CVE-2014-2314

CVE-2014-2314 affects Atlassian Jira’s Issue Collector in versions prior to 6.0.4. The vulnerability is a directory traversal flaw in the Issue Collector component, driven by insufficient validation of the filename parameter, allowing a remote attacker to create arbitrary files. Several connected...

CVE-2014-2314: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the Issue Collector plugin in Atlassian JIRA before 6.0.4 allows remote attackers to create arbitrary files via unspecified vectors...

gc: malloc() and calloc() overflows

Multiple integer overflows in the 1 GCgenericmalloc and 2 calloc functions in malloc.c, and the 3 GCgenericmallocignoreoffpage function in mallocx.c in Boehm-Demers-Weiser GC libgc before 7.2 make it easier for context-dependent attackers to perform memory-related attacks such as buffer overflows...

gc: malloc() and calloc() overflows

Multiple integer overflows in the 1 GCgenericmalloc and 2 calloc functions in malloc.c, and the 3 GCgenericmallocignoreoffpage function in mallocx.c in Boehm-Demers-Weiser GC libgc before 7.2 make it easier for context-dependent attackers to perform memory-related attacks such as buffer overflows...

Mozilla Firefox New Function Garbage Collection Code Execution - Ver2 (CVE-2006-3803)

A code execution vulnerability has been reported in Mozilla Firefox. A remote attacker could trigger this vulnerability by causing the garbage collector to delete a temporary variable while it is still being used during the creation of a new Function object. Successful exploitation of this...

Incorrect values in the properties of objects in SCOM console

Challenge The collection of performance and events works fine, but during investigation of CPU/RAM properties of Hosts, Virtual Machines etc. unexpected values are revealed. For example ESXi host has 345.9 GB of RAM, but the SCOM property field contains 3459 GB. Cause SCOM processes these values...

A Problem of CPU Consumption in Host Data Collector bundled with Hitachi Device Manager Software

Overview Host Data Collector bundled with Hitachi Device Manager Software contains a problem of CPU consumption. Impact When Host Data Collector receives a malicious unexpected request, a process of Host Data Collector might consume CPU resources. Solution Please refer to the 'Vendor Information'...

Missing Data in SCOM Top Dashboards

Challenge While Veeam Collector works fine, and performance data are showing up in SCOM performance views, the Top dashboards are empty. Top Clusters Top Datastores Top Hosts Top Virtual Machines Cause The Top dashboards are populated with data from the Data Warehouse database, unlike the...

gc security update

CentOS Errata and Security Advisory CESA-2013:1500 Updated gc packages that fix one security issue are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score,...

gc: malloc() and calloc() overflows

Multiple integer overflows in the 1 GCgenericmalloc and 2 calloc functions in malloc.c, and the 3 GCgenericmallocignoreoffpage function in mallocx.c in Boehm-Demers-Weiser GC libgc before 7.2 make it easier for context-dependent attackers to perform memory-related attacks such as buffer overflows...

CVE-2013-5701

Multiple untrusted search path vulnerabilities in 1 Watchguard Log Collector wlcollector.exe and 2 Watchguard WebBlocker Server wbserver.exe in WatchGuard Server Center 11.7.4, 11.7.3, and possibly earlier allow local users to gain privileges via a Trojan horse wgpr.dll file in the application's...

Design/Logic Flaw

Multiple untrusted search path vulnerabilities in 1 Watchguard Log Collector wlcollector.exe and 2 Watchguard WebBlocker Server wbserver.exe in WatchGuard Server Center 11.7.4, 11.7.3, and possibly earlier allow local users to gain privileges via a Trojan horse wgpr.dll file in the application's...

CVE-2013-5701

Watchguard Server Center 11.7.4/11.7.3 are affected by CVE-2013-5701 due to insecure library loading via wgpr.dll, enabling local privilege escalation when a Trojan horse wgpr.dll is loaded from the application bin directory. This involves the Watchguard Server Center components wlcollector.exe a...

PT-2013-5736

Name of the Vulnerable Software and Affected Versions WatchGuard Server Center versions 11.7.3 through 11.7.4 Description The issue allows local users to gain privileges via a Trojan horse wgpr.dll file in the application's bin directory. This is due to multiple untrusted search path...

php53 security, bug fix and enhancement update

5.3.3-21 - add security fix for CVE-2013-4248 5.3.3-20 - add security fix for CVE-2013-4113 5.3.3-19 - add upstream reproducer for errorhandler 951075 5.3.3-18 - add security fixes for CVE-2006-7243 5.3.3-17 - reorder security patches - add security fixes for CVE-2012-2688, CVE-2012-0831,...

Mozilla Thunderbird < 24.0

Binary data 8011.prm...

Moderate: Red Hat Security Advisory: rhev 3.2.2 - vdsm security and bug fix update

Updated vdsm packages that fix one security issue and various bugs are now available. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available from the C...

Health Service (Monitoring Host) Handle Count has exceeded the threshold

Challenge The following alerts about handle counts on the collector server are raised: Health Service Monitoring Host Handle Count has exceeded the threshold Health Service Handle Count has exceeded the threshold Cause The monitors raising the mentioned alerts ensure that the "Process\Handle Coun...

Health Service dropped data

Challenge The following alerts can be seen in SCOM: Veeam Collector: Health Service dropped data Veeam Collector: Health Service workflows failed The settings of SCOM agent are correct please see KB1026, and clearing OpsMgr cache may help for a short amount of time. The OperationsManager log on...

Veeam Management Pack v6 Required Ports and Permissions

Solution Required Permissions Connection to Virtual Servers VI Object | Required Permissions ---|--- vCenter, ESXi Host | Read-Only1 Host.CIM.CIM Interaction2 Datastore.Browse Datastore3 Datastore.Configure Datastore3 Datastore Cluster.Browse Datastore Cluster3 1 Minimum required permission over...