9060 matches found
How to Configure Default Device Access Behavior of Workspace app for Windows
This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149for more information. Citrix Virtual Apps and Desktops, formerly XenDesktop, fits the enterprise need to bring both VDI and...
HackerOne: Ability to monitor reports' submission in real time
Hey , I would like to report an issue with the server responses that allow anyone users to monitor and track the reports' submission and the platform activity . Description : The issue occurs on the endpoint '/reports/reportid.json' due to the difference between server responses for submitted...
Debian DSA-3642-1 : lighttpd - security update
Dominic Scheirlinck and Scott Geary of Vend reported insecure behavior in the lighttpd web server. Lighttpd assigned Proxy header values from client requests to internal HTTPPROXY environment variables, allowing remote attackers to carry out Man in the Middle MITM attacks or initiate connections ...
Security update for java-1_8_0-openjdk (important)
This update for java-180-openjdk fixes the following issues: - Upgrade to version jdk8u101 icedtea 3.1.0 - New in release 3.1.0 2016-07-25: Security fixes - S8079718, CVE-2016-3458: IIOP Input Stream Hooking bsc989732 - S8145446, CVE-2016-3485: Perfect pipe placement Windows only bsc989734 -...
Receiver 4 Upgrade Causing UAC Prompt
This article is intended for Citrix administrators and technical teams only.Non-admin users must contact their company’s Help Desk/IT support team and can refer toCTX297149for more information We are offering Receiver from our SCCM 2012 Self-Service Application Catalog. We followed...
Arbitrary Command Execution Vulnerability in Internet Audit Device of Shenzhen Aolian Information Security Technology Co.
Shenzhen Aolian Information Security Technology Co., Ltd. Internet access auditing device is a network behavior management system. Shenzhen Aolian Information Security Technology Co., Ltd. Internet Audit Equipment has an arbitrary command execution vulnerability, which can be exploited by attacke...
Arbitrary Command Execution Vulnerability in Internet Behavior Management System of Shanghai Bingfeng Computer Network Technology Co.
Shanghai Bingfeng Computer Network Technology Co., Ltd Internet behavior management system is a network audit equipment. The Internet behavior management system of Shanghai Bingfeng Computer Network Technology Co., Ltd. has an arbitrary command execution vulnerability, which can be exploited by...
Arbitrary Command Execution Vulnerability in D-Link Internet Behavior Management System
Internet behavior management system, a network auditing device. The product suffers from an arbitrary command execution vulnerability that can be exploited by an attacker to gain server privileges...
Arbitrary Command Execution Vulnerability in Beijing Tianrongxin Internet Behavior Management Devices
Tianrongxin Internet Behavior Management System is a professional product for network behavior management and content auditing. Beijing Tianrongxin Internet Behavior Management device has an arbitrary command execution vulnerability, which can be exploited by attackers to gain server privileges...
CVE-2016-0635: Undefined Security Weakness
Unspecified vulnerability in the Enterprise Manager Ops Center component in Oracle Enterprise Manager Grid Control 12.1.4, 12.2.2, and 12.3.2; the Oracle Health Sciences Information Manager component in Oracle Health Sciences Applications 1.2.8.3, 2.0.2.3, and 3.0.1.0; the Oracle Healthcare Maste...
MS16-088: Description of the security update for Excel 2013: July 12, 2016
MS16-088: Description of the security update for Excel 2013: July 12, 2016 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft...
Netscaler Instances on SDX show less memory than allocated from within the SVM Console
Question: When I allocate RAM to a Netscaler instance on SDX, the Netscaler reports considerably less memory than is allocated. For instance, if I allocate 16gb, the Netscaler instance shows only 12gb allocated. Answer: This is an expected behavior. When NetScaler is started and is initializing t...
CVE-2015-8931
Undefined behavior signed integer overflow was discovered in libarchive, in the MTREE parser's calculation of maximum and minimum dates. A crafted mtree file could potentially cause denial of service...
CVE-2015-8932
Undefined behavior invalid left shift was discovered in libarchive, in how Compress streams are identified. This could cause certain files to be mistakenly identified as Compress archives and fail to read...
OracleVM 3.2 : sudo (OVMSA-2016-0079)
The remote OracleVM system is missing necessary patches to address critical security updates : - added patch for CVE-2014-0106: certain environment variables not sanitized when envreset is disabled Resolves: rhbz1072210 - backported fixes for CVE-2013-1775 CVE-2013-1776 CVE-2013-2776 CVE-2013-277...
CVE-2016-2177
OpenSSL through 1.0.2h incorrectly uses pointer arithmetic for heap-buffer boundary checks, which might allow remote attackers to cause a denial of service integer overflow and application crash or possibly have unspecified other impact by leveraging unexpected malloc behavior, related to s3srvr....
CVE-2016-2177
OpenSSL through 1.0.2h incorrectly uses pointer arithmetic for heap-buffer boundary checks, which might allow remote attackers to cause a denial of service integer overflow and application crash or possibly have unspecified other impact by leveraging unexpected malloc behavior, related to s3srvr....
CVE-2016-2177
OpenSSL through 1.0.2h incorrectly uses pointer arithmetic for heap-buffer boundary checks, which might allow remote attackers to cause a denial of service integer overflow and application crash or possibly have unspecified other impact by leveraging unexpected malloc behavior, related to s3srvr....
Windows Diagnostics Hub Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when the Windows Diagnostics Hub Standard Collector Service fails to properly sanitize input, leading to an unsecure library-loading behavior. An attacker who successfully exploited this vulnerability could run arbitrary code with elevated system...