825 matches found
Null pointer dereference
The Hypervisor aka rhev-hypervisor in Red Hat Enterprise Virtualization RHEV 2.2, and KVM 83, when the Intel VT-x extension is enabled, allows guest OS users to cause a denial of service NULL pointer dereference and host OS crash via vectors related to instruction emulation...
Linux kernel 2.6.x KVM Intel VT-x扩展空指针引用拒绝服务漏洞
BUGTRAQ ID: 42582 CVE ID: CVE-2010-0435 Linux Kernel是开放源码操作系统Linux所使用的内核。 主机系统上的处理器启用了Intel VT-x扩展时存在空指针引用漏洞。如果模拟器受骗模拟了mov to/from DR指令,由于没有初始化kvmx86ops-set|getdr,可能会触发这个空指针引用,导致主机崩溃。 Linux kernel 2.6.x 厂商补丁: Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题,请到厂商的主页下载: https://patchwork.kernel.org/patch/95725/...
CVE-2010-0435
The Hypervisor aka rhev-hypervisor in Red Hat Enterprise Virtualization RHEV 2.2, and KVM 83, when the Intel VT-x extension is enabled, allows guest OS users to cause a denial of service NULL pointer dereference and host OS crash via vectors related to instruction emulation...
Important: Red Hat Security Advisory: rhev-hypervisor security and bug fix update
Updated rhev-hypervisor packages that fix multiple security issues and two bugs are now available. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are availabl...
kvm: vmx null pointer dereference
The Hypervisor aka rhev-hypervisor in Red Hat Enterprise Virtualization RHEV 2.2, and KVM 83, when the Intel VT-x extension is enabled, allows guest OS users to cause a denial of service NULL pointer dereference and host OS crash via vectors related to instruction emulation...
Nmap NSE: Banner Grabber
This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Improper access control
Erolife AjxGaleri VT stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for db/ajxgaleri.mdb...
CVE-2010-1064
Erolife AjxGaleri VT stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for db/ajxgaleri.mdb...
CVE-2010-1064
The CVE-2010-1064 vulnerability affects Erolife AjxGaleri VT, where sensitive data is stored under the web root with insufficient access control. This allows remote attackers to download the database (db/ajxgaleri.mdb) via a direct request. The issue is reflected in the NVD entry (CVSSv2 base sco...
Erolife AjxGaleri VT Database Disclosure Vulnerability
Exploit for unknown platform in category web applications ====================================================== Erolife AjxGaleri VT Database Disclosure Vulnerability ====================================================== » Script: Erolife AjxGaleri VT » Language: ASP » Download:...
Erolife AjxGaleri VT - Database Disclosure
Erolife AjxGaleri VT - Database Disclosure ============================================================================== » Note : Mutlu Yillar Millettt ============================================================================== » Erolife AjxGaleri VT Database Disclosure Vulnerability...
Erolife AjxGaleri VT - Database Disclosure
============================================================================== » Note : Mutlu Yillar Millettt ============================================================================== » Erolife AjxGaleri VT Database Disclosure Vulnerability...
CVE-2009-4419
Intel Q35, GM45, PM45 Express, Q45, and Q43 Express chipsets in the SINIT Authenticated Code Module ACM, which allows local users to bypass the Trusted Execution Technology protection mechanism and gain privileges by modifying the MCHBAR register to point to an attacker-controlled region, which...
CVE-2009-4419
Intel Q35, GM45, PM45 Express, Q45, and Q43 Express chipsets in the SINIT Authenticated Code Module ACM, which allows local users to bypass the Trusted Execution Technology protection mechanism and gain privileges by modifying the MCHBAR register to point to an attacker-controlled region, which...
Improper access control
Vlad Titarenko ASP VT Auth 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file and obtain usernames and passwords via a direct request for zHk8dEes3.txt...
CVE-2009-2024
Vlad Titarenko ASP VT Auth 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file and obtain usernames and passwords via a direct request for zHk8dEes3.txt...
CVE-2009-2024
CVE-2009-2024 affects Vlad Titarenko ASP VT Auth 1.0. The vulnerability arises from storing sensitive information under the web root with insufficient access control, allowing remote attackers to download the database file and obtain usernames and passwords via a direct request for zHk8dEes3.txt....
VT-Auth 1.0 - zHk8dEes3.txt File Disclosure
VT-Auth 1.0 - zHk8dEes3.txt File Disclosure @=======================================@ ====C4TEAM.ORG====ByALBAYX====C4TEAM.ORG===== @=======================================@ @=Author : ByALBAYX @=Website : WWW.C4TEAM.ORG @===============TURKISH=================@...
VT-Auth 1.0 File Disclosure
@=======================================@ ====C4TEAM.ORG====ByALBAYX====C4TEAM.ORG===== @=======================================@ @=Author : ByALBAYX @=Website : WWW.C4TEAM.ORG @===============TURKISH=================@ @=======================================@ @=Script : VT-Auth v1.0 @=S.Site :...
VT-Auth 1.0 (zHk8dEes3.txt) File Disclosure Vulnerability
No description provided by source. @=======================================@ ====C4TEAM.ORG====ByALBAYX====C4TEAM.ORG===== @=======================================@ @=Author : ByALBAYX @=Website : WWW.C4TEAM.ORG @===============TURKISH=================@ @=======================================@...