691 matches found
CVE-2020-27672
CVE-2020-27672 is a race-condition use-after-free in Xen 4.14.x and earlier that can be triggered by x86 guest OS users, potentially causing host DoS, data corruption, or privilege escalation via a race in the mapping of 2MiB/1GiB superpages. Affected products are Xen hypervisor deployments using...
CVE-2020-27672
An issue was discovered in Xen through 4.14.x allowing x86 guest OS users to cause a host OS denial of service, achieve data corruption, or possibly gain privileges by exploiting a race condition that leads to a use-after-free involving 2MiB and 1GiB superpages...
CVE-2020-27673
An issue was discovered in the Linux kernel through 5.9.1, as used with Xen through 4.14.x. Guest OS users can cause a denial of service host OS hang via a high rate of events to dom0, aka CID-e99502f76271...
CVE-2020-27673: Undefined Security Weakness
An issue was discovered in the Linux kernel through 5.9.1, as used with Xen through 4.14.x. Guest OS users can cause a denial of service host OS hang via a high rate of events to dom0, aka CID-e99502f76271...
Arbitrary Code Execution
libass.so is vulnerable to arbitrary code execution. An integer overflow occurs during a call to outlinestroke that is made by assoutlineconstruct, potentially allowing an attacker to execute arbitrary code on the host OS...
Arbitrary Code Execution
Fastjson is vulnerable to arbitrary code execution. A deserialization vulnerability exists within the JSON parser and allows the attacker to execute arbitrary code on the host OS...
Arbitrary Code Execution
mybatis is vulnerable to arbitrary code execution. Unsafe deserialization of object streams allow an attacker to execute arbitrary code on the host OS...
Insecure RDP
There are active attack campaigns as of October 2020 targeting RDP servers without multi-factor authentication enabled. Recent assessments: zeroSteiner at October 09, 2020 6:36pm UTC reported: Over the past couple of years 2018-2020 attacks against RDP have become more and more common. Recent...
Arbitrary Code Execution
WebKitGTK+ is vulnerable to arbitrary code execution. A memory corruption issue allows an attacker to execute arbitrary code on the host OS...
Arbitrary Code Execution
WebKitGTK+ is vulnerable to arbitrary code execution. A memory corruption issue allows an attacker to execute arbitrary code on the host OS...
Arbitrary Code Execution
WebKitGTK+ is vulnerable to arbitrary code execution. A memory corruption issue allows an attacker to execute arbitrary code on the host OS...
Arbitrary Code Execution
WebKitGTK+ is vulnerable to arbitrary code execution. A memory corruption issue allows an attacker to execute arbitrary code on the host OS...
Arbitrary Code Execution
WebKitGTK+ is vulnerable to arbitrary code execution. A memory corruption issue allows an attacker to execute arbitrary code on the host OS...
Arbitrary Code Execution
audiofile is vulnerable to arbitrary code execution. A heap-based buffer overflow in Expand3To4Module::run when running sfconvert allows an attacker to execute arbitrary code on the host OS...
Arbitrary Code Execution
fontforge is vulnerable to arbitrary code execution. An out-of-bounds write in SFDGetFontMetaData function in sfd.c allows an attacker to execute arbitrary code on the host OS...
Remote Code Execution
LibVNCis vulnerable to remote code execution. A heap out-of-bound write vulnerability inside structure in the VNC client code allows an attacker to execute arbitrary code on the host OS remotely...
Arbitrary Code Execution
firefox is vulnerable to arbitrary code execution. Memory safety bugs allows an attacker to corrupt memory and execute arbitrary code on the host OS...
CVE-2020-25602
An issue was discovered in Xen through 4.14.x. An x86 PV guest can trigger a host OS crash when handling guest access to MSRMISCENABLE. When a guest accesses certain Model Specific Registers, Xen first reads the value from hardware to use as the basis for auditing the guest access. For the...
CVE-2020-25602
An issue was discovered in Xen through 4.14.x. An x86 PV guest can trigger a host OS crash when handling guest access to MSRMISCENABLE. When a guest accesses certain Model Specific Registers, Xen first reads the value from hardware to use as the basis for auditing the guest access. For the...
CVE-2020-25602
An issue was discovered in Xen through 4.14.x. An x86 PV guest can trigger a host OS crash when handling guest access to MSRMISCENABLE. When a guest accesses certain Model Specific Registers, Xen first reads the value from hardware to use as the basis for auditing the guest access. For the...