EUVD-2013-6739

Malware in sbrugna...

Improper access control

Missing access control restrictions in the Hypervisor component of the ACRN Project v2.0 and v1.6.1 allow a malicious entity, with root access in the Service VM userspace, to abuse the PCIe assign/de-assign Hypercalls via crafted ioctls and payloads. This attack results in a corrupt state and...

CVE-2020-15687: Undefined Security Weakness

Missing access control restrictions in the Hypervisor component of the ACRN Project v2.0 and v1.6.1 allow a malicious entity, with root access in the Service VM userspace, to abuse the PCIe assign/de-assign Hypercalls via crafted ioctls and payloads. This attack results in a corrupt state and...

PT-2020-14584

Name of the Vulnerable Software and Affected Versions ACRN Project versions 1.6.1 through 2.0 Description The issue is related to missing access control restrictions in the Hypervisor component, allowing a malicious entity with root access in the Service VM userspace to abuse the PCIe...

Introduction to Citrix NetScaler SDX

Introduction to NetScaler SDX NetScaler SDX is a hardware-based Application Delivery Appliance for enterprise and cloud datacenters. It supports hosting of multiple NetScaler instances on a single hardware and can thus be used for the purpose of Multi-tenancy. NetScaler SDX Components 1. XenServe...

CVE-2015-7996: Exposure of Sensitive Information to an Unauthorized Actor

The Nitro API in Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway before 10.1 Build 133.9, 10.5 before Build 58.11, and 10.5.e before Build 56.1505.e on NetScaler Service Delivery Appliance Service VM SVM devices allow attackers to obtain credentials via the browser cach...

Design/Logic Flaw

Unspecified vulnerability in the Service VM in Citrix NetScaler SDX 9.3 before 9.3-64.4 and 10.0 before 10.0-77.5 and Application Delivery Controller ADC 9.3.x before 9.3-64.4, 10.0 before 10.0-77.5, and 10.1 before 10.1-118.7 allows attackers to cause a denial of service via unknown vectors,...

CVE-2013-6938: Undefined Security Weakness

Unspecified vulnerability in the Service VM in Citrix NetScaler SDX 9.3 before 9.3-64.4 and 10.0 before 10.0-77.5 and Application Delivery Controller ADC 9.3.x before 9.3-64.4, 10.0 before 10.0-77.5, and 10.1 before 10.1-118.7 allows attackers to cause a denial of service via unknown vectors,...