4 November 2016

21 results · Feed

• Unscored —
  CVE-2016-8576

  The xhci_ring_fetch function in hw/usb/hcd-xhci.c in QEMU (aka Quick Emulator) allows local guest OS administrators to …

  qemu qemu qemu Debian Ubuntu Alpine
  Nov 4, 2016
• Unscored —
  CVE-2016-8578

  The v9fs_iov_vunmarshal function in fsdev/9p-iov-marshal.c in QEMU (aka Quick Emulator) allows local guest OS administr…

  qemu qemu qemu Debian Ubuntu Alpine
  Nov 4, 2016
• Unscored —
  CVE-2016-8910

  The rtl8139_cplus_transmit function in hw/net/rtl8139.c in QEMU (aka Quick Emulator) allows local guest OS administrato…

  qemu qemu qemu Debian Ubuntu Alpine
  Nov 4, 2016
• Unscored —
  CVE-2016-8909

  The intel_hda_xfer function in hw/audio/intel-hda.c in QEMU (aka Quick Emulator) allows local guest OS administrators t…

  qemu qemu qemu Debian Ubuntu Alpine
  Nov 4, 2016
• Unscored —
  CVE-2016-8669

  The serial_update_parameters function in hw/char/serial.c in QEMU (aka Quick Emulator) allows local guest OS administra…

  qemu qemu Debian Ubuntu
  Nov 4, 2016
• Unscored —
  CVE-2016-8667

  The rc4030_write function in hw/dma/rc4030.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause…

  qemu qemu Debian Ubuntu
  Nov 4, 2016
• Unscored —
  CVE-2016-8668

  The rocker_io_writel function in hw/net/rocker/rocker.c in QEMU (aka Quick Emulator) allows local guest OS administrato…

  qemu qemu qemu Debian Ubuntu Alpine
  Nov 4, 2016
• Unscored —
  CVE-2016-8869 Public exploit EPSS 97%

  The register method in the UsersModelRegistration class in controllers/user.php in the Users component in Joomla! befor…

  Nov 4, 2016
• Unscored —
  CVE-2016-8870 Public exploit EPSS 81%

  The register method in the UsersModelRegistration class in controllers/user.php in the Users component in Joomla! befor…

  Nov 4, 2016
• Unscored —
  CVE-2016-8577

  Memory leak in the v9fs_read function in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local guest OS administrators…

  qemu qemu qemu Debian Ubuntu Alpine
  Nov 4, 2016
• High 7.8
  CVE-2016-9190

  Arbitrary code using "crafted image file" approach affecting Pillow

  Pillow before 3.3.2 allows context-dependent attackers to execute arbitrary code by using the "crafted image file" approach, related to an "Insecure Sign Extension" issue affecting the ImagingNew in Storage.c component.

  pillow pillow pillow Debian Ubuntu PyPI
  Nov 4, 2016
• Unscored —
  CVE-2016-9183

  In /framework/modules/ecommerce/controllers/orderController.php of Exponent CMS 2.4.0, untrusted input is passed into s…

  Nov 4, 2016
• High 8.8
  CVE-2016-9187

  Moodle Unrestricted file upload vulnerability

  Unrestricted file upload vulnerability in the double extension support in the "image" module in Moodle 3.1.2 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, and then accessing it via unspecified ve…

  moodle/moodle moodle Ubuntu Packagist
  Nov 4, 2016
• Unscored —
  CVE-2016-9185

  In OpenStack Heat, by launching a new Heat stack with a local URL an authenticated user may conduct network discovery r…

  heat Debian
  Nov 4, 2016
• Unscored —
  CVE-2016-9186

  Unrestricted file upload vulnerability in the "legacy course files" and "file manager" modules in Moodle 3.1.2 allows r…

  moodle Ubuntu
  Nov 4, 2016
• Medium 6.1
  CVE-2016-9188

  Moodle XSS Vulnerability

  Cross-site scripting (XSS) vulnerabilities in Moodle CMS on or before 3.1.2 allow remote attackers to inject arbitrary web script or HTML via the s_additionalhtmlhead, s_additionalhtmltopofbody, and s_additionalhtmlfooter parameters.

  moodle/moodle moodle Ubuntu Packagist
  Nov 4, 2016
• Unscored —
  CVE-2016-9184

  In /framework/modules/core/controllers/expHTMLEditorController.php of Exponent CMS 2.4.0, untrusted input is used to co…

  Nov 4, 2016
• Unscored —
  CVE-2016-9182

  Exponent CMS 2.4 uses PHP reflection to call a method of a controller class, and then uses the method name to check use…

  Nov 4, 2016
• Medium 5.5
  CVE-2016-9189

  Pillow Integer overflow in Map.c

  Pillow before 3.3.2 allows context-dependent attackers to obtain sensitive information by using the "crafted image file" approach, related to an "Integer Overflow" issue affecting the Image.core.map_buffer in map.c component.

  pillow pillow pillow Debian Ubuntu PyPI
  Nov 4, 2016
• High 7.5
  CVE-2016-9177 Public exploit

  Spark allows remote attackers to read arbitrary files via a .. (dot dot) in the URI

  Directory traversal vulnerability in Spark 2.5 allows remote attackers to read arbitrary files via a .. (dot dot) in the URI.

  com.sparkjava:spark-core Maven
  Nov 4, 2016
• Unscored —
  CVE-2016-9176

  Stack buffer overflow in the send.exe and receive.exe components of Micro Focus Rumba 9.4 and earlier could be used by …

  Micro Focus Micro Focus Rumba 9.4
  Nov 4, 2016