CVE-2017-10424

CVE-2017-10424 affects Oracle MySQL MySQL Enterprise Monitor (subcomponent: Monitoring: Web). Affected versions are 3.2.8.2223 and earlier, 3.3.4.3247 and earlier, and 3.4.2.4181 and earlier. An unauthenticated attacker with network access via multiple protocols can compromise the monitor, with h...

CVE-2017-10366

Vulnerability in the PeopleSoft Enterprise PT PeopleTools component of Oracle PeopleSoft Products subcomponent: Performance Monitor. Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2017-10366

Vulnerability in the PeopleSoft Enterprise PT PeopleTools component of Oracle PeopleSoft Products subcomponent: Performance Monitor. Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2017-10424

Vulnerability in the MySQL Enterprise Monitor component of Oracle MySQL subcomponent: Monitoring: Web. Supported versions that are affected are 3.2.8.2223 and earlier, 3.3.4.3247 and earlier and 3.4.2.4181 and earlier. Easily exploitable vulnerability allows unauthenticated attacker with network...

CVE-2017-10366

Summary (mode C): The CVE-2017-10366 vulnerability affects Oracle PeopleSoft 8.54, 8.55, and 8.56 in the monitor service of PeopleSoft PT PeopleTools. It enables unauthenticated remote code execution and denial of service via Java object deserialization in the monitor path, with PoCs showing DNS ...

How to Create Veeam ONE Service Dump for Analysis

Purpose This article documents how to create Veeam ONE service memory dump. Solution In order to create Veeam ONE Monitor server service full memory dump, perform the following steps: 1. Download the ProcDump tool from the Windows Sysinternals page:...

PT-2017-11393

Name of the Vulnerable Software and Affected Versions MySQL Enterprise Monitor versions 3.2.8.2223 and earlier MySQL Enterprise Monitor versions 3.3.4.3247 and earlier MySQL Enterprise Monitor versions 3.4.2.4181 and earlier Description The issue allows an unauthenticated attacker with network...

CVE-2017-10366: Undefined Security Weakness

Vulnerability in the PeopleSoft Enterprise PT PeopleTools component of Oracle PeopleSoft Products subcomponent: Performance Monitor. Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2017-10424: Undefined Security Weakness

Vulnerability in the MySQL Enterprise Monitor component of Oracle MySQL subcomponent: Monitoring: Web. Supported versions that are affected are 3.2.8.2223 and earlier, 3.3.4.3247 and earlier and 3.4.2.4181 and earlier. Easily exploitable vulnerability allows unauthenticated attacker with network...

Unspecified Vulnerability in Oracle MySQL Enterprise Monitor Component (CNVD-2017-31053)

Oracle MySQL is a small relational database management system. An unspecified vulnerability exists in the Monitoring: Web component of Oracle MySQL's MySQL Enterprise Monitor, which can be exploited by an attacker to compromise the confidentiality, integrity, and availability of the system...

Paessler PRTG Network Monitor Cross-Site Scripting Vulnerability (CNVD-2017-32222)

Paessler PRTG Network Monitor is a suite of network monitoring software from the German company Paessler. The software provides usage monitoring, packet sniffing, in-depth analysis and concise reports. A cross-site scripting vulnerability exists in the group names created in Paessler PRTG Network...

CVE-2017-15360

PRTG Network Monitor version 17.3.33.2830 is vulnerable to stored Cross-Site Scripting on all group names created, related to incorrect error handling for an HTML encoded script...

Cross site scripting

PRTG Network Monitor version 17.3.33.2830 is vulnerable to stored Cross-Site Scripting on all group names created, related to incorrect error handling for an HTML encoded script...

CVE-2017-15360

PRTG Network Monitor version 17.3.33.2830 is vulnerable to stored Cross-Site Scripting on all group names created, related to incorrect error handling for an HTML encoded script...

CVE-2017-15360

PRTG Network Monitor version 17.3.33.2830 is vulnerable to stored Cross-Site Scripting on all group names created, related to incorrect error handling for an HTML encoded script...

CVE-2017-15360

CVE-2017-15360 affects PRTG Network Monitor version 17.3.33.2830, where stored Cross-Site Scripting is possible in all created group names due to incorrect HTML-encoded script error handling. The connected documents confirm the vulnerability description but do not provide concrete remediation det...

PT-2017-14021

Name of the Vulnerable Software and Affected Versions PRTG Network Monitor version 17.3.33.2830 Description The issue is related to stored Cross-Site Scripting, specifically concerning incorrect error handling for an HTML encoded script in all group names created. Recommendations For PRTG Network...

CVE-2017-15360: Improper Neutralization of Input During Web Page Generation

PRTG Network Monitor version 17.3.33.2830 is vulnerable to stored Cross-Site Scripting on all group names created, related to incorrect error handling for an HTML encoded script...

x86: Incorrect handling of self-linear shadow mappings with translated guests

ISSUE DESCRIPTION The shadow pagetable code uses linear mappings to inspect and modify the shadow pagetables. A linear mapping which points back to itself is known as self-linear. For translated guests, the shadow linear mappings being in a separate address space are not intended to be self-linea...

Long Infrastructure Object Removal

Challenge Sometimes when you remove an infrastructure object vCenter or Hyper-V server from the Veeam ONE Monitor client, the removal process may take longer than expected. Cause Once you click the Remove server button from the infrastructure tree view, it could take some time to remove the data...