Kernel: perf/x86: offcore_rsp valid mask for SNB/IVB

arch/x86/kernel/cpu/perfeventintel.c in the Linux kernel before 3.8.9, when the Performance Events Subsystem is enabled, specifies an incorrect bitmask, which allows local users to cause a denial of service general protection fault and system crash by attempting to set a reserved bit...

Kernel: perf/x86: offcore_rsp valid mask for SNB/IVB

arch/x86/kernel/cpu/perfeventintel.c in the Linux kernel before 3.8.9, when the Performance Events Subsystem is enabled, specifies an incorrect bitmask, which allows local users to cause a denial of service general protection fault and system crash by attempting to set a reserved bit...

Oracle Linux 5 : kernel (ELSA-2013-1034-1)

From Red Hat Security Advisory 2013:1034 : Updated kernel packages that fix multiple security issues and various bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having low security impact. Common Vulnerability Scoring System CVSS...

CVE-2013-2146

arch/x86/kernel/cpu/perfeventintel.c in the Linux kernel before 3.8.9, when the Performance Events Subsystem is enabled, specifies an incorrect bitmask, which allows local users to cause a denial of service general protection fault and system crash by attempting to set a reserved bit...

CVE-2013-2146

arch/x86/kernel/cpu/perfeventintel.c in the Linux kernel before 3.8.9, when the Performance Events Subsystem is enabled, specifies an incorrect bitmask, which allows local users to cause a denial of service general protection fault and system crash by attempting to set a reserved bit...

UBUNTU-CVE-2013-2146

arch/x86/kernel/cpu/perfeventintel.c in the Linux kernel before 3.8.9, when the Performance Events Subsystem is enabled, specifies an incorrect bitmask, which allows local users to cause a denial of service general protection fault and system crash by attempting to set a reserved bit...

PT-2013-3562 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 3.8.9 Description: The issue is related to the Performance Events Subsystem in the Linux kernel. It allows local users to cause a denial of service, resulting in a general protection fault and system crash, by...

CVE-2012-5513

The XENMEMexchange handler in Xen 4.2 and earlier does not properly check the memory address, which allows local PV guest OS administrators to cause a denial of service crash or possibly gain privileges via unspecified vectors that overwrite memory in the hypervisor reserved range...

Design/Logic Flaw

The XENMEMexchange handler in Xen 4.2 and earlier does not properly check the memory address, which allows local PV guest OS administrators to cause a denial of service crash or possibly gain privileges via unspecified vectors that overwrite memory in the hypervisor reserved range...

CVE-2012-5597

CVE-2012-5597 is rejected; this CVE ID is not used and does not represent an active vulnerability entry.

hypercall set_debugreg vulnerability

ISSUE DESCRIPTION setdebugreg allows writes to reserved bits of the DR7 debug control register on x86-64. IMPACT A malicious guest can cause the host to crash, leading to a DoS. If the vulnerable hypervisor is run on future hardware, the impact of the vulnerability might be widened depending on t...

CVE-2012-1451

The CAB file parser in Emsisoft Anti-Malware 5.1.0.1 and Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0 allows remote attackers to bypass malware detection via a CAB file with a modified reserved2 field. NOTE: this may later be SPLIT into multiple CVEs if additional information is...

CVE-2012-1450

The CAB file parser in Emsisoft Anti-Malware 5.1.0.1, Sophos Anti-Virus 4.61.0, and Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0 allows remote attackers to bypass malware detection via a CAB file with a modified reserved3 field. NOTE: this may later be SPLIT into multiple CVEs if...

Linux Kernel 2.6.37-rc1 - 'serial_multiport_struct' Local Information Leak

/ Linux include include include include include define DEVICE "/dev/ttyS1" int mainint argc, char argv int ret = 0; int i, fd, reservedsize; char buf; struct serialmultiportstruct buffer; printf"\m/ Linux \n", argv0; exit-1; if argc 2 if reservedsize = atoiargv2 == 0 fprintfstderr, " - Sorry: ato...

eWebeditoR3. 8 for php arbitrary file upload EXP-vulnerability warning-the black bar safety net

! titleeWebeditoR3. 8 for php any file on the EXP/title form action="" method=post enctype="multipart/form-data" INPUT TYPE="hidden" name="MAXFILESIZE" value="5 1 2 0 0 0" A href="http://hi.baidu.com/fc/editor/input"URL:input type=text name=url value="" size=1 0 0br INPUT TYPE="hidden"...

CVE-2009-0189

CVE-2009-0189 is rejected/not used and does not represent an active vulnerability entry.

Vox blog Cross Site Scripting Vulnerability

Exploit for unknown platform in category web applications =========================================== Vox blog Cross Site Scripting Vulnerability =========================================== Exploit Title: Vox blog Cross Site Scripting Vulnerability Author: Phenom Software Link: Version: Tested on...

CVE-2009-4587

Cherokee Web Server 0.5.4 allows remote attackers to cause a denial of service daemon crash via an MS-DOS reserved word in a URI, as demonstrated by the AUX reserved word...

CVE-2009-4587

Cherokee Web Server 0.5.4 allows remote attackers to cause a denial of service daemon crash via an MS-DOS reserved word in a URI, as demonstrated by the AUX reserved word...

phpCollegeExchange 0.1.5c Multiple SQL Injection Vulnerabilities

phpCollegeExchange 0.1.5c Multiple SQL Injection Vulnerabilities Name phpCollegeExchange Vendor http://phpcollegeex.sourceforge.net Versions Affected 0.1.5c Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Date 2009-12-11 X...