755 matches found
libvirt: arbitrary command execution via virConnectBaselineHypervisorCPU and virConnectCompareHypervisorCPU APIs
The virConnectBaselineHypervisorCPU and virConnectCompareHypervisorCPU libvirt APIs accept an "emulator" argument to specify the program providing emulation for a domain. Since v1.2.19, libvirt will execute that program to probe the domain's capabilities. Read-only clients could specify an...
Regipy - An OS Independent Python Library For Parsing Offline Registry Hives
Regipy is a python library for parsing offline registry hives. regipy has a lot of capabilities: Use as a library: Recurse over the registry hive, from root or a given path and get all subkeys and values Read specific subkeys and values Apply transaction logs on a registry hive Command Line Tools...
CVE-2019-13312
blockcmp in libavcodec/zmbvenc.c in FFmpeg 4.1.3 has a heap-based buffer over-read...
UBUNTU-CVE-2019-13312
blockcmp in libavcodec/zmbvenc.c in FFmpeg 4.1.3 has a heap-based buffer over-read...
FFmpeg heap buffer overflow vulnerability (CNVD-2019-22635)
FFmpeg is a set of open source computer programs that can be used to record, convert digital audio and video to streams under the LGPL or GPL license. A heap buffer overflow vulnerability exists in blockcmp in libavcodec/zmbvenc.c in FFmpeg 4.1.3. No detailed vulnerability details are provided at...
libvirt: arbitrary command execution via virConnectBaselineHypervisorCPU and virConnectCompareHypervisorCPU APIs
The virConnectBaselineHypervisorCPU and virConnectCompareHypervisorCPU libvirt APIs accept an "emulator" argument to specify the program providing emulation for a domain. Since v1.2.19, libvirt will execute that program to probe the domain's capabilities. Read-only clients could specify an...
Google Turns to Retro Cryptography to Keep Data Sets Private
Google's Private Join and Compute will let companies compare notes without divulging sensitive information...
Unlimited Arm Atomics Operations
ISSUE DESCRIPTION Software targeting pre-Armv8.1-A hardware, Xen included, commonly implements atomics using Load/Store exclusive instructions in a loop that will terminate once the store succeeded. As per the Armv8-A Architecture Reference Manual ARM DDI0487D.a, paragraph 2.9.5 "Load-Exclusive a...
ZOHO ManageEngine Netflow Analyzer SQL Injection Vulnerability
ZOHO ManageEngine Netflow Analyzer is a set of web-based bandwidth monitoring tools. A SQL injection vulnerability exists in ZOHO ManageEngine Netflow Analyzer /client/api/json/v2/nfareports/compareReport, which can be exploited by remote attackers to submit a specially crafted SQL request to...
Insecure Comparison in secure-compare
Versions of secure-compare prior to 3.0.1 are affected by a vulnerability that results in the package always returning true when comparing two strings of the same length, despite differences in the contents of those strings. Recommendation Upgrade to version 3.0.1 or later...
GHSA-H9X2-5RM7-X4GM Insecure Comparison in secure-compare
Versions of secure-compare prior to 3.0.1 are affected by a vulnerability that results in the package always returning true when comparing two strings of the same length, despite differences in the contents of those strings. Recommendation Upgrade to version 3.0.1 or later...
May 28, 2019—KB4499162 (OS Build 15063.1839)
None None...
PT-2019-5890 · Imagemagick +6 · Imagemagick +6
Name of the Vulnerable Software and Affected Versions: ImageMagick versions 7.0.8-43 Q16 Description: The issue is related to a heap-based buffer over-read in the WritePNGImage function, which can allow a remote attacker to access confidential data and cause a denial of service. The problem is...
Admin Express 1.2.5.485 Buffer Overflow
Title: Admin Express v1.2.5.485 Folder Path Local SEH Alphanumeric Encoded Buffer Overflow Date: May 6th, 2019 Author: Connor McGarr https://connormcgarr.github.io Vendor Homepage: https://admin-express.en.softonic.com/ Software Link: https://admin-express.en.softonic.com/download Version...
AdminExpress 1.2.5 Denial Of Service
-- coding: utf-8 -- !/usr/bin/python Exploit Title: AdminExpress 1.2.5 - Denial of Service PoC Date: 2019-04-12 Exploit Author: Mücahit İsmail Aktaş Software Link: https://admin-express.en.softonic.com/ Version: 1.2.5.485 Tested on: Windows XP Professional SP2 Description: 1 Click the "System...
AdminExpress 1.2.5 - 'Folder Path' Denial of Service (PoC)
-- coding: utf-8 -- !/usr/bin/python Exploit Title: AdminExpress 1.2.5 - Denial of Service PoC Date: 2019-04-12 Exploit Author: Mücahit İsmail Aktaş Software Link: https://admin-express.en.softonic.com/ Version: 1.2.5.485 Tested on: Windows XP Professional SP2 Description: 1 Click the "System...
Security Bulletin: Vulnerability in IBM WebSphere Application Server Liberty affects IBM Watson Compare and Comply on IBM Cloud Private
Summary There is a potential denial of service with the Google Guava library that is used in WebSphere Application Server Liberty which in turn is used by IBM Watson™ Compare and Comply on IBM Cloud Private. Vulnerability Details CVEID: CVE-2018-10237 DESCRIPTION: Google Guava is vulnerable to a...
Security Bulletin: Multiple vulnerabilities in IBM Java SDK affects IBM Watson Compare and Comply on IBM Cloud Private
Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Technology Edition, Version 8 that is used by IBM Watson™ Compare and Comply on IBM Cloud Private. The issue was disclosed as part of the IBM Java SDK updates for October 2018. Vulnerability Details CVEs: CVEID:...
DEBIAN-CVE-2019-7309
In the GNU C Library aka glibc or libc6 through 2.29, the memcmp function for the x32 architecture can incorrectly return zero indicating that the inputs are equal because the RDX most significant bit is mishandled...
GNU C Library Local Denial of Service Vulnerability
The GNU C Library glibc is an open-source, free, easy-to-download C compiler released under the LGPL license. A local denial of service vulnerability exists in the memcmp function for the x32 architecture in GNU C Library 2.29 and earlier versions, which can be exploited by an attacker to cause a...