WordPress XCloner Backup, Restore and Migrate <= 4.2.152 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability discovered by Chloe Chamberland WordFence in WordPress XCloner Backup, Restore and Migrate versions = 4.2.152. Solution Update the WordPress XCloner Backup, Restore and Migrate to the latest available version at least 4.2.153...

PT-2020-14931 · Openstack +3 · Openstack Nova +3

Name of the Vulnerable Software and Affected Versions: OpenStack Nova versions prior to 19.3.1 OpenStack Nova versions 20.x prior to 20.3.1 OpenStack Nova version 21.0.0 Description: An issue was discovered in the Guest.migrate function in virt/libvirt/guest.py. By performing a soft reboot of an...

pcp: Local privilege escalation in pcp spec file through migrate_tempdirs

A Improper Limitation of a Pathname to a Restricted Directory vulnerability in the packaging of pcp of SUSE Linux Enterprise High Performance Computing 15-ESPOS, SUSE Linux Enterprise High Performance Computing 15-LTSS, SUSE Linux Enterprise Module for Development Tools 15, SUSE Linux Enterprise...

How to Migrate Data Centers with Azure Migrate

Previously, migrating your servers to the cloud was a huge undertaking, but with Azure Migrate, you get services to discover, assess, and migrate your server. See how you can utilize these tools to make your cloud journey a little less daunting...

PT-2019-7447

Name of the Vulnerable Software and Affected Versions ThemeMakers Almera Responsive Portfolio Site Template component through 2015-05-15 for WordPress Description The issue allows remote attackers to obtain sensitive information, such as user login, user pass, and user email values, via a direct...

PT-2019-7444

Name of the Vulnerable Software and Affected Versions ThemeMakers Accio Responsive Parallax One Page Site Template component through 2015-05-15 for WordPress Description The issue allows remote attackers to obtain sensitive information, such as user login, user pass, and user email values, via a...

PT-2019-7441

Name of the Vulnerable Software and Affected Versions The ThemeMakers Car Dealer / Auto Dealer Responsive theme versions through 2015-05-15 Description The issue allows remote attackers to obtain sensitive information, such as user login, user pass, and user email values, via a direct request for...

Atlassian Jira Cross-Site Scripting Vulnerability (CNVD-2019-30066)

Jira is a tool developed by Australian company Atlassian for defect tracking, issue tracking and project management. A cross-site scripting vulnerability exists in the Priority Icon URL for the Issue Priority of the MigratePriorityScheme resource in Jira versions prior to 8.3.2. A remote attacker...

Security update for neovim (important)

openSUSE Security Update: Security update for neovim Announcement ID: openSUSE-SU-2019:1997-1 Rating: important References: 1137443 Cross-References: CVE-2019-12735 Affected Products: openSUSE Backports SLE-15-SP1 An update that fixes one vulnerability is now available. Description: This update f...

CVE-2019-6177

A vulnerability reported in Lenovo Solution Center version 03.12.003, which is no longer supported, could allow log files to be written to non-standard locations, potentially leading to privilege escalation. Lenovo ended support for Lenovo Solution Center and recommended that customers migrate to...

openSUSE Security Update : pdns (openSUSE-2019-1904)

This update for pdns fixes the following issues : Security issues fixed : - CVE-2019-10203: Updated PostgreSQL schema to address a possible denial of service by an authorized user by inserting a crafted record in a MASTER type zone under their control. boo1142810 - CVE-2019-10162: Fixed a denial ...

Security update for pdns (important)

openSUSE Security Update: Security update for pdns Announcement ID: openSUSE-SU-2019:1904-1 Rating: important References: 1138582 1142810 Cross-References: CVE-2019-10162 CVE-2019-10163 CVE-2019-10203 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 openSUSE Backports SLE-15 SUSE Package...

CVE-2019-12928

QEMU's Machine Protocol QMP is designed to enable remote applications ex. Libvirt to control and manage QEMU process instances. It is meant to be used by trusted users and applications. The TCP server socket is only one of the transport options supported by QMP; other, more secure options, being...

DEBIAN-CVE-2019-12928

The QMP migrate command in QEMU version 4.0.0 and earlier is vulnerable to OS command injection, which allows the remote attacker to achieve code execution, denial of service, or information disclosure by sending a crafted QMP command to the listening server. Note: This has been disputed as a...

UBUNTU-CVE-2019-12928

The QMP migrate command in QEMU version 4.0.0 and earlier is vulnerable to OS command injection, which allows the remote attacker to achieve code execution, denial of service, or information disclosure by sending a crafted QMP command to the listening server. Note: This has been disputed as a...

Command injection

DISPUTED The QMP migrate command in QEMU version 4.0.0 and earlier is vulnerable to OS command injection, which allows the remote attacker to achieve code execution, denial of service, or information disclosure by sending a crafted QMP command to the listening server. Note: This has been disputed...

CVE-2019-12928: Improper Neutralization of Special Elements used in an OS Command

The QMP migrate command in QEMU version 4.0.0 and earlier is vulnerable to OS command injection, which allows the remote attacker to achieve code execution, denial of service, or information disclosure by sending a crafted QMP command to the listening server. Note: This has been disputed as a...

PT-2019-13028 · Qemu +2 · Qemu +2

Name of the Vulnerable Software and Affected Versions: QEMU versions 4.0.0 and earlier Description: The QMP migrate command in QEMU is vulnerable to OS command injection, allowing a remote attacker to achieve code execution, denial of service, or information disclosure by sending a crafted QMP...

kernel: Out-of-bounds access via an XFRM_MSG_MIGRATE xfrm Netlink message

The xfrmmigrate function in the net/xfrm/xfrmpolicy.c file in the Linux kernel built with CONFIGXFRMMIGRATE does not verify if the dir parameter is less than XFRMPOLICYMAX. This allows a local attacker to cause a denial of service out-of-bounds access or possibly have unspecified other impact by...

kernel: Out-of-bounds access via an XFRM_MSG_MIGRATE xfrm Netlink message

The xfrmmigrate function in the net/xfrm/xfrmpolicy.c file in the Linux kernel built with CONFIGXFRMMIGRATE does not verify if the dir parameter is less than XFRMPOLICYMAX. This allows a local attacker to cause a denial of service out-of-bounds access or possibly have unspecified other impact by...