Lucene search
+L

4334 matches found

Citrix
Citrix
added 2017/12/04 12:0 a.m.11 views

How to disable Interrupt Safe Mode in Provisioning Services

How to disable Interrupt Safe Mode in Provisioning Services The "Interrupt Safe Mode" configuration is a special setting designed to handle bad PXE implementations that do not comply with PXE standards or have bugs. The setting forces a reset on the UNDI Interface after sending every packet into...

7.2AI score
SaveExploits0
Prion
Prion
added 2017/11/22 7:29 p.m.19 views

Cross site request forgery (csrf)

HedEx Earlier than V200R006C00 versions has a cross-site request forgery CSRF vulnerability. An attacker could trick a user into accessing a website containing malicious scripts which may tamper with configurations and interrupt normal services...

6.8CVSS8.7AI score0.00391EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2017/11/22 7:29 p.m.20 views

Cross site scripting

HedEx Earlier than V200R006C00 versions have the stored cross-site scripting XSS vulnerability. Attackers can exploit the vulnerability to plant malicious scripts into the configuration file to interrupt the services of legitimate users...

4.3CVSS6.4AI score0.00529EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2017/11/22 7:0 p.m.19 views

CVE-2017-8139

HedEx Earlier than V200R006C00 versions have the stored cross-site scripting XSS vulnerability. Attackers can exploit the vulnerability to plant malicious scripts into the configuration file to interrupt the services of legitimate users...

6.4AI score0.00529EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2017/10/30 12:0 a.m.46 views

SUSE SLED12 / SLES12 Security Update : xen (SUSE-SU-2017:2864-1)

This update for xen fixes several issues: These security issues were fixed : - CVE-2017-5526: The ES1370 audio device emulation support was vulnerable to a memory leakage issue allowing a privileged user inside the guest to cause a DoS and/or potentially crash the Qemu process on the host...

8.8CVSS6.7AI score0.01547EPSS
SaveExploits2References30
OSV
OSV
added 2017/10/27 3:19 p.m.7 views

SUSE-SU-2017:2873-1 Security update for xen

This update for xen fixes several issues: These security issues were fixed: - CVE-2017-5526: The ES1370 audio device emulation support was vulnerable to a memory leakage issue allowing a privileged user inside the guest to cause a DoS and/or potentially crash the Qemu process on the host bsc10597...

8.8CVSS7.5AI score0.01547EPSS
SaveExploits2References19
Tenable Nessus
Tenable Nessus
added 2017/10/19 12:0 a.m.41 views

Xen Hypervisor New CPU Interrupt Descriptor Table (IDT) Copy Handling Guest-to-Host Privilege Escalation (XSA-244)

According to its self-reported version number, the Xen hypervisor installed on the remote host is affected by an unspecified flaw that is triggered when, as a new CPU is brought online, it copies certain selector fields from CPU0's Interrupt Descriptor Table IDT while CPU0 is in HVM context. This...

8.8CVSS6.7AI score0.01547EPSS
SaveExploits2References11
OSV
OSV
added 2017/10/18 8:29 a.m.1 views

ALPINE-CVE-2017-15590

An issue was discovered in Xen through 4.9.x allowing x86 guest OS users to cause a denial of service hypervisor crash or possibly gain privileges because MSI mapping was mishandled...

8.8CVSS7.1AI score0.0041EPSS
SaveExploits0References1
OSV
OSV
added 2017/10/18 8:29 a.m.3 views

DEBIAN-CVE-2017-15590

An issue was discovered in Xen through 4.9.x allowing x86 guest OS users to cause a denial of service hypervisor crash or possibly gain privileges because MSI mapping was mishandled...

8.8CVSS8AI score0.0041EPSS
SaveExploits0References1
OSV
OSV
added 2017/10/18 8:29 a.m.4 views

UBUNTU-CVE-2017-15594

An issue was discovered in Xen through 4.9.x allowing x86 SVM PV guest OS users to cause a denial of service hypervisor crash or gain privileges because IDT settings are mishandled during CPU hotplugging...

8.8CVSS7.2AI score0.00383EPSS
SaveExploits0References3
OSV
OSV
added 2017/10/18 8:29 a.m.4 views

ALPINE-CVE-2017-15594

An issue was discovered in Xen through 4.9.x allowing x86 SVM PV guest OS users to cause a denial of service hypervisor crash or gain privileges because IDT settings are mishandled during CPU hotplugging...

8.8CVSS6.9AI score0.00383EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2017/10/10 12:0 a.m.7 views

PT-2017-3158 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.13.8 Description: The issue is related to a use-after-free error in the snd usb mixer interrupt function, located in the sound/usb/mixer.c file of the Linux kernel. This error can be exploited by local users v...

10CVSS7.3AI score0.92621EPSS
SaveExploits141References506
OSV
OSV
added 2017/09/26 5:29 a.m.2 views

DEBIAN-CVE-2017-1000252

The KVM subsystem in the Linux kernel through 4.13.3 allows guest OS users to cause a denial of service assertion failure, and hypervisor hang or crash via an out-of bounds guestirq value, related to arch/x86/kvm/vmx.c and virt/kvm/eventfd.c...

5.5CVSS5.8AI score0.00452EPSS
SaveExploits0References1
OSV
OSV
added 2017/09/26 12:0 a.m.4 views

UBUNTU-CVE-2017-1000252

The KVM subsystem in the Linux kernel through 4.13.3 allows guest OS users to cause a denial of service assertion failure, and hypervisor hang or crash via an out-of bounds guestirq value, related to arch/x86/kvm/vmx.c and virt/kvm/eventfd.c...

5.5CVSS6.6AI score0.00452EPSS
SaveExploits0References7
RedhatCVE
RedhatCVE
added 2017/09/15 4:18 p.m.31 views

CVE-2017-1000252

A reachable assertion failure flaw was found in the Linux kernel built with KVM virtualisationCONFIGKVM support with Virtual Function I/O feature CONFIGVFIO enabled. This failure could occur if a malicious guest device sent a virtual interrupt guest IRQ with a larger 1024 index value...

5.5CVSS1.7AI score0.00452EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2017/07/07 2:51 p.m.28 views

CVE-2017-10919

Xen through 4.8.x mishandles virtual interrupt injection, which allows guest OS users to cause a denial of service hypervisor crash, aka XSA-223. Mitigation On systems where the guest kernel is controlled by the host rather than guest administrator, running only kernels which do not disable SGI a...

7.7CVSS2.6AI score0.019EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2017/07/06 12:0 a.m.14 views

The vulnerability of the `snd_msnd Interrupt` function in the Linux operating system’s kernel allows a hacker to trigger a service failure or cause other adverse effects.

The vulnerability of the sndmsnd Interrupt function in the Linux operating system’s kernel is due to an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure or have other adverse effects...

7.8CVSS6.7AI score0.00378EPSS
SaveExploits0References3Affected Software1
UbuntuCve
UbuntuCve
added 2017/07/05 1:29 a.m.28 views

CVE-2017-10919

Xen through 4.8.x mishandles virtual interrupt injection, which allows guest OS users to cause a denial of service hypervisor crash, aka XSA-223...

6.5CVSS6.8AI score0.019EPSS
SaveExploits0References2
OSV
OSV
added 2017/07/05 1:29 a.m.3 views

ALPINE-CVE-2017-10923

Xen through 4.8.x does not validate a vCPU array index upon the sending of an SGI, which allows guest OS users to cause a denial of service hypervisor crash, aka XSA-225...

6.5CVSS6.5AI score0.01804EPSS
SaveExploits0References1
NVD
NVD
added 2017/07/05 1:29 a.m.17 views

CVE-2017-10919

Xen through 4.8.x mishandles virtual interrupt injection, which allows guest OS users to cause a denial of service hypervisor crash, aka XSA-223...

6.5CVSS7.5AI score0.019EPSS
SaveExploits0References5
Rows per page
Query Builder