PT-2019-5411

Name of the Vulnerable Software and Affected Versions Eclipse OpenJ9 versions 0.15 through 0.16 Description The issue is related to errors in access control to diagnostic operations in the Eclipse OpenJ9 virtual machine. This could allow a remote attacker to elevate their privileges. The...

PT-2019-3662

Name of the Vulnerable Software and Affected Versions Java SE versions 7u231, 8u221, 11.0.4, and 13 Java SE Embedded version 8u221 Oracle GraalVM Enterprise Edition version 19.2.0 Description The issue is related to errors in handling HTTP proxy responses in the Java virtual machine component. It...

CVE-2018-21025

In Centreon VM through 19.04.3, centreon-backup.pl allows attackers to become root via a crafted script, due to incorrect rights of sourced configuration files...

Xen Denial of Service Vulnerability (CNVD-2019-34760)

Xen is an open source virtual machine monitor product. Xen has a denial of service vulnerability that can be exploited by an x86 PV client OS attacker to cause a denial of service via a long-running operation used to support the rebootability of PTE updates...

VMware vCenter Server 6.0 / 6.5 / 6.7 Multiple Vulnerabilities (VMSA-2019-0013)

The version of VMware vCenter Server installed on the remote host is 6.0 prior to U3j, 6.5 prior to U3, or 6.7 prior to U3, and is, therefore, affected by the following vulnerabilities: - An information disclosure vulnerability caused by insufficient session expiration. This allows an attacker wi...

App Layering 1908: Getting "User is missing the following required permission: Virtual machine / Inventory / Remove" while configuring VMWare connector".

We get error"User is missing the following required permission: Virtual machine / Inventory / Remove" while configuring VMWare connector"...

Oracle GraalVM Enterprise Edition Data Compromise

The vulnerability of the Java Virtual Machine component of Oracle GraalVM Enterprise Edition is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to cause service failures or compromise the integrity of the protected information...

Design/Logic Flaw

An issue was discovered in BlueStacks 4.110 and below on macOS and on 4.120 and below on Windows. BlueStacks employs Android running in a virtual machine VM to enable Android apps to run on Windows or MacOS. Bug is in a local arbitrary file read through a system service call. The impacted method...

CVE-2019-14220

CVE-2019-14220 affects BlueStacks 4.110 and earlier on macOS, and 4.120 and earlier on Windows. A vulnerability in a system service call allows a local attacker to read arbitrary files with SYSTEM privileges by passing a file name to the affected method inside the Android VM used by BlueStacks, e...

Exploit for OS Command Injection in Webmin

Make-and-Break Create and exploit a vulnerable Virtual Mac...

Kernel: KVM: potential use-after-free via kvm_ioctl_create_device()

A use-after-free vulnerability was found in the way the Linux kernel's KVM hypervisor implements its device control API. While creating a device via kvmioctlcreatedevice, the device holds a reference to a VM object, later this reference is transferred to the caller's file descriptor table. If suc...

Information disclosure

VMware vCenter Server 6.7.x prior to 6.7 U3, 6.5 prior to 6.5 U3 and 6.0 prior to 6.0 U3j contains an information disclosure vulnerability where Virtual Machines deployed from an OVF could expose login information via the virtual machine's vAppConfig properties. A malicious actor with access to...

FortiManager VM Code Execution

The vulnerability of the software for centralized device management in Fortinet FortiManager VM exists due to insufficient verification of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or perform arbitrary commands remotely...

Microsoft Windows Hyper-V Denial of Service Vulnerability (CNVD-2019-31861)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation, U.S.A. Microsoft Windows is a set of operating systems for personal devices.Microsoft Windows Server is a set of server operating systems. Windows Hyper-V is one of the virtualization products that supports...

Release Notes for Veeam ONE 9.5 Update 4a

Challenge Release Notes for Veeam ONE 9.5 Update 4a. Please confirm that you are running version 9.0 Update 1 build 9.0.0.2088 or later prior to installing this update. You can check this under Help | About in Veeam ONE console. After the successful upgrade, your build number will be 9.5.4.4587...

Windows Hyper-V Denial of Service Vulnerability

A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate input from a privileged user on a guest operating system. To exploit the vulnerability, an attacker who already has a privileged account on a guest operating system, running as a virtual...

Facebook HHVM Buffer Overflow Vulnerability (CNVD-2019-31198)

Facebook HHVM aka HipHop Virtual Machine is a virtual machine from Facebook that significantly improves the performance of loading dynamic pages in PHP. A buffer overflow vulnerability exists in Facebook HHVM that can be exploited by an attacker to cause a buffer overflow or heap overflow...

Facebook HHVM Buffer Overflow Vulnerability (CNVD-2019-31201)

Facebook HHVM aka HipHop Virtual Machine is a virtual machine from Facebook that significantly improves the performance of loading dynamic pages in PHP. A buffer overflow vulnerability exists in Facebook HHVM that can be exploited by an attacker to cause a buffer overflow or heap overflow...

Facebook Patches "Memory Disclosure Using JPEG Images" Flaws in HHVM Servers

Facebook has patched two high-severity vulnerabilities in its server application that could have allowed remote attackers to unauthorisedly obtain sensitive information or cause a denial of service just by uploading a maliciously constructed JPEG image file. The vulnerabilities reside in HHVMHipH...

UBUNTU-CVE-2019-11926

Insufficient boundary checks when processing MSOFx markers from JPEG headers in the GD extension could allow access to out-of-bounds memory via a maliciously constructed invalid JPEG input. This issue affects HHVM versions prior to 3.30.9, all versions between 4.0.0 and 4.8.3, all versions betwee...