Microsoft Project Spartan bug bounty launched

Microsoft today kicked off a two-month bug hunt for vulnerabilities in Project Spartan, the company’s new browser set to launch alongside Windows 10 later this year, one of several announced additions to its various bounty programs. “Microsoft’s new browser will be the onramp to the Internet for...

Microsoft Windows Hyper-V Denial of Service Vulnerability

Hyper-V is a technology based on the Virtual Machine Monitor that provides a scalable, reliable and highly available virtualization platform. A security vulnerability exists in the implementation of Hyper-V's Virtual Machine Manager VMM in Windows 8.1 and Windows Server 2012 R2 versions. It allow...

Microsoft patch day 2015-4-14: the repair of many high-risk IE, Windows, Office vulnerabilities-vulnerability warning-the black bar safety net

Monthly the second Tuesday, Microsoft fixed the patch to fix the day, Microsoft on Tuesday（2015-4-14 the“patch day”on repairing a large number of vulnerabilities, which includes many IE, Windows, Office, high-risk vulnerabilities. Update announcement MS15-0 3 4 announcement MS15-0 3 4 announcemen...

Microsoft Windows Hyper-V Denial of Service Vulnerability (3047234)

This host is missing an important security update according to Microsoft Bulletin MS15-042. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2015-1647

Virtual Machine Manager VMM in Hyper-V in Microsoft Windows 8.1 and Windows Server 2012 R2 allows guest OS users to cause a denial of service VMM functionality loss via a crafted application, aka "Windows Hyper-V DoS Vulnerability."...

Design/Logic Flaw

Virtual Machine Manager VMM in Hyper-V in Microsoft Windows 8.1 and Windows Server 2012 R2 allows guest OS users to cause a denial of service VMM functionality loss via a crafted application, aka "Windows Hyper-V DoS Vulnerability."...

CVE-2015-1647

CVE-2015-1647 affects Microsoft Windows Hyper-V, specifically the Virtual Machine Manager (VMM) in Windows 8.1 and Windows Server 2012 R2. A crafted application running inside a guest VM can cause a denial of service (VMM functionality loss). The issue is tied to Hyper-V’s VMM component (vmms.exe...

MS15-042: Vulnerability in Windows Hyper-V Could Allow Denial of Service (3047234)

The remote Windows host is affected by a denial of service vulnerability in Hyper-V which a local, authenticated attacker can exploit by using a crafted application running in a virtual machine session. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid82778;...

MS15-042: Vulnerability in Windows Hyper-V could allow denial of service: April 14, 2015

None None...

KLA10555 Denial of service vulnerability in Hyper-V

An unspecified vulnerability was found in Microsoft products. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited remotely via a specially designed application. Original advisories MS advisory CVE-2015-1647 Related products...

Microsoft Windows Hyper-V CVE-2015-1647 Remote Denial of Service Vulnerability

Description Microsoft Windows is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to cause a denial-of-service condition. Technologies Affected Microsoft Windows 8.1 for 64-bit Systems Microsoft Windows Server 2012 R2 Recommendations Block external access at t...

Websense TRITON V-Series appliances directory traversal vulnerability

Websense TRITON V-Series is a V-Series module used in Websense applications from Websense USA. A directory traversal vulnerability in Websense TRITON V-Series appliances prior to version 8.0.0 allows an attacker to read arbitrary files via unspecified vectors...

kernel, perf, python security update

CentOS Errata and Security Advisory CESA-2015:0726 Updated kernel packages that fix two security issues and several bugs are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS...

CentOS 7 : kernel (CESA-2015:0726)

Updated kernel packages that fix two security issues and several bugs are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, a...

Satellite-Based Monitoring Constitutes a Fourth Amendment Search

The Supreme Court has weighed in on a series of lower court decisions, issuing a summary opinion that satellite-based monitoring is in fact a Fourth Amendment search. What remains to be decided is whether GPS-based tracking constitutes an unreasonable search and is thus a violation of the Fourth...

Websense TRITON V-Series appliances cross-site request forgery vulnerability

Websense TRITON is the Unified Content Architecture for data security. A cross-site request forgery vulnerability exists in the Websense TRITON V-Series appliances command line page, which allows attackers to exploit the vulnerability to hijack authentication for unauthorized access...

Websense TRITON V-Series appliances SVM Arbitrary File Upload Vulnerability

Websense TRITON is a unified content architecture to protect data security. A security vulnerability in the Websense TRITON V-Series appliances SVM allows remote attackers to exploit the vulnerability to upload arbitrary files...

Websense TRITON V-Series appliances Arbitrary File Read Information Disclosure Vulnerability

Websense TRITON is the Unified Content Architecture for data security. A security vulnerability in versions prior to Websense TRITON V-Series appliances 7.8.3 hotfix 03 and 7.8.4 hotfix 01 allows remote administrators to read arbitrary files and password information...

Websense Triton and V-Series HTML Injection Vulnerabilities

Websense TRITON is the Unified Content Architecture for data security. Websense TRITON AP-WEB versions prior to 8.0.0 and V-Series 7.7 appliances suffer from multiple HTML injection vulnerabilities that can be exploited by remote attackers to inject malicious script or HTML code, which can be use...

Websense Triton and V-Series CLU Arbitrary Command Execution Vulnerability

Websense TRITON is the Unified Content Architecture for data security. An arbitrary command execution vulnerability exists in the Network Diagnostic Tool CommandLineServlet in the CLU in Websense TRITON AP-WEB 7.8.3 and V-Series appliances, which could allow a remotely authenticated user to execu...