4740 matches found
Important: Red Hat Security Advisory: jbossweb security update
An update for JBoss Enterprise Application Platform 5.1.2 that fixes multiple security issues is now available from the Red Hat Customer Portal. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, whic...
Ongoing Targeted Attack Campaign Going After Defense, Aerospace Industries
Researchers have identified a strain of malware that’s being used in a string of targeted attacks against defense contractors, government agencies and other organizations by leveraging exploits against zero-day vulnerabilities. The attacks may have been going on since 2009 in some form and the...
Rubinius Web表单哈希冲突拒绝服务漏洞
BUGTRAQ ID: 51196 Rubinius是一个运行Ruby程序的虚拟机，其带有Ruby的核心库。 Rubinius在哈希表单张贴和更新哈希表单时，哈希生成函数中存在错误，通过在HTTP POST请求中发送特制的表单，攻击者可利用此漏洞造成哈希冲突，导致较高的CPU消耗。 0 rubini 1.x 厂商补丁： rubini ------ 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://rubini.us/...
qemu security update
CentOS Errata and Security Advisory CESA-2011:1801 Updated qemu-kvm packages that fix one security issue are now available for Red Hat Enterprise Linux 6.1 Extended Update Support. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability...
[SECURITY] [DSA 2358-1] openjdk-6 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2358-1 [email protected] http://www.debian.org/security/ December 05, 2011 http://www.debian.org/security/faq - -------------------------------------------------------------------------...
flash-plugin: critical flaws fixed in APSB11-26
Stack-based buffer overflow in the ActionScript Virtual Machine AVM component in Adobe Flash Player before 10.3.183.10 on Windows, Mac OS X, Linux, and Solaris, and before 10.3.186.7 on Android, allows attackers to execute arbitrary code or cause a denial of service via unspecified vectors...
[SECURITY] [DSA 2337-1] xen security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2337-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst November 6, 2011 http://www.debian.org/security/faq -...
DSA-2337-1 xen - several vulnerabilities
Bulletin has no description...
Virtual Machine for Android Reverse Engineering (A.R.E) Released
Virtual Machine for Android Reverse Engineering A.R.E Released The Honeynet Project release of the Android Reverse Engineering A.R.E. Virtual Machine. Do you need to analyze a piece of Android malware, but dont have all your analysis tools at hand? The Android Reverse Engineering A.R.E. Virtual...
Virtual Machine for Android Reverse Engineering (A.R.E) Released
Virtual Machine for Android Reverse Engineering A.R.E Released The Honeynet Project release of the Android Reverse Engineering A.R.E. Virtual Machine. Do you need to analyze a piece of Android malware, but dont have all your analysis tools at hand? The Android Reverse Engineering A.R.E. Virtual...
Critical: java-1.6.0-openjdk
Issue Overview: A flaw was found in the Java RMI Remote Method Invocation registry implementation. A remote RMI client could use this flaw to execute arbitrary code on the RMI server running the registry. CVE-2011-3556 A flaw was found in the Java RMI registry implementation. A remote RMI client...
Unable to Use the "Processes" Tab in Veeam ONE
Challenge The following message is displayed when opening the Processes tab in Veeam ONE Client for a Virtual Machine: Failed to connect to the Guest OS. Verify that server is up, running, and accessible to Veeam ONE server. Solution Please ensure that the prerequisites are met: VMware vSphere...
Critical: Red Hat Security Advisory: java-1.6.0-openjdk security update
Updated java-1.6.0-openjdk packages that fix several security issues are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed...
Adobe Flash Player ActionScript Recursive StackOverflowError (APSB11-26; CVE-2011-2426)
The vulnerability is due to an error in the ActionScript Virtual Machine AVM while handling malicious Flash files. A remote attacker may exploit this vulnerability by enticing an unsuspecting user to open a web-page containing specially crafted Flash files. Successful exploitation may allow an...
Creating snapshots in a different location than default virtual machine directory
How to change the default virtual machine working directory location for snapshots...
KVM / QEMU Guest Detection (credentialed check)
According to its model name, the machine is running on a QEMU virtual processor. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid56300; scriptversion"$Revision: 1.2 $"; scriptcvsdate"$Date: 2011/11/21 21:29:12 $"; scriptnameenglish:"KVM / QEMU Guest Detection...
flash-plugin: critical flaws fixed in APSB11-26
Stack-based buffer overflow in the ActionScript Virtual Machine AVM component in Adobe Flash Player before 10.3.183.10 on Windows, Mac OS X, Linux, and Solaris, and before 10.3.186.7 on Android, allows remote attackers to execute arbitrary code via unspecified vectors...
CVE-2011-2426
Stack-based buffer overflow in the ActionScript Virtual Machine AVM component in Adobe Flash Player before 10.3.183.10 on Windows, Mac OS X, Linux, and Solaris, and before 10.3.186.7 on Android, allows remote attackers to execute arbitrary code via unspecified vectors...
CVE-2011-2427
Adobe Flash Player AVM stack-based overflow (CVE-2011-2427) affects the ActionScript Virtual Machine in desktop platforms (Windows, macOS, Linux, Solaris) and Android prior to versions 10.3.183.10 (desktop) and 10.3.186.7 (Android). The vulnerability allows arbitrary code execution or a denial of...
Changed block tracking cannot be enabled: virtual hardware version 7 or later required
Challenge The backup or replication job is processed slower than expected and gives the warning message "changed block tracking cannot be enabled: virtual hardware version 7 or later required." The job works without Changed Block Tracking, and the "changed block tracking cannot be enabled: virtua...