PT-2020-19562 · Mcafee · Mcafee Endpoint Security

Name of the Vulnerable Software and Affected Versions: McAfee Endpoint Security ENS versions prior to 10.7.0 November 2020 Update Description: The issue allows administrators to inject arbitrary web script or HTML via the configuration wizard, which is a result of a cross-site scripting...

CVE-2020-6287

SAP NetWeaver AS JAVA LM Configuration Wizard, versions - 7.30, 7.31, 7.40, 7.50, does not perform an authentication check which allows an attacker without prior authentication to execute configuration tasks to perform critical actions against the SAP Java system, including the ability to create ...

CVE-2020-6286

The insufficient input path validation of certain parameter in the web service of SAP NetWeaver AS JAVA LM Configuration Wizard, versions - 7.30, 7.31, 7.40, 7.50, allows an unauthenticated attacker to exploit a method to download zip files to a specific directory, leading to Path Traversal...

Path traversal

The insufficient input path validation of certain parameter in the web service of SAP NetWeaver AS JAVA LM Configuration Wizard, versions - 7.30, 7.31, 7.40, 7.50, allows an unauthenticated attacker to exploit a method to download zip files to a specific directory, leading to Path Traversal...

CVE-2020-6287: Critical Vulnerability in SAP NetWeaver Application Server (AS) Java

SAP NetWeaver AS JAVA LM Configuration Wizard, versions – 7.30, 7.31, 7.40, 7.50, does not perform an authentication check which allows an attacker without prior authentication to execute configuration tasks to perform critical actions against the SAP Java system, including the ability to create ...

Serious vulnerabilities fixed in SAP Netweaver

SAP has fixed several vulnerabilities in SAP Netweaver products. The vulnerabilities allow malicious parties to gain access to sensitive data, or possibly even the execute arbitrary commands that could take over the entire underlying system can be taken over. The vulnerability with reference...

SysAnalyzer - Automated Malcode Analysis System

SysAnalyzer is an open-source application that was designed to give malcode analysts an automated tool to quickly collect, compare, and report on the actions a binary took while running on the system. A full installer for the application is available and can be downloaded here. The application...

[SECURITY] Fedora 28 Update: filezilla-3.41.2-1.fc28

FileZilla is a FTP, FTPS and SFTP client for Linux with a lot of features. - Supports FTP, FTP over SSL/TLS FTPS and SSH File Transfer Protocol SFT P - Cross-platform - Available in many languages - Supports resume and transfer of large files 4GB - Easy to use Site Manager and transfer queue - Dr...

PVS config wizard failed with error " Service Start for Citrix PVS Soap Service failed. The service did not respond to start or control request in a timely fashion. (0x41d)"

While running the Configuration wizard it fails to start the network service. Event viewer shows that the soap service has terminated. Soap service is in stopped state and is not able to start the service. PVS config wizard failed with error " Service Start for Citrix PVS Soap Service failed. The...

Security Bulletin: TSM Client GUI local hang (CVE-2014-0876)

Summary An IBM Tivoli Storage Manager TSM client local vulnerability can cause the crash or hang of certain Java GUI functions. Vulnerability Details CVE ID: CVE-2014-0876 Description: A local buffer overrun in the IBM Tivoli Storage Manager TSM Windows and Macintosh backup-archive client Java GU...

Configuration Wizard fails to complete properly

When running the configuration wizard, after finishing the process, the error shown below might be seen and the PVS server will not be joined correctly to the farm...

PVS7.15 - PVS configuration wizard "hangs" when configuring new farm

The PVS configuration wizard "hangs" when configuring new farm. This happens in case you have multiple domains...

Error while running Configuration wizard : "There are no existing farms that you have access rights to"

We see the following error on running through Configuration Wizard : "There are no existing farms that you have access rights to"...

SAP NetWeaver Java AS Cross-Site Scripting Vulnerability

SAP NetWeaver is SAP's integrated technology platform and the technology foundation for all SAP applications since SAP Business Suite. A cross-site scripting vulnerability exists in the SAP NetWeaver Java AS version 7.4 Configuration Wizard, which can be exploited by remote attackers to inject...

SAP NetWeaver Java AS XXE Vulnerability

SAP NetWeaver is SAP's integrated technology platform and the technology foundation for all SAP applications since SAP Business Suite. A xxe security vulnerability exists in the SAP NetWeaver Java AS version 7.4 Configuration Wizard, which can be exploited by remote attackers to cause a denial of...

CVE-2016-3974

XML external entity XXE vulnerability in the Configuration Wizard in SAP NetWeaver Java AS 7.1 through 7.5 allows remote attackers to cause a denial of service, conduct SMB Relay attacks, or access arbitrary files via a crafted XML request to tcmonitoringwebserviceweb/ServerNodesWSService, aka SA...

Configuration Wizard Crashes after PVS Upgrade from Version 6.1 to 7.6

Configuration Wizard crashes after PVS upgrade from version 6.1 to 7.6...

Buffer overflow

Buffer overflow in the Java GUI Configuration Wizard and Preferences Editor in the backup-archive client in IBM Tivoli Storage Manager TSM 5.x and 6.x before 6.2.5.2, 6.3.x before 6.3.2, and 6.4.x before 6.4.2 on Windows and OS X allows local users to cause a denial of service application crash o...

CVE-2014-0876

CVE-2014-0876 affects IBM Tivoli Storage Manager (TSM) Backup-Archive client on Windows and macOS. The issue is a local buffer overrun in the Java GUI Configuration Wizard and Preferences Editor, leading to denial of service (crash or hang). Affected releases include TSM client 5.x and 6.x, with ...

[EMET v4.0] Enhanced Mitigation Experience Toolkit

The Enhanced Mitigation Experience Toolkit EMET is designed to help prevent hackers from gaining access to your system. Software vulnerabilities and exploits have become an everyday part of life. Virtually every product has to deal with them and consequently, users are faced with a stream of...