CVE-2020-25598

CVE-2020-25598 affects Xen 4.14.x and later, where a buggy XENMEM_acquire_resource error path fails to release an RCU reference, leaking it and potentially causing livelock DoS during subsequent admin operations (e.g., CPU offline). The issue is tied to the HVM stubdomain path and is reportably p...

CVE-2020-25598

An issue was discovered in Xen 4.14.x. There is a missing unlock in the XENMEMacquireresource error path. The RCU Read, Copy, Update mechanism is a synchronisation primitive. A buggy error path in the XENMEMacquireresource exits without releasing an RCU reference, which is conceptually similar to...

CVE-2020-14371

A credential leak vulnerability was found in Red Hat Satellite. This flaw exposes the compute resources credentials through VMs that are running on these resources in Satellite...

CVE-2020-14369

This release fixes a Cross Site Request Forgery vulnerability was found in Red Hat CloudForms which forces end users to execute unwanted actions on a web application in which the user is currently authenticated. An attacker can make a forgery HTTP request to the server by crafting custom flash fi...

CVE-2020-14364

An out-of-bounds read/write access flaw was found in the USB emulator of the QEMU. This issue occurs while processing USB packets from a guest when USBDevice 'setuplen' exceeds its 'databuf4096' in the dotokenin, dotokenout routines. This flaw allows a guest user to crash the QEMU process,...

SecGen - Create Randomly Insecure VMs

SecGen creates vulnerable virtual machines, lab environments, and hacking challenges, so students can learn security penetration testing techniques. Boxes like Metasploitable2 are always the same, this project uses Vagrant, Puppet, and Ruby to create randomly vulnerable virtual machines that can ...

[SECURITY] Fedora 32 Update: swtpm-0.3.4-1.20200811git80f0418.fc32

TPM emulator built on libtpms providing TPM functionality for QEMU VMs...

[SECURITY] Fedora 31 Update: swtpm-0.3.4-1.20200811git80f0418.fc31

TPM emulator built on libtpms providing TPM functionality for QEMU VMs...

Fedora: Security Advisory for swtpm (FEDORA-2020-b9f747c024)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RHEL 8 : python-paunch and openstack-tripleo-heat-templates (RHSA-2020:3410)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:3410 advisory. Library and utility to launch and manage containers using YAML based configuration data. openstack-tripleo-heat-templates is a collection of OpenStac...

RHEL 8 : python-paunch and openstack-tripleo-heat-templates (RHSA-2020:3406)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:3406 advisory. Library and utility to launch and manage containers using YAML based configuration data. openstack-tripleo-heat-templates is a collection of OpenStac...

CVE-2020-5414

The CVE-2020-5414 entry concerns VMware Tanzu Application Service for VMs (2.7.x prior to 2.7.19, 2.8.x prior to 2.8.13, 2.9.x prior to 2.9.7) where the App Autoscaler logs UAA admin and App Autoscaler Broker passwords. Logs are redacted in VMware Tanzu Operations Manager, but unredacted logs wer...

Lock and Code S1Ep11: Locating concerns of Bluetooth and beacon technology with Chris Boyd

This week on Lock and Code, we discuss the top security headlines generated right here on Labs and around the Internet. In addition, we talk to Chris Boyd, lead malware intelligence analyst for Malwarebytes, about Bluetooth and beacon technology. Last month, cybersecurity experts warned the publi...

July 14, 2020—KB4565539 (Security-only update)

None None...

July 14, 2020—KB4565524 (Monthly Rollup)

None None...

SQL Injection Vulnerability in VMS System Information Management Platform of Chengdu Auclean Technology Co.

Chengdu Auclean Technology Co., Ltd. is a high-tech enterprise engaged in the development of hardware and software, system integration, equipment production and sales related to media convergence, intelligent education, mobile Internet, big data, etc., integrating production, learning and researc...

Product update: Virtuozzo Hybrid Server 7.0 Update 14 Hotfix 1 (7.0.14-257)

The Hotfix 1 for Virtuozzo Hybrid Server 7.0 Update 14 provides stability and usability bug fixes. Vulnerability id: PSBM-105022 Unable to live-migrate VMs with dirty bitmaps on Virtuozzo Storage. Vulnerability id: PSBM-104631, PSBM-104632 CS journals to be placed on SSDs are now properly handled...

italy-vms.ru Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1189048 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

IPConfigure Orchid Core VMS Directory Traversal (CVE-2018-10956)

A directory traversal vulnerability exists in ipconfigure orchid core vms. Successful exploitation of this vulnerability would allow a remote attacker to list directories on the affected system...

Information disclosure

During installation or upgrade to Software House C•CURE 9000 v2.70 and American Dynamics victor Video Management System v5.2, the credentials of the user used to perform the installation or upgrade are logged in a file. The install log file persists after the installation...