CVE-2014-3615

The VGA emulator in QEMU allows local guest users to read host memory by setting the display to a high resolution...

Design/Logic Flaw

The VGA emulator in QEMU allows local guest users to read host memory by setting the display to a high resolution...

CVE-2014-3615

The VGA emulator in QEMU allows local guest users to read host memory by setting the display to a high resolution...

CVE-2014-3615

The VGA emulator in QEMU allows local guest users to read host memory by setting the display to a high resolution...

UBUNTU-CVE-2014-3615

The VGA emulator in QEMU allows local guest users to read host memory by setting the display to a high resolution...

CVE-2014-3615

The VGA emulator in QEMU allows local guest users to read host memory by setting the display to a high resolution...

ESA-2014-087: EMC NetWorker Module for MEDITECH (NMMEDI) Information Disclosure Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2014-087: EMC NetWorker Module for MEDITECH NMMEDI Information Disclosure Vulnerability EMC Identifier: ESA-2014-087 CVE Identifier: CVE-2014-4620 Severity Rating: CVSS v2 Base Score: 7.2 AV:L/AC:L/Au:N/C:C/I:C/A:C Affected products: • EMC NetWork...

java-1.8.0-openjdk security update

1:1.8.0.25-1.b17 - Update to October CPU patch update. - Resolves: RHBZ1148896 1:1.8.0.20-3.b26 - fixed headless policytool moved to normal - jre/bin/policytool added to not headless exclude list - updated aarch694 source - ppc64le synced from fedora - Resolves: rhbz1081073 1:1.8.0.20-2.b26 -...

Qemu: information leakage when guest sets high resolution

An information leak flaw was found in the way QEMU's VGA emulator accessed frame buffer memory for high resolution displays. A privileged guest user could use this flaw to leak memory contents of the host to the guest by setting the display to use a high resolution in the guest...

Qemu: information leakage when guest sets high resolution

An information leak flaw was found in the way QEMU's VGA emulator accessed frame buffer memory for high resolution displays. A privileged guest user could use this flaw to leak memory contents of the host to the guest by setting the display to use a high resolution in the guest...

qemu-kvm security and bug fix update

1.5.3-60.el70.10 - kvm-block-add-helper-function-to-determine-if-a-BDS-is-i.patch bz1122925 - kvm-block-extend-block-commit-to-accept-a-string-for-the.patch bz1122925 - kvm-block-add-backing-file-option-to-block-stream.patch bz1122925 - kvm-block-add-com.redhatchange-backing-file-qmp-comma.patch...

CVE-2014-1581

Use-after-free vulnerability in DirectionalityUtils.cpp in Mozilla Firefox before 33.0, Firefox ESR 31.x before 31.2, and Thunderbird 31.x before 31.2 allows remote attackers to execute arbitrary code via text that is improperly handled during the interaction between directionality resolution and...

Design/Logic Flaw

Use-after-free vulnerability in DirectionalityUtils.cpp in Mozilla Firefox before 33.0, Firefox ESR 31.x before 31.2, and Thunderbird 31.x before 31.2 allows remote attackers to execute arbitrary code via text that is improperly handled during the interaction between directionality resolution and...

CVE-2014-1581

CVE-2014-1581 is a use-after-free in DirectionalityUtils.cpp that affects Mozilla Firefox before 33.0, Firefox ESR 31.x before 31.2, and Thunderbird 31.x before 31.2. The vulnerability allows a remote attacker to execute arbitrary code via text handling during directionality resolution and layout...

CVE-2014-1581

Use-after-free vulnerability in DirectionalityUtils.cpp in Mozilla Firefox before 33.0, Firefox ESR 31.x before 31.2, and Thunderbird 31.x before 31.2 allows remote attackers to execute arbitrary code via text that is improperly handled during the interaction between directionality resolution and...

glibc: Stack (frame) overflow in getaddrinfo() when called with AF_INET6

It was found that getaddrinfo did not limit the amount of stack memory used during name resolution. An attacker able to make an application resolve an attacker-controlled hostname or IP address could possibly cause the application to exhaust all stack memory and crash...

Moderate: Red Hat Security Advisory: Apache POI security update

An update for the Apache POI component that fixes two security issues is now available from the Red Hat Customer Portal for Red Hat JBoss Data Virtualization 6.0.0. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base...

"Pakistan People's Party" Website Hacked — Message for Bilawal Bhutto

On Tuesday, Indian and Pakistani army forces continued to exchange fire along the Line of Control LoC in Jammu and Kashmir, which was started when Pakistan’s military fired machine guns and mortars at about 60 Indian army posts during last week. Tensions between the two countries have intensified...

Bash: Code Injection (Updated fix for GLSA 201409-09)

Background Bash is the standard GNU Bourne Again SHell. Description Stephane Chazelas reported that Bash incorrectly handles function definitions, allowing attackers to inject arbitrary code CVE-2014-6271. Gentoo Linux informed about this issue in GLSA 201409-09. Tavis Ormandy reported that the...

Hika Shop

HikaShop 2.3.2 and below also Hika Market 1.4.3 and below Remote code execution Note that developer did not inform the VEL Notice of resolution: http://www.hikashop.com/index.php?option=comcontent=article=269...