7701 matches found
PT-2019-4947 · Linux +6 · Linux Kernel +6
Name of the Vulnerable Software and Affected Versions: Linux kernel versions through 5.3.11 Description: The issue is related to a memory leak in the ipmi bmc register function, which can be triggered by causing the ida simple get function to fail. This can lead to a denial of service due to memo...
register-cert.eharcourtschool.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-994628 Security Researcher Gh05tPT Helped patch 6899 vulnerabilities Received 10 Coordinated Disclosure badges Received 48 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting...
SpotAuditor 5.3.1.0 Denial Of Service
Exploit Title: SpotAuditor 5.3.1.0 - Denial of Service Author: Sanjana Shetty Date: 2019-10-13 Version: SpotAuditor 5.3.1.0 Vendor Homepage: http://www.nsauditor.com Software link: http://spotauditor.nsauditor.com/ Steps 1 Install the SpotAuditor software 2 Access the register functionality 3 In...
SpotAuditor 5.3.1.0 - Denial of Service
SpotAuditor 5.3.1.0 - Denial of Service Exploit Title: SpotAuditor 5.3.1.0 - Denial of Service Author: Sanjana Shetty Date: 2019-10-13 Version: SpotAuditor 5.3.1.0 Vendor Homepage: http://www.nsauditor.com Software link: http://spotauditor.nsauditor.com/ Steps 1 Install the SpotAuditor software 2...
CVE-2019-17503
An issue was discovered in Kirona Dynamic Resource Scheduling DRS 5.5.3.5. An unauthenticated user can access /osm/REGISTER.cmd aka /osmtiles/REGISTER.cmd directly: it contains sensitive information about the database through the SQL queries within this batch file. This file exposes SQL database...
VMware Harbor Privilege Escalation (VMSA-2019-0015) (CVE-2019-16097)
The remote VMware Harbor cloud native registry is affected by a remote privilege escalation vulnerability. Instances of VMware Harbor with DB as the authentication backend and which allow users to self-register are vulnerable. An authenticated, non-administrator, remote attacker can exploit this ...
DEBIAN-CVE-2019-17347
An issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of service or gain privileges because a guest can manipulate its virtualised %cr4 in a way that is incompatible with Linux and possibly other guest kernels...
UBUNTU-CVE-2019-17347
An issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of service or gain privileges because a guest can manipulate its virtualised %cr4 in a way that is incompatible with Linux and possibly other guest kernels...
PT-2019-5143 · Xen +1 · Xen +1
Name of the Vulnerable Software and Affected Versions: Xen versions prior to 4.12 Description: The issue allows x86 PV guest OS users to cause a denial of service or gain privileges because a guest can manipulate its virtualised %cr4 in a way that is incompatible with Linux. This is related to an...
DEBIAN-CVE-2019-16994
In the Linux kernel before 5.0, a memory leak exists in sitinitnet in net/ipv6/sit.c when registernetdev fails to register sitn-fbtunneldev, which may cause denial of service, aka CID-07f12b26e21a...
F5 Networks BIG-IP : Linux kernel vulnerability (K28241423)
In the Linux kernel through 4.19, a use-after-free can occur due to a race condition between fanoutadd from setsockopt and bind on an AFPACKET socket. This issue exists because of the 15fe076edea787807a7cdc168df832544b58eba6 incomplete fix for a race condition. The code mishandles a certain...
CVE-2019-14239
On NXP Kinetis KV1x, Kinetis KV3x, and Kinetis K8x devices, Flash Access Controls FAC a software IP protection method for execute-only access can be defeated by leveraging a load instruction inside the execute-only region to expose the protected code into a CPU register...
Improper access control
On NXP Kinetis KV1x, Kinetis KV3x, and Kinetis K8x devices, Flash Access Controls FAC a software IP protection method for execute-only access can be defeated by leveraging a load instruction inside the execute-only region to expose the protected code into a CPU register...
DEBIAN-CVE-2019-15031
In the Linux kernel through 5.2.14 on the powerpc platform, a local user can read vector registers of other users' processes via an interrupt. To exploit the venerability, a local user starts a transaction via the hardware transactional memory instruction tbegin and then accesses vector registers...
Kernel: KVM: nVMX: guest accesses L0 MSR causes potential DoS
A flaw was found in the way KVM hypervisor handled x2APIC Machine Specific Register MSR access with nested=1 virtualization enabled. In that, L1 guest could access L0's APIC register values via L2 guest, when 'virtualize x2APIC mode' is enabled. A guest could use this flaw to potentially crash th...
Kernel: KVM: nVMX: guest accesses L0 MSR causes potential DoS
A flaw was found in the way KVM hypervisor handled x2APIC Machine Specific Register MSR access with nested=1 virtualization enabled. In that, L1 guest could access L0's APIC register values via L2 guest, when 'virtualize x2APIC mode' is enabled. A guest could use this flaw to potentially crash th...
Linux kernel memory leak vulnerability (CNVD-2019-31644)
Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A memory leak vulnerability exists in registerqueuekobjects in net/core/net-sysfs.c in versions of Linux kernel prior to 5.0.1. An attacker could exploit this...
Linux kernel memory leak vulnerability (CNVD-2019-31647)
Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. Linux kernel versions prior to 5.0.6 have a memory leak vulnerability in net/netlink/genetlink.c when idralloc of genlregisterfamily fails. No details of the...