4017 matches found
Override Access Vulnerability in Journalx 2.0, a Remote Processing System for Journal Manuscripts
Journalx 2.0 is an independently developed platform for remote processing of journal manuscripts developed by Beijing Magtech. Journalx 2.0 is vulnerable to an override access vulnerability. The vulnerability can be exploited by an attacker to gain access to other users' usernames, passwords, and...
x86 CMPXCHG8B emulation fails to ignore operand size override
ISSUE DESCRIPTION The x86 instruction CMPXCHG8B is supposed to ignore legacy operand size overrides; it only honors the REX.W override making it CMPXCHG16B. So, the operand size is always 8 or 16. When support for CMPXCHG16B emulation was added to the instruction emulator, this restriction on the...
Security update for qemu (important)
This update for qemu fixes the following issues: - Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP1 - Change package post script udevadm trigger calls to be device specific bsc1002116 - Address various security/stability issues Fix OOB access in...
SUSE-SU-2016:3067-1 Security update for xen
xen was updated to version 4.7.1 to fix 17 security issues. These security issues were fixed: - CVE-2016-9637: ioport array overflow allowing a malicious guest administrator can escalate their privilege to that of the host bsc1011652. - CVE-2016-9386: x86 null segments were not always treated as...
Fortinet FortiOS Information Disclosure Vulnerability (CNVD-2016-12205)
Fortinet FortiOS is a set of security operating system developed by the U.S. Fiat Fortinet company dedicated to FortiGate network security platform. The system provides users with firewall, antivirus, IPSec/SSL VPN, Web content filtering and anti-spam and other security features. An information...
FreeBSD : xen-kernel -- guest 32-bit ELF symbol table load leaking host data (5555120d-ba4d-11e6-ae1b-002590263bf5)
The Xen Project reports : Along with their main kernel binary, unprivileged guests may arrange to have their Xen environment load kernel symbol tables for their use. The ELF image metadata created for this purpose has a few unused bytes when the symbol table binary is in 32-bit ELF format. These...
libdwarf Heap Buffer Overflow Vulnerability
libdwarf is a set of tools for reading and writing DWARF2 debugging information. A heap-based buffer overflow vulnerability exists in libdwarf. An attacker could exploit this vulnerability by using a malformed dwarf file to obtain sensitive information or cause a denial of service...
SUSE-SU-2016:2936-1 Security update for qemu
This update for qemu fixes the following issues: - Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12 - Change package post script udevadm trigger calls to be device specific bsc1002116 - Address various security/stability issues Fix OOB access in xlnx.xpx-ethernetlite...
SUSE SLES11 Security Update : kvm (SUSE-SU-2016:2902-1)
This update for kvm fixes the following issues : - Address various security/stability issues - Fix OOB access in xlnx.xpx-ethernetlite emulation CVE-2016-7161 bsc1001151 - Fix OOB access in VMware SVGA emulation CVE-2016-7170 bsc998516 - Fix DOS in ColdFire Fast Ethernet Controller emulation...
SUSE-SU-2016:2902-1 Security update for kvm
This update for kvm fixes the following issues: - Address various security/stability issues Fix OOB access in xlnx.xpx-ethernetlite emulation CVE-2016-7161 bsc1001151 Fix OOB access in VMware SVGA emulation CVE-2016-7170 bsc998516 Fix DOS in ColdFire Fast Ethernet Controller emulation CVE-2016-79...
WordPress Plugins Leave Online Shoppers Vulnerable
Researchers are calling into question the safety of some of the top WordPress e-commerce plugins used on over 100,000 commercial websites prepping for Black Friday and Cyber Monday online sales. In reviewing the top 12 WordPress e-commerce plugins, application security testing firm Checkmarx foun...
Debian Security Advisory DSA 3709-1 (libxslt - security update)
Nick Wellnhofer discovered that the xsltFormatNumberConversion function in libxslt, an XSLT processing runtime library, does not properly check for a zero byte terminating the pattern string. This flaw can be exploited to leak a couple of bytes after the buffer that holds the pattern string...
Websites of Indian Embassy in 7 Countries Hacked; Database Leaked Online
Indian embassy websites in seven different countries have been hacked, and attackers have leaked personal data, including full name, residential address, email address, passport number and phone number, of Indian citizens living abroad. This incident is extremely worrying because it involves...
The vulnerability of the SSH network protocol, related to the disclosure of information, allows a perpetrator to gain access to confidential data.
The vulnerability of the SSH network protocol is related to an error in password hashing. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data remotely...
CVE-2016-5495
Unspecified vulnerability in the Oracle Discoverer component in Oracle Fusion Middleware 11.1.1.7.0 allows remote attackers to affect confidentiality via vectors related to EUL Code & Schema...
SQL Injection Vulnerability in DBSHOP_0.9.3_Beta goodsSearchAction Function
DBShop is an open source e-commerce online store system developed using endFramework. DBSHOP0.9.3Beta goodsSearchAction function SQL injection vulnerability . After obtaining the parameters timesort, clicksort, pricesort, the key name and key value will be spliced into the sql statement to bring ...
Google Android - Binder Generic ASLR Leak
Google Android - Binder Generic ASLR Leak Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=889 The interaction between the kernel /dev/binder and the usermode Parcel.cpp mean that when a binder object is passed as BINDERTYPEBINDER or BINDERTYPEWEAKBINDER, a pointer to that object...
CVE-2016-3924
services/audioflinger/Effects.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 before 2016-10-01 does not validate EFFECTCMDSETPARAM and EFFECTCMDSETPARAMDEFERRED commands, which allows attackers to obtain sensitive information...
HackerOne: Researcher gets email updates on a private program after he/she quits that program.
Summary: I found out that after I quit private program, I still gets update about that program, e.g. new scope changes/amount of money and etc. Description Include Impact: I noticed that if I quit program I still gets email updates about the private program, private data can be leak on that email...
