181 matches found
Denial Of Service (DoS)
xen is vulnerable to denial of service DoS. The vulnerability exists as it was discovered that the hypervisor's para-virtualized framebuffer PVFB backend failed to validate the frontend's framebuffer description properly. This could allow a privileged user in the unprivileged domain DomU to cause...
Denial Of Service (DoS)
xen is vulnerable to denial of service. The hypervisor's para-virtualized framebuffer PVFB backend failed to validate the frontend's framebuffer description. This could allow a malicious user to cause a denial of service, or to use a specially crafted frontend to compromise the privileged domain...
Fuzzing para-virtualized devices in Hyper-V
Introduction Hyper-V is the backbone of Azure, running on its Hosts to provide efficient and fair sharing of resources, but also isolation. That’s why we, in the vulnerability research team for Windows, have been working in the background for years now helping secure Hyper-V. And why Microsoft...
Fuzzing para-virtualized devices in Hyper-V
Introduction Introduction Hyper-V is the backbone of Azure, running on its Hosts to provide efficient and fair sharing of resources, but also isolation. That’s why we, in the vulnerability research team for Windows, have been working in the background for years now helping secure Hyper-V. And why...
CVE-2018-17011: Undefined Security Weakness
An issue was discovered on TP-Link TL-WR886N 6.0 2.3.4 and TL-WR886N 7.0 1.1.0 devices. Authenticated attackers can crash router services e.g., inetd, HTTP, DNS, and UPnP via long JSON data for hostsinfo para sun...
luzparaospovos.org.br XSS vulnerability
Open Bug Bounty ID: OBB-665043 Description| Value ---|--- Affected Website:| luzparaospovos.org.br Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
accesoriosparacaballo.mexicored.com.mx XSS vulnerability
Open Bug Bounty ID: OBB-455479 Description| Value ---|--- Affected Website:| accesoriosparacaballo.mexicored.com.mx Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP...
Hangul Word Processor Type Confusion (CVE-2015-6585)
There exists a Type Confusion vulnerability in the Hangul Word Processor HWP. This is due to the way HWP handles Para change requests. A successful attack, such as in the Hidden Cobra Botnet, could lead to arbitrary code execution or stolen information...
Type confusion
hwpapp.dll in Hangul Word Processor allows remote attackers to execute arbitrary code via a crafted heap spray, and by leveraging a "type confusion" via an HWPX file containing a crafted para text tag...
PT-2017-7038
Name of the Vulnerable Software and Affected Versions Hangul Word Processor affected versions not specified Description The issue allows remote attackers to execute arbitrary code via a crafted heap spray by leveraging a type confusion via an HWPX file containing a crafted para text tag...
CVE-2017-9764
Cross-site scripting XSS vulnerability in MetInfo 5.3.17 allows remote attackers to inject arbitrary web script or HTML via the Client-IP or X-Forwarded-For HTTP header to /include/stat/stat.php in a para action...
PT-2017-19170
Name of the Vulnerable Software and Affected Versions MetInfo version 5.3.17 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the Client-IP or X-Forwarded-For HTTP header to the "/include/stat/stat.php" API endpoint in a para action...
CVE-2017-9764: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in MetInfo 5.3.17 allows remote attackers to inject arbitrary web script or HTML via the Client-IP or X-Forwarded-For HTTP header to /include/stat/stat.php in a para action...
Radio Nacidos Para Triunfar - Customized SSL, Redefined SSL Common Names verifier, WebView SSL handling enabled vulnerabilities
HackApp vulnerability scanner discovered that application Radio Nacidos Para Triunfar published at the 'play' market has multiple vulnerabilities...
UBUNTU-CVE-2016-10024
Xen through 4.8.x allows local x86 PV guest OS kernel administrators to cause a denial of service host hang or crash by modifying the instruction stream asynchronously while performing certain kernel operations...
Xen Denial of Service Vulnerability (CNVD-2016-11700)
Xen is an open source virtual machine monitor product developed at the University of Cambridge, UK. The product enables different and incompatible operating systems to run on the same computer and supports runtime migration to ensure uptime and avoid downtime. A denial-of-service vulnerability...
[SECURITY] Fedora 22 Update: mingw-spice-protocol-0.12.10-1.fc22
Header files describing the spice protocol and the para-virtual graphics card QXL...
CVE-2012-2625
CVE-2012-2625 affects the PyGrub boot loader in Xen unstable before changeset 25589:60f09d1ab1fe, and in Xen 4.2.x and 4.1.x. It allows local para-virtualized guest users to cause a denial of service by triggering memory consumption when loading a kernel image that is large and compressed (either...
CVE-2012-2625
The PyGrub boot loader in Xen unstable before changeset 25589:60f09d1ab1fe, 4.2.x, and 4.1.x allows local para-virtualized guest users to cause a denial of service memory consumption via a large 1 bzip2 or 2 lzma compressed kernel image...