Lucene search
+L

7 matches found

Veracode
Veracode
•added 2019/05/02 6:36 a.m.•35 views

Information Disclosure

QEMU is vulnerable to information disclosure attacks. This is because the patchinstruction function in hw/i386/kvmvapic.c does not initialize the imm32 variable which allows a local attacker to obtain sensitive information from host stack memory by accessing the Task Priority Register TPR...

6.5CVSS5.9AI score0.00372EPSS
SaveExploits0References219Affected Software1
NVD
NVD
•added 2016/05/25 3:59 p.m.•32 views

CVE-2016-4020

The patchinstruction function in hw/i386/kvmvapic.c in QEMU does not initialize the imm32 variable, which allows local guest OS administrators to obtain sensitive information from host stack memory by accessing the Task Priority Register TPR...

6.5CVSS6.1AI score0.00372EPSS
SaveExploits0References11
Prion
Prion
•added 2016/05/25 3:59 p.m.•28 views

Session fixation

The patchinstruction function in hw/i386/kvmvapic.c in QEMU does not initialize the imm32 variable, which allows local guest OS administrators to obtain sensitive information from host stack memory by accessing the Task Priority Register TPR...

2.1CVSS5.9AI score0.00372EPSS
SaveExploits0References11Affected Software11
Cvelist
Cvelist
•added 2016/05/25 3:00 p.m.•41 views

CVE-2016-4020

The patchinstruction function in hw/i386/kvmvapic.c in QEMU does not initialize the imm32 variable, which allows local guest OS administrators to obtain sensitive information from host stack memory by accessing the Task Priority Register TPR...

6.6AI score0.00372EPSS
SaveExploits0References11
Debian CVE
Debian CVE
•added 2016/05/25 3:00 p.m.•42 views

CVE-2016-4020

The patchinstruction function in hw/i386/kvmvapic.c in QEMU does not initialize the imm32 variable, which allows local guest OS administrators to obtain sensitive information from host stack memory by accessing the Task Priority Register TPR...

6.5CVSS6.8AI score0.00372EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2016/05/25 12:00 a.m.•4 views

CVE-2016-4020: Undefined Security Weakness

The patchinstruction function in hw/i386/kvmvapic.c in QEMU does not initialize the imm32 variable, which allows local guest OS administrators to obtain sensitive information from host stack memory by accessing the Task Priority Register TPR...

6.5CVSS6.6AI score0.00372EPSS
SaveExploits0References1
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•37 views

Invision Power Board <= 2.1.7 ACTIVE XSS/SQL Injection Exploit

No description provided by source. ---- INVISION POWER BOARD 2.1.7 EXPLOIT ... ITDefence.ru Antichat.ru INVISION POWER BOARD 2.1.7 ACTIVE XSS/SQL INJECTION Eugene Minaev [email protected] / \ \ \ / .\ / /// // / \ / \ // / / / /// /\ / / / / // / / / / / /\ / / / / / / / / / / / //\ \ / /...

7.1AI score
SaveExploits0
Rows per page
Query Builder