EUVD-2016-6586

Malware in sbrugna...

EUVD-2016-7455

Malware in sbrugna...

kernel: KVM: SVM: WARN on vNMI + NMI window iff NMIs are outright masked

In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: WARN on vNMI + NMI window iff NMIs are outright masked When requesting an NMI window, WARN on vNMI support being enabled if and only if NMIs are actually masked, i.e. if the vCPU is already handling an NMI. KVM's ABI fo...

CBL Mariner 2.0 Security Update: kernel (CVE-2015-5157)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2015-5157 advisory. - arch/x86/entry/entry64.S in the Linux kernel before 4.1.6 on the x8664 platform mishandles IRET faults in...

CVE-2018-8897

A statement in the System Programming Guide of the Intel 64 and IA-32 Architectures Software Developer's Manual SDM was mishandled in the development of some or all operating-system kernels, resulting in unexpected behavior for DB exceptions that are deferred by MOV SS or POP SS, as demonstrated ...

Opmantek NMIS Cross-Site Scripting Vulnerability

Opmantek NMIS is an open source, scalable network management platform from Opmantek Australia. A cross-site scripting vulnerability exists in versions of Opmantek NMIS prior to 8.5.12G. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML via SNMP...

Opmantek NMIS Command Injection Vulnerability

Opmantek is a developer of opensource IT infrastructure management and auditing software. A command injection vulnerability exists in Opmantek NMIS. This allows attackers to inject via man, finger, ping, trace, and nslookup commands in tools.pl CGI scripts...

CVE-2016-5642

Opmantek NMIS before 8.5.12G has XSS via SNMP...

CVE-2016-5642

Opmantek NMIS before 8.5.12G has XSS via SNMP...

CVE-2016-6534

Opmantek NMIS before 4.3.7c has command injection via man, finger, ping, trace, and nslookup in the tools.pl CGI script. Versions before 8.5.12G might be affected in non-default configurations...

Design/Logic Flaw

Opmantek NMIS before 8.5.12G has XSS via SNMP...

Command injection

Opmantek NMIS before 4.3.7c has command injection via man, finger, ping, trace, and nslookup in the tools.pl CGI script. Versions before 8.5.12G might be affected in non-default configurations...

CVE-2016-5642

Opmantek NMIS before 8.5.12G has XSS via SNMP...

CVE-2016-5642

CVE-2016-5642 affects Opmantek NMIS prior to 8.5.12G, with a cross-site scripting (XSS) flaw exploitable via SNMP. A remote attacker with SNMP access can inject arbitrary web script or HTML into NMIS web sessions, potentially impacting user-facing interfaces. Public sources in connected documents...

CVE-2016-6534

CVE-2016-6534 affects Opmantek NMIS prior to 4.3.7c (and potential exposure in non-default configurations for versions earlier than 8.5.12G). The vulnerability is a command injection via the tools.pl CGI script, exploitable through the following utilities: man, finger, ping, trace, and nslookup. ...

CVE-2016-6534

Opmantek NMIS before 4.3.7c has command injection via man, finger, ping, trace, and nslookup in the tools.pl CGI script. Versions before 8.5.12G might be affected in non-default configurations...

Opmantek NMIS XSS Vulnerability

Opmantek NMIS is prone to a cross-site scripting vulnerability via SNMP Trap messages. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Opmantek NMIS Multiple Vulnerabilities

Opmantek NMIS is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:opmantek:nmis"; if descriptio...

Opmantek NMIS Detection

Detection of Opmantek NMIS The script attempts to identify Opmantek NMIS and to extract the version number. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

kernel, perf, python security update

CentOS Errata and Security Advisory CESA-2016:0715 An update for kernel is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...