Archive
5 July 2017
Vulnerabilities first published on this day (UTC), newest first.
180 results · Feed
-
Unscored —
IBM Security Guardium 9.0, 9.1, 9.5, 10.0, and 10.1 transmits sensitive data in cleartext in the query of the request. …
-
Unscored —
IBM Security Guardium 10.0, 10.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitr…
-
Unscored —
IBM WebSphere Portal 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitr…
-
Unscored —
IBM Security Guardium 10.0 and 10.1 does not perform an authentication check for a critical resource or functionality a…
-
Unscored —
IBM Security Guardium 10.0 and 10.1 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL …
-
Unscored —
The grub_memmove function in shlr/grub/kern/misc.c in radare2 1.5.0 allows remote attackers to cause a denial of servic…
-
Unscored —
In ImageMagick 7.0.6-0, a heap-based buffer over-read in the GetNextToken function in token.c allows remote attackers t…
-
Unscored —
Xen through 4.8.x does not validate the port numbers of polled event channel ports, which allows guest OS users to caus…
-
Unscored —
The shadow-paging feature in Xen through 4.8.x mismanages page references and consequently introduces a race condition,…
-
Unscored —
The make_response function in drivers/block/xen-blkback/blkback.c in the Linux kernel before 4.11.8 allows guest OS use…
-
Unscored —
The vCPU context-switch implementation in Xen through 4.8.x improperly interacts with the Memory Protection Extensions …
-
Unscored —
The grant-table feature in Xen through 4.8.x has a race condition leading to a double free, which allows guest OS users…
-
Unscored —
The grant-table feature in Xen through 4.8.x provides false mapping information in certain cases of concurrent unmap ca…
-
Unscored —
Xen through 4.8.x mishandles page transfer, which allows guest OS users to obtain privileged host OS access, aka XSA-21…
-
Unscored —
The grant-table feature in Xen through 4.8.x mishandles a GNTMAP_device_map and GNTMAP_host_map mapping, when followed …
-
Unscored —
Xen through 4.8.x mishandles virtual interrupt injection, which allows guest OS users to cause a denial of service (hyp…
-
Unscored —
Xen through 4.8.x does not validate memory allocations during certain P2M operations, which allows guest OS users to ob…
-
Unscored —
The grant-table feature in Xen through 4.8.x does not ensure sufficient type counts for a GNTMAP_device_map and GNTMAP_…
-
Unscored —
The grant-table feature in Xen through 4.8.x mishandles MMIO region grant references, which allows guest OS users to ca…
-
Unscored —
Xen through 4.8.x does not validate a vCPU array index upon the sending of an SGI, which allows guest OS users to cause…