Lucene search
+L

3588 matches found

Prion
Prion
added 2023/03/21 1:15 p.m.23 views

Design/Logic Flaw

x86 shadow plus log-dirty mode use-after-free In environments where host assisted address translation is necessary but Hardware Assisted Paging HAP is unavailable, Xen will run guests in so called shadow mode. Shadow mode maintains a pool of memory used for both shadow page tables as well as...

4.3CVSS7.6AI score0.00268EPSS
SaveExploits0References7Affected Software3
OSV
OSV
added 2023/03/21 1:15 p.m.5 views

UBUNTU-CVE-2022-42332

x86 shadow plus log-dirty mode use-after-free In environments where host assisted address translation is necessary but Hardware Assisted Paging HAP is unavailable, Xen will run guests in so called shadow mode. Shadow mode maintains a pool of memory used for both shadow page tables as well as...

7.8CVSS7.1AI score0.00268EPSS
SaveExploits0References7
UbuntuCve
UbuntuCve
added 2023/03/21 1:15 p.m.40 views

CVE-2022-42332

x86 shadow plus log-dirty mode use-after-free In environments where host assisted address translation is necessary but Hardware Assisted Paging HAP is unavailable, Xen will run guests in so called shadow mode. Shadow mode maintains a pool of memory used for both shadow page tables as well as...

7.8CVSS7.1AI score0.00268EPSS
SaveExploits0References6
Xen Project
Xen Project
added 2023/03/21 12:0 p.m.51 views

x86 shadow plus log-dirty mode use-after-free

ISSUE DESCRIPTION In environments where host assisted address translation is necessary but Hardware Assisted Paging HAP is unavailable, Xen will run guests in so called shadow mode. Shadow mode maintains a pool of memory used for both shadow page tables as well as auxiliary data structures. To...

7.8CVSS7.1AI score0.00268EPSS
SaveExploits0Affected Software1
Debian CVE
Debian CVE
added 2023/03/21 12:0 a.m.59 views

CVE-2022-42332

x86 shadow plus log-dirty mode use-after-free In environments where host assisted address translation is necessary but Hardware Assisted Paging HAP is unavailable, Xen will run guests in so called shadow mode. Shadow mode maintains a pool of memory used for both shadow page tables as well as...

7.8CVSS7.6AI score0.00268EPSS
SaveExploits0
Cvelist
Cvelist
added 2023/03/21 12:0 a.m.39 views

CVE-2022-42332

x86 shadow plus log-dirty mode use-after-free In environments where host assisted address translation is necessary but Hardware Assisted Paging HAP is unavailable, Xen will run guests in so called shadow mode. Shadow mode maintains a pool of memory used for both shadow page tables as well as...

8.3AI score0.00268EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2023/03/21 12:0 a.m.13 views

Xen 资源管理错误漏洞

Xen is an open source virtual machine monitor product from the University of Cambridge, UK. It enables different and incompatible operating systems to run on the same computer and supports runtime migration to ensure uptime and avoid downtime. Xen has a security vulnerability that stems from...

7.8CVSS7.2AI score0.00268EPSS
SaveExploits0References12
Rapid7 Blog
Rapid7 Blog
added 2023/03/14 2:0 p.m.19 views

Cloud Security Strategies for Healthcare

How to Stay Secure in the Cloud While Driving Innovation and Discovery The healthcare industry is undergoing a transformational shift. Health organizations are traditionally entrenched in an on-prem way of life, but the past three years have plunged them into a digital revolution. A heightened...

6.1AI score
SaveExploits0
GithubExploit
GithubExploit
added 2023/03/06 12:50 p.m.549 views

Exploit for Out-of-bounds Write in Linux Linux_Kernel

CVE-2022-1015 id uid=1000d gid=1000d groups=1000d...

6.6CVSS6.9AI score0.01467EPSS
SaveExploits10
The Hacker News
The Hacker News
added 2023/03/04 11:33 a.m.7 views

Security and IT Teams No Longer Need To Pay For SaaS-Shadow IT Discovery

This past January, a SaaS Security Posture Management SSPM company named Wing Security Wing made waves with the launch of its free SaaS-Shadow IT discovery solution. Cloud-based companies were invited to gain insight into their employees' SaaS usage through a completely free, self-service product...

6.7AI score
SaveExploits0
The Hacker News
The Hacker News
added 2023/03/02 11:35 a.m.7 views

2023 Browser Security Report Uncovers Major Browsing Risks and Blind Spots

As a primary working interface, the browser plays a significant role in today's corporate environment. The browser is constantly used by employees to access websites, SaaS applications and internal applications, from both managed and unmanaged devices. A new report published by LayerX, a browser...

6.9AI score
SaveExploits0
Imperva Blog
Imperva Blog
added 2023/03/01 1:53 p.m.47 views

Why Attackers Target the Healthcare Industry

Key Takeaways: Personal health information PHI is an incredibly valuable category of personal data. When compromised and sold on the dark web, this data can be sold for thousands of dollars. Healthcare is a valuable target to attackers, including the group Killnet, which targeted healthcare sites...

0.8AI score
SaveExploits0
OSV
OSV
added 2023/02/19 6:15 p.m.13 views

CVE-2016-15024

A vulnerability was found in doomsider shadow. It has been classified as problematic. Affected is an unknown function. The manipulation leads to denial of service. Attacking locally is a requirement. The complexity of an attack is rather high. The exploitability is told to be difficult. Continiou...

5.5CVSS5.5AI score
SaveExploits0References3
NVD
NVD
added 2023/02/19 6:15 p.m.14 views

CVE-2016-15024

A vulnerability was found in doomsider shadow. It has been classified as problematic. Affected is an unknown function. The manipulation leads to denial of service. Attacking locally is a requirement. The complexity of an attack is rather high. The exploitability is told to be difficult. Continiou...

5.5CVSS4.3AI score0.00205EPSS
SaveExploits0References3
Prion
Prion
added 2023/02/19 6:15 p.m.15 views

Information disclosure

A vulnerability was found in doomsider shadow. It has been classified as problematic. Affected is an unknown function. The manipulation leads to denial of service. Attacking locally is a requirement. The complexity of an attack is rather high. The exploitability is told to be difficult. Continiou...

1.7CVSS7AI score0.00205EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2023/02/19 6:0 p.m.29 views

CVE-2016-15024 doomsider shadow denial of service

A vulnerability was found in doomsider shadow. It has been classified as problematic. Affected is an unknown function. The manipulation leads to denial of service. Attacking locally is a requirement. The complexity of an attack is rather high. The exploitability is told to be difficult. Continiou...

2.5CVSS5.5AI score0.00205EPSS
SaveExploits0References3
CVE
CVE
added 2023/02/19 6:0 p.m.75 views

CVE-2016-15024

CVE-2016-15024 affects the doomsider shadow package. The issue is described as a denial-of-service caused by an unspecified (unknown) function, exploitable only via a local attack with relatively high complexity and low exploitability. A patch is identified as 3332c5ba9ec3014ddc74e2147190a050eee9...

5.5CVSS4.6AI score0.00205EPSS
SaveExploits0References3Affected Software1
CNNVD
CNNVD
added 2023/02/19 12:0 a.m.10 views

shadow 安全漏洞

shadow is a suite of tools used to maintain Debian systems. A security vulnerability exists in shadow, which stems from the presence of some unknown functionality in the program, resulting in a denial of service...

5.5CVSS4.9AI score0.00205EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2023/02/19 12:0 a.m.9 views

PT-2023-10343 · Unknown · Doomsider Shadow

Name of the Vulnerable Software and Affected Versions: doomsider shadow affected versions not specified Description: A vulnerability was found in doomsider shadow, classified as problematic, affecting an unknown function. The manipulation leads to denial of service, requiring a local attack. The...

5.5CVSS6.9AI score0.00205EPSS
SaveExploits0References7
Microsoft Secure
Microsoft Secure
added 2023/02/15 5:0 p.m.28 views

Microsoft shifts to a comprehensive SaaS security solution

Software as a service SaaS apps are ubiquitous, hybrid work is the new normal, and protecting them and the important data they store is a big challenge for organizations. Today, 59 percent of security professionals find the SaaS sprawl challenging to manage1 and have identified cloud...

7AI score
SaveExploits0
Rows per page
Query Builder