4291 matches found
CVE-2017-8759
creationtimestamp| type| source ---|---|--- 2017-09-13 04:56:03+00:00| seen| MISP/59b82957-23e0-483c-9142-7f22ac130004 2017-09-13 10:33:11+00:00| seen| https://t.me/sysadminchannel/88 2017-09-13 23:53:11+00:00| exploited| https://t.me/canyoupwnme/2280 2017-09-14 11:38:00+00:00| exploited|...
CVE-2017-14319
A grant unmapping issue was discovered in Xen through 4.9.x. When removing or replacing a grant mapping, the x86 PV specific path needs to make sure page table entries remain in sync with other accounting done. Although the identity of the page frame was validated correctly, neither the presence ...
CVE-2017-14319
A grant unmapping issue was discovered in Xen through 4.9.x. When removing or replacing a grant mapping, the x86 PV specific path needs to make sure page table entries remain in sync with other accounting done. Although the identity of the page frame was validated correctly, neither the presence ...
CVE-2017-14319
A grant unmapping issue was discovered in Xen through 4.9.x. When removing or replacing a grant mapping, the x86 PV specific path needs to make sure page table entries remain in sync with other accounting done. Although the identity of the page frame was validated correctly, neither the presence ...
CVE-2017-14319
CVE-2017-14319 is a Xen hypervisor vulnerability (affecting up to 4.9.x) in grant unmapping for x86 PV guests. The issue: when removing/replacing a grant mapping, the x86 PV path did not ensure page table entries remained in sync with other accounting, and did not account for the presence of the ...
insufficient grant unmapping checks for x86 PV guests
ISSUE DESCRIPTION When removing or replacing a grant mapping, the x86 PV specific path needs to make sure page table entries remain in sync with other accounting done. Although the identity of the page frame was validated correctly, neither the presence of the mapping nor page writability were...
ALPINE-CVE-2017-14170
In libavformat/mxfdec.c in FFmpeg 3.3.3 - 2.4, a DoS in mxfreadindexentryarray due to lack of an EOF End of File check might cause huge CPU consumption. When a crafted MXF file, which claims a large "nbindexentries" field in the header but does not contain sufficient backing data, is provided, th...
DEBIAN-CVE-2017-14171
In libavformat/nsvdec.c in FFmpeg 2.4 and 3.3.3, a DoS in nsvparseNSVfheader due to lack of an EOF End of File check might cause huge CPU consumption. When a crafted NSV file, which claims a large "tableentriesused" field in the header but does not contain sufficient backing data, is provided, th...
ALPINE-CVE-2017-14171
In libavformat/nsvdec.c in FFmpeg 2.4 and 3.3.3, a DoS in nsvparseNSVfheader due to lack of an EOF End of File check might cause huge CPU consumption. When a crafted NSV file, which claims a large "tableentriesused" field in the header but does not contain sufficient backing data, is provided, th...
UBUNTU-CVE-2017-14170
In libavformat/mxfdec.c in FFmpeg 3.3.3 - 2.4, a DoS in mxfreadindexentryarray due to lack of an EOF End of File check might cause huge CPU consumption. When a crafted MXF file, which claims a large "nbindexentries" field in the header but does not contain sufficient backing data, is provided, th...
Cisco SocialMiner XML External Entity Injection Vulnerability
A vulnerability in the web-based user interface of Cisco SocialMiner could allow an unauthenticated, remote attacker to have read and write access to information stored in the affected system. The vulnerability is due to improper handling of XML External Entity XXE entries when parsing an XML fil...
Razer US: 2 Subdomain takeovers
Two domains no longer in use under .razerzone.com were left pointing to Cloudfront servers that were no longer active. The DNS entries were cleared. We appreciate the report and look forward to working with the researcher in the future...
CVE-2017-9805
creationtimestamp| type| source ---|---|--- 2017-09-06 07:05:34+00:00| seen| https://t.me/HackerOne/985 2017-09-06 11:05:58+00:00| exploited| https://t.me/webpwn/148 2017-09-06 11:10:48+00:00| published-proof-of-concept| https://t.me/cybershit/77 2017-09-06 12:56:14+00:00| seen|...
GSA Bounty: Subdomain take-over of {REDACTED}.18f.gov
@jackds discovered a number of related subdomain takeover attacks against some subdomains of 18f.gov. Technically, these domains are out of scope for our Vulnerability Disclosure Policy. We want to remind hackers to please limit their testing to domains explicitly listed in that scope which is...
MAC Moves Observed on NetScaler When More Than One Interface is in Same VLAN
MAC moves observed on NetScaler when more than one interface is in same VLAN. The following entries are seen in newnslog: current time is Mon Jun 5 17:03:55 2017 Channel 0/1 has been muted conflict MAC 00:1d:45:24:b3:68 Channel 1/1 has been muted conflict MAC 00:1d:45:24:b3:68 current time is Mon...
gtk-vnc: Integer overflow when processing SetColorMapEntries
An integer overflow flaw was found in gtk-vnc. A remote malicious VNC server could use this flaw to crash VNC viewers which are based on the gtk-vnc library...
Windows Escalate UAC Protection Bypass (Via COM Handler Hijack)
This module will bypass Windows UAC by creating COM handler registry entries in the HKCU hive. When certain high integrity processes are loaded, these registry entries are referenced resulting in the process loading user-controlled DLLs. These DLLs contain the payloads that result in elevated...
Information Disclosure
Moodle is vulnerable to information disclosures. The application sets certain group IDs to 0 upon a database-entry change, allowing a malicious user to view group-level entries after being edited by a user with a teacher role...