CVE-2017-5683
Privilege escalation in IntelHAXM.sys driver in the Intel Hardware Accelerated Execution Manager before version 6.0.6 allows a local user to gain system level access.
Read MoreAuthor: Cyberthreat Blog
CVE-2017-7228
An issue (known as XSA-212) was discovered in Xen, with fixes available for 4.8.x, 4.7.x, 4.6.x, 4.5.x, and 4.4.x. The earlier XSA-29 fix introduced an insufficient check on XENMEM_exchange input, allowing the caller to drive...
Read MoreCVE-2017-3204
The Go SSH library (x/crypto/ssh) by default does not verify host keys, facilitating man-in-the-middle attacks. Default behavior changed in commit e4e2799 to require explicitly registering a hostkey verification mechanism.
Read MoreCVE-2017-7414
In Horde_Crypt before 2.7.6, as used in Horde Groupware Webmail Edition 5.x through 5.2.17, OS Command Injection can occur if the user has PGP features enabled in the user’s preferences, and has enabled the “Should...
Read MoreVU#307983: Action Message Format (AMF3) Java implementations are vulnerable to insecure deserialization and XML external entities references
Vulnerability Note VU#307983 <h2>Action Message Format (AMF3) Java implementations are vulnerable to insecure deserialization and XML external entities references</h2> <p class=”meta-text”>Original...
Read More