redhat virtualization 4.3 vulnerabilities and exploits

(subscribe to this query)

Sensitive passwords used in deployment and configuration of oVirt Metrics, all versions. were found to be insufficiently protected. Passwords could be disclosed in log files (if playbooks are run with -v) or in playbooks stored on Metrics or Bastion hosts.

Ovirt Ovirt Redhat Virtualization Manager 4.3

A cross-site scripting vulnerability was reported in the oVirt-engine's OAuth authorization endpoint before version 4.3.8. URL parameters were included in the HTML response without escaping. This flaw would allow an malicious user to craft malicious HTML pages that can run s...

Ovirt Ovirt-engine Redhat Virtualization 4.3

Qemu has a Buffer Overflow in rtl8139_do_receive in hw/net/rtl8139.c because an incorrect integer data type is used.

Qemu Qemu Canonical Ubuntu Linux 14.04 Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 18.04 Canonical Ubuntu Linux 18.10 Debian Debian Linux 8.0 Debian Debian Linux 9.0 Redhat Virtualization 4.0 Redhat Virtualization Manager 4.3

A denial of service vulnerability was found in rsyslog in the imptcp module. An attacker could send a specially crafted message to the imptcp socket, which would cause rsyslog to crash. Versions prior to 8.27.0 are vulnerable.

Rsyslog Rsyslog Redhat Virtualization Manager 4.3 Redhat Enterprise Linux Desktop 7.0 Redhat Enterprise Linux For Ibm Z Systems 7.0 Redhat Enterprise Linux For Power Big Endian 7.0 Redhat Enterprise Linux For Power Little Endian 7.0 Redhat Enterprise Linux For Scientific Computing 7.0 Redhat Enterprise Linux Server 7.0 Redhat Enterprise Linux Workstation 7.0 Redhat Virtualization 4.0 Redhat Virtualization Host 4.0 Debian Debian Linux 9.0

qemu_deliver_packet_iov in net/net.c in Qemu accepts packet sizes greater than INT_MAX, which allows malicious users to cause a denial of service or possibly have unspecified other impact.

Qemu Qemu Qemu Qemu 3.1.0 Debian Debian Linux 8.0 Debian Debian Linux 9.0 Canonical Ubuntu Linux 14.04 Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 18.04 Canonical Ubuntu Linux 18.10 Redhat Openstack 10 Redhat Openstack 13 Redhat Openstack 14 Redhat Virtualization 4.0

It exists that libvirtd, versions 4.x.x prior to 4.10.1 and 5.x.x prior to 5.4.1, would permit readonly clients to use the virDomainManagedSaveDefineXML() API, which would permit them to modify managed save state files. If a managed save had already been created by a privileged u...

Redhat Libvirt Redhat Enterprise Linux 7.0 Redhat Enterprise Linux 8.0 Redhat Enterprise Linux Desktop 6.0 Redhat Enterprise Linux Desktop 7.0 Redhat Enterprise Linux Server 6.0 Redhat Enterprise Linux Server 7.0 Redhat Enterprise Linux Server Aus 7.6 Redhat Enterprise Linux Server Eus 7.6 Redhat Enterprise Linux Server Tus 7.6 Redhat Enterprise Linux Workstation 6.0 Redhat Enterprise Linux Workstation 7.0

The virConnectGetDomainCapabilities() libvirt API, versions 4.x.x prior to 4.10.1 and 5.x.x prior to 5.4.1, accepts an "emulatorbin" argument to specify the program providing emulation for a domain. Since v1.2.19, libvirt will execute that program to probe the domain�...

Redhat Libvirt Redhat Enterprise Linux 7.0 Redhat Enterprise Linux 8.0 Redhat Enterprise Linux Desktop 6.0 Redhat Enterprise Linux Desktop 7.0 Redhat Enterprise Linux Server 6.0 Redhat Enterprise Linux Server 7.0 Redhat Enterprise Linux Server Aus 7.6 Redhat Enterprise Linux Server Eus 7.6 Redhat Enterprise Linux Server Tus 7.6 Redhat Enterprise Linux Workstation 6.0 Redhat Enterprise Linux Workstation 7.0

The virConnectBaselineHypervisorCPU() and virConnectCompareHypervisorCPU() libvirt APIs, 4.x.x prior to 4.10.1 and 5.x.x prior to 5.4.1, accept an "emulator" argument to specify the program providing emulation for a domain. Since v1.2.19, libvirt will execute that progr...

Redhat Libvirt Redhat Enterprise Linux 7.0 Redhat Enterprise Linux 8.0 Redhat Enterprise Linux Desktop 6.0 Redhat Enterprise Linux Desktop 7.0 Redhat Enterprise Linux Server 6.0 Redhat Enterprise Linux Server 7.0 Redhat Enterprise Linux Server Aus 7.6 Redhat Enterprise Linux Server Eus 7.6 Redhat Enterprise Linux Server Tus 7.6 Redhat Enterprise Linux Workstation 6.0 Redhat Enterprise Linux Workstation 7.0

In Bootstrap prior to 3.4.1 and 4.3.x prior to 4.3.1, XSS is possible in the tooltip or popover data-template attribute.

Getbootstrap Bootstrap F5 Big-ip Access Policy Manager F5 Big-ip Advanced Firewall Manager F5 Big-ip Analytics F5 Big-ip Application Acceleration Manager F5 Big-ip Application Security Manager F5 Big-ip Domain Name System F5 Big-ip Edge Gateway F5 Big-ip Fraud Protection Service F5 Big-ip Global Traffic Manager F5 Big-ip Link Controller F5 Big-ip Local Traffic Manager

7 Github repositories

Versions of lodash lower than 4.17.12 are vulnerable to Prototype Pollution. The function defaultsDeep could be tricked into adding or modifying properties of Object.prototype using a constructor payload.

Lodash Lodash Netapp Active Iq Unified Manager -Netapp Service Level Manager -Redhat Virtualization Manager 4.3 Oracle Banking Extensibility Workbench 14.3.0 Oracle Banking Extensibility Workbench 14.4.0 F5 Big-ip Access Policy Manager F5 Big-ip Advanced Firewall Manager F5 Big-ip Analytics F5 Big-ip Application Acceleration Manager F5 Big-ip Application Security Manager F5 Big-ip Application Visibility And Reporting

4 Github repositories

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook