CVE-2023-52290 Apache StreamPark (incubating): Unchecked SQL query fields trigger SQL injection vulnerability

In streampark-console the list pagese.g: application pages, users can sort page by field. This sort field is sent from the front-end to the back-end, and the SQL query is generated using this field. However, because this sort field isn't validated, there is a risk of SQL injection...

CVE-2023-52290: Improper Neutralization of Special Elements used in an SQL Command

In streampark-console the list pagese.g: application pages, users can sort page by field. This sort field is sent from the front-end to the back-end, and the SQL query is generated using this field. However, because this sort field isn't validated, there is a risk of SQL injection...

PT-2024-14507 · Unknown · Streampark-Console

Name of the Vulnerable Software and Affected Versions: streampark-console versions prior to 2.1.4 Description: The issue arises from the lack of validation of the sort field sent from the front-end to the back-end, which is used to generate SQL queries. This poses a risk of SQL injection,...

HPESBGN04665 rev.1 - HPE Unified OSS Console Assurance Monitoring (UOCAM), Multiple Vulnerabilities

Potential Security Impact: Local: Elevated Privileges, memory corruption, Buffer Overflow, Input Validation; Remote: Arbitrary Code Execution, Arbitrary Command Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Unified OSS Console UOC - Prior to v3.1.6 CVSS Scores: | C...

CVE-2024-38360 Denial of service via Watched Words in Discourse

Discourse is an open source platform for community discussion. In affected versions by creating replacement words with an almost unlimited number of characters, a moderator can reduce the availability of a Discourse instance. This issue has been addressed in stable version 3.2.3 and in current...

CVE-2024-38360

Discourse (3.2.x) is affected by a Denial of Service via the Watched Words feature. The issue arises when a moderator creates replacement words with an almost unlimited length, which can exhaust resources and reduce availability. Remediation is to upgrade to Discourse 3.2.3 or newer betas; for th...

ajaxterm module Webmin XSS

The vulnerability of the ajaxterm module in the Webmin hosting control panel is related to incorrect handling of permissions or privileges. Exploiting this vulnerability could allow a malicious actor, operating remotely, to intercept the console session...

Citrix Endpoint Management: Certificates Guide

Introduction Managing SSL certificates effectively is crucial for maintaining the security and functionality of Citrix XenMobile environments. Issues with certificate installation and troubleshooting can lead to significant system vulnerabilities and access problems. This collection of articles...

Netscaler ADM Issues

Introduction This article provides a list of Knowledge Base resources on how to investigate, troubleshoot, and prevent the most common issues with connectivity of NetScaler Console Agent to NetScaler Console Service. Overview of the Issue NetScaler Agent helps the on-prem NetScalers to connect to...

SUSE CVE-2024-6612

CSP violations generated links in the console tab of the developer tools, pointing to the violating resource. This caused a DNS prefetch which leaked that a CSP violation happened. This vulnerability affects Firefox 128 and Thunderbird 128...

How to Reset the XenServer Host Password on a CloudBridge 2000/3000/4000/5000

This article describes how to reset the XenServer Host password on a CloudBridge 2000/3000/4000/5000. The procedure can be completed when credentials are not working to access the SVM, XS, and Serial Console...

IPC Error when Exporting the vDisk on Provisioning Services

IPC Error when exporting vDisk on Provisioning Services PVS. PVS Console log includes thefollowing errors: ERROR EnterpriseAccess.HandlerBase - PvsStatusExceptionHandlerERROR EnterpriseAccess.HandlerBase - return code: 184ERROR EnterpriseAccess.HandlerBase - exception type: PvsStatusExceptionERRO...

Troubleshooting Linux Virtual Machines in XenServer

This article describes about troubleshooting Linux virtual machines in XenServer. Serial console was used to access UNIX server consoles and most of the network devices switches, routes. The simplicity of serial port hardware and its universality make them popular. Serial console apart from...

How to Modify Network Speed and Duplexing

This article describes how to change speed, duplex, and auto-negotiation on a network interface in XenServer. Requirements Console access required, if reconfiguring the management interface...

Timeout Error 4002 in Provisioning Server Console after Clicking "Show Connected Devices"

The following symptoms occur on Provisioning Services PVS Servers when there are multiple streaming NICs assigned to the PVS Server. Example An environment having five streaming NICs had the following symptoms: When Show Connected Devices was clicked in the PVS console, the following symptoms mig...

PVS Console Crashes while using XenDesktop Setup Wizard

After entering the Credentials to get the list of templates from the Hypervisor, the following error appears: "Microsoft Management Console has stopped working" Note : The issue does not occur with XenServer as Host Connections to XenServer do not allow the port number in the address...

Vulnerability in License Server and Snap-in for Desktop Studio, aka Heartbleed

Secure Configuration of Licensing Heartbleed Update In response to the recent Heartbleed vulnerability in OpenSSL CVE-2014-0160 Citrix released a security advisory, CTX140605, advising customers of its potential effects on some Citrix Licensing components. As part of the Citrix response to this...

Error: 'An error occurred during upload.' While Attempting to Add Licenses through the License Management Console

Certain license files cannot be imported using the Citrix Licensing Management Console. When trying to import these files, the console reports an error message: "An error occurred during upload." Thisissue only occurs whenthe Citrix Licensing Management console is run on Windows Server 2008...

Error: "An error occurred during synchronization" in StoreFront

When trying to synchronize changes on a StoreFront multi-server environment, the following errors are displayed: Error: “An error occurred during synchronization” You might also view errors in the StoreFront Server Console Server Group. Error: “Cannot get valid synchronization state information...

Error: XDDS:F26A2921 Studio Cannot Contact DDC

After a failed upgrade for StoreFront 2.5 and while repairing StoreFront, Studio lost communication to the DDC. Details Error Id: XDDS:F26A2921 Exception: Citrix.Console.Common.CitrixAggregateException One or more parallel operations failed at Citrix.Console.Common.CitrixParallel.InternalForEachT...