Lucene search
+L

6082 matches found

CNVD
CNVD
•added 2017/12/18 12:00 a.m.•16 views

jBPM Migration XML External Entity Injection Vulnerability

jBPM Migration is a migration tool. jBPM Migration is implemented with an XML external entity injection vulnerability that can be exploited by remote attackers to submit a special request, obtain sensitive information, or conduct a denial of service attack...

6.5CVSS7.4AI score0.02744EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2017/12/14 12:00 a.m.•46 views

openSUSE Security Update : xen (openSUSE-2017-1321)

This update for xen to version 4.9.1 bsc1027519 fixes several issues. This new feature was added : - Support migration of HVM domains larger than 1 TB These security issues were fixed : - bsc1068187: Failure to recognize errors in the Populate on Demand PoD code allowed for DoS XSA-246 -...

9.1CVSS6.9AI score0.0283EPSS
SaveExploits0References9
Xen Project
Xen Project
•added 2017/12/12 12:00 p.m.•608 views

improper x86 shadow mode refcount error handling

ISSUE DESCRIPTION Pages being used to run x86 guests in shadow mode are reference counted to track their uses. When another reference cannot be acquired, the corresponding page table entry must not be inserted. Due to incorrect error handling, this constraint could be violated. IMPACT A malicious...

7.8CVSS6.4AI score0.00352EPSS
SaveExploits0Affected Software1
Xen Project
Xen Project
•added 2017/12/12 12:00 p.m.•604 views

broken x86 shadow mode refcount overflow check

ISSUE DESCRIPTION Pages being used to run x86 guests in shadow mode are reference counted to track their uses. Unfortunately the overflow check when trying to obtain a new reference used a mask one bit wider than the reference count actually is, rendering the entire check ineffective. IMPACT A...

7.8CVSS6.6AI score0.00352EPSS
SaveExploits0Affected Software1
Xen Project
Xen Project
•added 2017/12/12 12:00 p.m.•608 views

improper bug check in x86 log-dirty handling

ISSUE DESCRIPTION Memory sharing, available to x86 HVM guests only, uses a special value in the global machine to physical address translation table M2P. PV guests have full control over M2P entries corresponding to pages they own. A bug check specifically, an assertion that an M2P entry is not t...

5.6CVSS0.6AI score0.00359EPSS
SaveExploits0Affected Software1
Veeam
Veeam
•added 2017/12/06 12:00 a.m.•18 views

Veeam Availability Console Migration FAQ

This is a FAQ page for Veeam Availability Console migration...

2.3AI score
SaveExploits0Affected Software1
Virtuozzo
Virtuozzo
•added 2017/12/05 12:00 a.m.•24 views

Product update: Virtuozzo 7.0 Update 6 Hotfix 1 (7.0.6-678)

The Hotfix 1 for Virtuozzo 7.0 Update 6 provides stability and usability bug fixes. Vulnerability id: PSBM-72443 Migration of a VM with two HDDs from Virtuozzo 6 to 7 could fail due to a libvirt conversion failure. Vulnerability id: PSBM-77096 vstorage-mount could crash under certain conditions d...

7AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2017/12/04 12:00 a.m.•89 views

RHEL 7 : qemu-kvm-rhev (RHSA-2017:3369)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2017:3369 advisory. KVM Kernel-based Virtual Machine is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm-rhev packages provi...

8.8CVSS7.9AI score0.00603EPSS
SaveExploits0References10
OpenVAS
OpenVAS
•added 2017/12/04 12:00 a.m.•44 views

openSUSE: Security Advisory for xen (openSUSE-SU-2017:3193-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.1CVSS7.2AI score0.0283EPSS
SaveExploits0References1
OPENSUSE Linux
OPENSUSE Linux
•added 2017/12/02 6:11 p.m.•149 views

Security update for xen (important)

This update for xen to version 4.7.4 bsc1027519 fixes several issues. This new feature was added: - Support migration of HVM domains larger than 1 TB These security issues were fixed: - bsc1068187: Failure to recognize errors in the Populate on Demand PoD code allowed for DoS XSA-246 - bsc1068191...

9CVSS4.4AI score0.0283EPSS
SaveExploits0References6
OPENSUSE Linux
OPENSUSE Linux
•added 2017/12/02 6:10 p.m.•333 views

Security update for xen (important)

This update for xen to version 4.9.1 bsc1027519 fixes several issues. This new feature was added: - Support migration of HVM domains larger than 1 TB These security issues were fixed: - bsc1068187: Failure to recognize errors in the Populate on Demand PoD code allowed for DoS XSA-246 - bsc1068191...

9CVSS4.4AI score0.0283EPSS
SaveExploits0References6
OSV
OSV
•added 2017/12/01 2:04 p.m.•10 views

SUSE-SU-2017:3178-1 Security update for xen

This update for xen to version 4.7.4 bsc1027519 fixes several issues. This new feature was added: - Support migration of HVM domains larger than 1 TB These security issues were fixed: - bsc1068187: Failure to recognize errors in the Populate on Demand PoD code allowed for DoS XSA-246 - bsc1068191...

9.1CVSS7.6AI score0.0283EPSS
SaveExploits0References9
RedHat Linux
RedHat Linux
•added 2017/11/30 8:33 p.m.•51 views

Moderate: Red Hat Security Advisory: qemu-kvm-rhev security and bug fix update

An update for qemu-kvm-rhev is now available for Red Hat Enterprise Virtualization RHEV 4.X, Red Hat Enterprise Virtualization Hypervisor RHEV-H and Agents for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerabilit...

8.8CVSS7.1AI score0.00603EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
•added 2017/11/30 12:00 a.m.•46 views

SUSE SLED12 / SLES12 Security Update : xen (SUSE-SU-2017:3115-1)

This update for xen to version 4.9.1 bsc1027519 fixes several issues. This new feature was added : - Support migration of HVM domains larger than 1 TB These security issues were fixed : - bsc1068187: Failure to recognize errors in the Populate on Demand PoD code allowed for DoS XSA-246 -...

9.1CVSS6.9AI score0.0283EPSS
SaveExploits0References11
OSV
OSV
•added 2017/11/29 3:34 p.m.•15 views

SUSE-SU-2017:3115-1 Security update for xen

This update for xen to version 4.9.1 bsc1027519 fixes several issues. This new feature was added: - Support migration of HVM domains larger than 1 TB These security issues were fixed: - bsc1068187: Failure to recognize errors in the Populate on Demand PoD code allowed for DoS XSA-246 - bsc1068191...

9.1CVSS7.6AI score0.0283EPSS
SaveExploits0References9
Citrix
Citrix
•added 2017/11/22 12:00 a.m.•15 views

Secure Mail ActiveSync redirect 451

When migrating Exchange server for example from On-Premise Exchange to Office 365. Is it possible to have the Exchange server sending an HTTP 451 ActiveSync Redirect to point Secure Mail to the new server without installing a new instance of Secure Mail? Yes: The HTTP 451 is the supported mechani...

6.9AI score
SaveExploits0
OSV
OSV
•added 2017/11/17 8:29 p.m.•42 views

CVE-2017-16845

hw/input/ps2.c in Qemu does not validate 'rptr' and 'count' values during guest migration, leading to out-of-bounds access...

10CVSS6.6AI score
SaveExploits0References6
Prion
Prion
•added 2017/11/17 8:29 p.m.•29 views

Design/Logic Flaw

hw/input/ps2.c in Qemu does not validate 'rptr' and 'count' values during guest migration, leading to out-of-bounds access...

6.4CVSS9.2AI score0.02943EPSS
SaveExploits0References6Affected Software3
NVD
NVD
•added 2017/11/17 8:29 p.m.•32 views

CVE-2017-16845

hw/input/ps2.c in Qemu does not validate 'rptr' and 'count' values during guest migration, leading to out-of-bounds access...

10CVSS9.3AI score0.02943EPSS
SaveExploits0References6
OSV
OSV
•added 2017/11/17 8:29 p.m.•13 views

DEBIAN-CVE-2017-16845

hw/input/ps2.c in Qemu does not validate 'rptr' and 'count' values during guest migration, leading to out-of-bounds access...

10CVSS7AI score0.02943EPSS
SaveExploits0References1
Rows per page
Query Builder