReceived function in content/renderer/renderframeimpl.cc in Google Chrome before 42.0.2311.90 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger renderer IPC messages...
