481 matches found
DEBIAN-CVE-2015-7972
The 1 libxlsetmemorytarget function in tools/libxl/libxl.c and 2 libxlbuildpost function in tools/libxl/libxldom.c in Xen 3.4.x through 4.6.x do not properly calculate the balloon size when using the populate-on-demand PoD system, which allows local HVM guest users to cause a denial of service...
Xen elevation of privilege vulnerability (CNVD-2015-07060)
Xen is an open source virtual machine that is the foundation for virtualizing cloud computing. An elevation of privilege vulnerability exists in versions prior to Xen 3.4. An attacker can elevate privileges to take control of the entire system, leading to the escape of a virtual machine and posin...
acsno Probe Management and Test System V3.4. Series Directory Traversal Vulnerability
Shenyang ACSNO Communication Equipment Co., Ltd. is a high-tech enterprise specializing in the development, production and sales of communication equipment software and hardware, and a member of MEF Association. There is a directory traversal vulnerability in the acsno probe management and testin...
Qemu Memory Misreference Vulnerability
QEMU is an open source emulator software. A memory misreference vulnerability exists when Qemu, which supports IDE Emulation PCI PIIX3/4, writes data to a client I/O port, which can be exploited by a client user to cause a Qemu instance to crash, resulting in a denial of service...
Vulnerabilities of the CentOS operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information
Multiple vulnerabilities exist in the glibc-2.3.4 package of the CentOS operating system. Exploitation of these vulnerabilities may lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited locally...
Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality and accessibility of protected information
The kdelibs-4.3.4 package has multiple vulnerabilities in the Red Hat Enterprise Linux operating system. Exploitation of these vulnerabilities may lead to breaches of confidentiality and accessibility of protected information. These vulnerabilities can be exploited remotely...
Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality and accessibility of protected information
The kdelibs-4.3.4 package has multiple vulnerabilities in the Red Hat Enterprise Linux operating system. Exploitation of these vulnerabilities may lead to breaches of confidentiality and accessibility of protected information. These vulnerabilities can be exploited remotely...
PT-2014-5352 · Ovirt · Ovirt
Name of the Vulnerable Software and Affected Versions: oVirt versions 3.4 Description: The issue is related to an XML External Entity XXE problem in the REST API of the ovirt-engine in oVirt. This allows remote authenticated users to read arbitrary files and potentially have other impacts via...
PT-2013-3541 · Python +1 · Python-Backports-Ssl Match Hostname +2
Name of the Vulnerable Software and Affected Versions: Python versions prior to 3.4 python-backports-ssl match hostname affected versions not specified Description: The issue allows remote attackers to cause a denial of service, specifically CPU consumption, by exploiting the ssl.match hostname...
DEBIAN-CVE-2012-4398
The requestmodule function in kernel/kmod.c in the Linux kernel before 3.4 does not set a certain killable attribute, which allows local users to cause a denial of service memory consumption via a crafted application...
kernel: ext4: AIO vs fallocate stale data exposure
Race condition in fs/ext4/extents.c in the Linux kernel before 3.4.16 allows local users to obtain sensitive information from a deleted file by reading an extent that was not properly marked as uninitialized...
PT-2011-1487 · Linux +1 · Linux Kernel +1
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.34 Description: The issue is related to the socket implementation in the Linux kernel, which does not properly manage a backlog of received packets. This allows remote attackers to cause a denial of service ...
PT-2010-1171 · Php +1 · Php +1
Name of the Vulnerable Software and Affected Versions: PHP versions prior to 5.3.4 Description: The issue arises from the utf8 decode function not properly handling non-shortest form UTF-8 encoding and ill-formed subsequences in UTF-8 data. This makes it easier for remote attackers to bypass...
PT-2008-5344 · Microsoft · Xml Core Services
Name of the Vulnerable Software and Affected Versions: Microsoft XML Core Services versions 3.0 through 4.0 Description: The issue allows remote attackers to obtain sensitive information from another domain via a crafted XML document, related to improper error checks for external DTDs...
CVE-2006-6309
Multiple array index errors in IBM Tivoli Storage Manager TSM before 5.2.9 and 5.3.x before 5.3.4 allow remote attackers to read arbitrary memory locations and cause a denial of service crash via a large index value in unspecified messages, a different issue than CVE-2006-5855...
CVE-2001-0134
Buffer overflow in cpqlogin.htm in web-enabled agents for various Compaq management software products such as Insight Manager and Management Agents allows remote attackers to execute arbitrary commands via a long user name...
CVE-2025-34651
CVE-2025-34651 is rejected/not used and does not represent an active vulnerability entry.