Parallels virtuozzo's VZPP multiple csrf vulnerabilities

hello, Parallels www.parallels.com has developed a server virtualization system called Virtuozzo. It comes with a web interface, called VZPP, very similar to parallel's Plesk that allows system admins to manage their virtual servers. Unfortunatly this nice web interface is affected by multiple cs...

H-Sphere SiteStudio未明漏洞

BUGTRAQ ID: 28002 CNCAN ID:CNCAN-2008022801 H-Sphere SiteStudio是一款自助建站系统。 H-Sphere SiteStudio存在未明安全问题，远程攻击者可以利用漏洞入侵应用程序。 目前没有详细漏洞细节提供。 Parallels SiteStudio 1.7.1 Parallels SiteStudio 1.7 Parallels H-Sphere 3.0 Patch 8 Parallels H-Sphere 2.5 Patch 10 可参考如下补丁：...

Design/Logic Flaw

Unspecified vulnerability in Parallels SiteStudio before 1.7.2, and 1.8.x before 1.8b, as used in Parallels H-Sphere 3.0 before Patch 9 and 2.5 before Patch 11, has unknown impact and attack vectors...

CVE-2008-1049

Unspecified vulnerability in Parallels SiteStudio before 1.7.2, and 1.8.x before 1.8b, as used in Parallels H-Sphere 3.0 before Patch 9 and 2.5 before Patch 11, has unknown impact and attack vectors...

CVE-2008-1049

Unspecified vulnerability in Parallels SiteStudio before 1.7.2, and 1.8.x before 1.8b, as used in Parallels H-Sphere 3.0 before Patch 9 and 2.5 before Patch 11, has unknown impact and attack vectors...

CVE-2008-1049

Technical details about CVE-2008-1049 are not publicly available in the provided documents. Monitor for updates from vendors and security bulletins to learn affected products, impact, and remediation once disclosed.

CVE-2008-1049: Undefined Security Weakness

Unspecified vulnerability in Parallels SiteStudio before 1.7.2, and 1.8.x before 1.8b, as used in Parallels H-Sphere 3.0 before Patch 9 and 2.5 before Patch 11, has unknown impact and attack vectors...

Heap overflow

Heap-based buffer overflow in the VGA device in Parallels allows local users, with root access to the guest operating system, to terminate the virtual machine and possibly execute arbitrary code in the host operating system via unspecified vectors related to bitblt operations...

CVE-2007-2455

Parallels allows local users to cause a denial of service virtual machine abort via 1 certain INT instructions, as demonstrated by INT 0xAA; 2 an IRET instruction when an invalid address is at the top of the stack; 3 a malformed MOVNTI instruction, as demonstrated by using a register as a...

Design/Logic Flaw

Parallels allows local users to cause a denial of service virtual machine abort via 1 certain INT instructions, as demonstrated by INT 0xAA; 2 an IRET instruction when an invalid address is at the top of the stack; 3 a malformed MOVNTI instruction, as demonstrated by using a register as a...

CVE-2007-2454

Heap-based buffer overflow in the VGA device in Parallels allows local users, with root access to the guest operating system, to terminate the virtual machine and possibly execute arbitrary code in the host operating system via unspecified vectors related to bitblt operations...

CVE-2007-2454

CVE-2007-2454 describes a heap-based buffer overflow in the VGA device used by Parallels. The flaw allows local users with root access inside the guest to terminate the virtual machine and potentially execute arbitrary code on the host via vectors related to bitblt operations. Documents do not pr...

CVE-2007-2454

Heap-based buffer overflow in the VGA device in Parallels allows local users, with root access to the guest operating system, to terminate the virtual machine and possibly execute arbitrary code in the host operating system via unspecified vectors related to bitblt operations...

CVE-2007-2455

Technical details about CVE-2007-2455 are not publicly available in the provided connected documents; no affected products, root cause, impact, or remediation are specified. Monitor for updates in future reports.

CVE-2007-2455

Parallels allows local users to cause a denial of service virtual machine abort via 1 certain INT instructions, as demonstrated by INT 0xAA; 2 an IRET instruction when an invalid address is at the top of the stack; 3 a malformed MOVNTI instruction, as demonstrated by using a register as a...

CVE-2007-2455: Undefined Security Weakness

Parallels allows local users to cause a denial of service virtual machine abort via 1 certain INT instructions, as demonstrated by INT 0xAA; 2 an IRET instruction when an invalid address is at the top of the stack; 3 a malformed MOVNTI instruction, as demonstrated by using a register as a...

CVE-2007-2454: Undefined Security Weakness

Heap-based buffer overflow in the VGA device in Parallels allows local users, with root access to the guest operating system, to terminate the virtual machine and possibly execute arbitrary code in the host operating system via unspecified vectors related to bitblt operations...

CVE-2007-1222

Parallels Desktop for Mac before 20070216 implements Drag and Drop by sharing the entire host filesystem as the .psf share, which allows local users of the guest operating system to write arbitrary files to the host filesystem, and execute arbitrary code via launchd by writing a plist file to a...

CVE-2007-1222

Parallels Desktop for Mac before 20070216 implements Drag and Drop by sharing the entire host filesystem as the .psf share, which allows local users of the guest operating system to write arbitrary files to the host filesystem, and execute arbitrary code via launchd by writing a plist file to a...

Directory traversal

Parallels Desktop for Mac before 20070216 implements Drag and Drop by sharing the entire host filesystem as the .psf share, which allows local users of the guest operating system to write arbitrary files to the host filesystem, and execute arbitrary code via launchd by writing a plist file to a...