3522 matches found
Qemu: VNC: memory corruption due to unchecked resolution limit
An out-of-bounds memory access issue was found in Quick Emulator QEMU in the VNC display driver. This flaw could occur while refreshing the VNC display surface area in the 'vncrefreshserversurface'. A user inside a guest could use this flaw to crash the QEMU process...
Qemu: VNC: memory corruption due to unchecked resolution limit
An out-of-bounds memory access issue was found in Quick Emulator QEMU in the VNC display driver. This flaw could occur while refreshing the VNC display surface area in the 'vncrefreshserversurface'. A user inside a guest could use this flaw to crash the QEMU process...
The Unified Cloud
Throughout the history of cloud computing, 2006 was a momentous year. In 2006 Amazon Web Services released S3, the first pay per GB storage service. By August, they released EC2, allowing you to spin up a server and pay by the hour in the cloud. In the decade that has followed, AWS has emerged as...
Get a Single View of WAF Events with the Imperva AppSecurity View App for Splunk Enterprise
Enterprises are adopting a hybrid infrastructure model to take advantage of rapid deployment of cloud-based services and higher computing power. A compilation of analyst predictions by SecureWorks, shows that the cloud continues to gain momentum as organizations embrace and benefit from new ways ...
The vulnerability of the Cisco Firepower Extensible Operating System and the Cisco Unified Computing System Central device management system allows a intruder to inject arbitrary commands.
The vulnerability of the CLI component of the Cisco Firepower Extensible Operating System and the Cisco Unified Computing System Central device management system is related to the lack of measures for cleaning input data. Exploiting this vulnerability could allow a malicious actor to inject...
The vulnerability of the Cisco Firepower Extensible Operating System and the Cisco Unified Computing System Central device management system allows a intruder to inject arbitrary commands.
The vulnerability of the Cisco Firepower Extensible Operating System’s local management component and the Cisco Unified Computing System Central’s centralized device management system exists due to the lack of measures taken to neutralize special elements used in operating system commands...
The vulnerability of the Cisco Firepower Extensible Operating System and the Cisco Unified Computing System Central device management system allows a perpetrator to execute arbitrary commands.
The vulnerability of the debugging functionality of the Cisco Firepower Extensible Operating System and the Cisco Unified Computing System Central device management system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating locally,...
The vulnerability of the Cisco Unified Computing System Central device’s centralized management system allows a hacker to redirect users to a malicious web page.
The vulnerability of the web interface of the Cisco Unified Computing System Central management system is related to the use of open redirection. Exploiting this vulnerability allows a malicious actor to redirect users to a malicious web page from a remote location...
The vulnerability of the Cisco Firepower Extensible Operating System and the Cisco Unified Computing System Central device management system allows a intruder to inject arbitrary commands.
The vulnerability of the CLI component of the Cisco Firepower Extensible Operating System and the Cisco Unified Computing System Central device management system is related to the lack of measures for cleaning input data. Exploiting this vulnerability allows a malicious actor to inject arbitrary...
The vulnerability of the Cisco Firepower Extensible Operating System and the Cisco Unified Computing System Central device management system allows a intruder to inject arbitrary commands.
The vulnerability of the CLI component of the Cisco Firepower Extensible Operating System and the Cisco Unified Computing System Central device management system is related to the lack of measures for cleaning input data. Exploiting this vulnerability allows a malicious actor to inject arbitrary...
Qemu: cirrus: heap buffer overflow via vnc connection
A heap buffer overflow flaw was found in QEMU's Cirrus CLGD 54xx VGA emulator's VNC display driver support; the issue could occur when a VNC client attempted to update its display after a VGA operation is performed by a guest. A privileged user/process inside a guest could use this flaw to crash...
CLI Command Injection Vulnerability in Multiple Cisco Products
Cisco Unified Computing System UCS Manager provides unified and embedded management of all software and hardware components in Cisco UCS. the Cisco Firepower 4100 Series is a next-generation firewall. the Cisco Firepower 9300 is a scalable carrier-grade platform. A command injection vulnerability...
DEBIAN-CVE-2015-8504
Qemu, when built with VNC display driver support, allows remote attackers to cause a denial of service arithmetic exception and application crash via crafted SetPixelFormat messages from a client...
[SECURITY] Fedora 26 Update: tigervnc-1.7.1-4.fc26
Virtual Network Computing VNC is a remote display system which allows you to view a computing 'desktop' environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures. This package contains a client which will allow you ...
Local Command Execution Vulnerability in Multiple Cisco Products
Cisco Unified Computing System Manager is a set of embedded device management software.Cisco Firepower 9300 Security Appliance are Cisco security appliances.Cisco Firepower 9000 is an operating system running on the 9000 series firewall appliances from Cisco. Cisco Firepower 9000 is a Cisco...
IT Asset Inventory Systems and CMDBs: A Marriage Made in InfoSec Heaven
A key capability of an IT asset inventory system is being able to exchange data with CMDBs Configuration Management Databases. In fact, a common misconception is that organizations with CMDBs don’t need an IT asset inventory system because their functions overlap. While they have similar roles,...
CVE-2015-6028
Castle Rock Computing SNMPc before 2015-12-17 has SQL injection via the sc parameter...
Sql injection
Castle Rock Computing SNMPc before 2015-12-17 has SQL injection via the sc parameter...