VulnCheck KEV: CVE-2018-11511

The tree list functionality in the photo gallery application in ASUSTOR ADM 3.1.0.RFQ3 has a SQL injection vulnerability that affects the 'albumid' or 'scope' parameter via a photo-gallery/api/album/treelists/ URI...

ADM - Failed to allocate requested capacity for MPX/SDX or VPX to create in SDX

When multiple pool of licenses Bandwidth/instance are purchased at different points in time, the Service agreement SA date and expiration date are different, causing each pool of licenses to be recognized as separate on Citrix ADM, instead of one combined pool of licenses. This sometimes may caus...

CVE-2020-11901: Impact of Ripple20 vulnerabilities on Citrix ADC/ADM/SVM

Citrix ADC/ADM/SVM will be detected with TCP ripple 20 vulnerability while performing security scans...

UBUNTU-CVE-2020-8903

A vulnerability in Google Cloud Platform's guest-oslogin versions between 20190304 and 20200507 allows a user that is only granted the role "roles/compute.osLogin" to escalate privileges to root. Using their membership to the "adm" group, users with this role are able to read the DHCP XID from th...

Security Bulletin: Bypass security restrictions in WAS Liberty

Summary There are multiple vulnerabilities in IBM® WebSphere Liberty ,Version 8.5.5.8 used by IBM Tivoli Application Dependency Discovery Manager TADDM Vulnerability Details CVEID: CVE-2019-4304 DESCRIPTION: IBM WebSphere Application Server - Liberty could allow a remote attacker to bypass securi...

How to Add WEM Group Policy Files to Use in a Local or Domain-based GPO

This article explains how to add the required ADM or ADMX/ADML files to have them appear in the local GPEDIT policy editor...

ZSQL: Number of Failed Login Attempts

The FAILEDLOGINATTEMPTS parameter specifies the maximum number of login attempts allowed before an account is locked. If the number of an account SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...

ZSQL: Password Grace Period

The password grace period is the days between password expiration warning and password expiration. In this grace period, users can change their passwords before password expiration, ensuring service continuity. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted fr...

Citrix ADM Ports and URL's That Need To Be Opened for Communication

Additional notes: If using ULFD LogStream: The -logstreamOverNSIP option is available from Citrix ADC 13.0 41.x and 12.1 55.x onwards to alter the SRC IP. Default is SNIP. This is a global setting. set appflow param -logstreamOverNSIP If using IPFix AppFlow: The -IPAddress parameter can be used t...

PT-2019-9620 · Gnuboard · Gnuboard5

Name of the Vulnerable Software and Affected Versions: GNUBOARD5 version 5.3.1.9 Description: The issue allows remote attackers to inject arbitrary web script or HTML via the bo content tail parameter, also referred to as the "board tail contents" parameter, in the "adm/board form update.php" API...

CVE-2018-18678

GNUBOARD5 before 5.3.2.0 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "board group extra contents" parameter, aka the adm/boardgroupformupdate.php gr110 parameter...

CVE-2018-18678

GNUBOARD5 before 5.3.2.0 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "board group extra contents" parameter, aka the adm/boardgroupformupdate.php gr110 parameter...

CVE-2019-17366

Citrix Application Delivery Management ADM 12.1 before build 54.13 has Incorrect Access Control...

Improper access control

Citrix Application Delivery Management ADM 12.1 before build 54.13 has Incorrect Access Control...

CVE-2019-17366

Citrix ADM vulnerability CVE-2019-17366 is an Improper Access Control/ authentication bypass affecting Citrix Application Delivery Management Server. Affected versions include Citrix ADM 12.0 and 12.1 prior to build 54.13, and Citrix ADM Cloud version 13.0 prior to build 41.20. The issue allows a...

Processes, Logs And Configuration Files Participating in Citrix ADM High Availability

The following processes participate in Citrix ADM HA operations: /usr/local/bin/python /mps/mashbmonit.py This process is run by both nodes. It is responsible for sending and receiving heartbeats and healthchecks. By default, it uses UDP port 5005. The configuration file for this process...

CVE-2018-18668

GNUBOARD5 before 5.3.2.0 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "homepage title" parameter, aka the adm/configformupdate.php cftitle parameter...

CVE-2018-18668

GNUBOARD5 before 5.3.2.0 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "homepage title" parameter, aka the adm/configformupdate.php cftitle parameter...

CVE-2018-18668

GNUBOARD5 before 5.3.2.0 is affected by a cross-site scripting (XSS) vulnerability in the homepage title parameter (adm/config_form_update.php cf_title). Exploitation allows remote attackers to inject arbitrary web script/HTML, potentially compromising user sessions and browser execution context....

PT-2019-9614 · Gnuboard · Gnuboard5

Name of the Vulnerable Software and Affected Versions: GNUBOARD5 versions prior to 5.3.2.0 Description: The issue allows remote attackers to inject arbitrary web script or HTML via the cf title parameter, also known as the "homepage title" parameter, in the adm/config form update.php file. This...