Citrix Application Delivery Controller, Citrix Gateway, and Citrix SD-WAN WANOP Edition appliance Security Update

Vulnerabilities have been discovered in Citrix ADCformerlyknown asNetScaler ADC,Citrix Gateway formerlyknown asNetScaler Gateway,and Citrix SD-WAN WANOP Edition models 4000-WO, 4100-WO, 5000-WO, and 5100-WO.These vulnerabilities,if exploited,could result in the following security issues: CVE-ID|...

CVE-2021-24752

Multiple Plugins from the CatchThemes vendor do not perform capability and CSRF checks in the ctpswitch AJAX action, which could allow any authenticated users, such as Subscriber to change the Essential Widgets WordPress plugin before 1.9, To Top WordPress plugin before 2.3, Header Enhancement...

OPENSUSE-SU-2021:3325-1 Security update for rabbitmq-server

This update for rabbitmq-server fixes the following issues: - CVE-2021-32718: Fixed improper neutralization of script-related HTML tags in a web page basic XSS in management UI bsc1187818. - CVE-2021-32719: Fixed improper neutralization of script-related HTML tags in a web page basic XSS in...

CVE-2021-1419

A vulnerability in the SSH management feature of multiple Cisco Access Points APs platforms could allow a local, authenticated user to modify files on the affected device and possibly gain escalated privileges. The vulnerability is due to improper checking on file operations within the SSH...

Input validation

A vulnerability in the SSH management feature of multiple Cisco Access Points APs platforms could allow a local, authenticated user to modify files on the affected device and possibly gain escalated privileges. The vulnerability is due to improper checking on file operations within the SSH...

CVE-2021-1419 Cisco Access Points SSH Management Privilege Escalation Vulnerability

A vulnerability in the SSH management feature of multiple Cisco Access Points APs platforms could allow a local, authenticated user to modify files on the affected device and possibly gain escalated privileges. The vulnerability is due to improper checking on file operations within the SSH...

CVE-2021-1419 Cisco Access Points SSH Management Privilege Escalation Vulnerability

A vulnerability in the SSH management feature of multiple Cisco Access Points APs platforms could allow a local, authenticated user to modify files on the affected device and possibly gain escalated privileges. The vulnerability is due to improper checking on file operations within the SSH...

Cisco Access Points SSH Management Privilege Escalation Vulnerability

A vulnerability in the SSH management feature of multiple Cisco Access Points APs platforms could allow a local, authenticated user to modify files on the affected device and possibly gain escalated privileges. The vulnerability is due to improper checking on file operations within the SSH...

Security Bulletin: IBM i2 Analyze is affected by multiple vulnerabilities in IBM DB2

Summary Deployments of i2 Analyze using DB2 will need to refer to the DB2 Security Bulletins linked below to determine if they are vulnerable and apply fixes as detailed. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected Products and Versions...

Cisco Business Process Automation Elevation of Privilege Vulnerability (CNVD-2021-49034)

Cisco Business Process Automation BPA solves customers' configuration change management challenges with an innovative, scalable, microservices-based platform with an embedded workflow engine. An elevation of privilege vulnerability exists in the Web management interface of Cisco Business Process...

Authentication flaw

The affected product’s configuration is vulnerable due to missing authentication, which may allow an attacker to change configurations and execute arbitrary code on the iView versions prior to v5.7.03.6182...

PT-2021-15203

Name of the Vulnerable Software and Affected Versions PowerLogic EGX100 versions 3.0.0 and newer PowerLogic EGX300 all versions Description A CWE-20: Improper Input Validation issue exists that could cause denial of service or remote code execution via a specially crafted HTTP packet...

Tp-link TP-Link TL-SG2005和TP-Link TL-SG2008 跨站请求伪造漏洞

Tp-link TP-Link TL-SG2005 and TP-Link TL-SG2008 are both switches from China's Tp-link. A cross-site request forgery vulnerability exists in multiple Tp-Link models. The vulnerability stems from the lack of authentication of sensitive URLs within the switch, which allows an attacker to modify...

HPESBUX04160 rev.2 - HP-UX OpenSSL, Multiple Vulnerabilities

Potential Security Impact: Local: Unauthorized Access to Diagnostic Data, Unauthorized Arbitrary File Creation, Unqualified Configuration Change; Remote: Unauthorized Access to Diagnostic Data, Unauthorized Arbitrary File Creation SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed...

Advantech iView Access Control Error Vulnerability (CNVD-2021-40758)

Advantech Iview is a Simple Network Protocol SNMP based management software for B + B SmartWorx devices from Advantech, China. An Access Control Error vulnerability exists in Advantech iView version 5.7.03.6182. The vulnerability stems from a lack of authentication in the program, which makes the...

Advantech Iview 访问控制错误漏洞

Advantech Iview is a Simple Network Protocol SNMP based management software for B + B SmartWorx devices from Advantech, China. An Access Control Error vulnerability exists in Advantech iView version 5.7.03.6182. The vulnerability stems from a lack of authentication in the program, which makes the...

Design/Logic Flaw

By exploiting a vulnerability in NPort IA5150A/IA5250A Series before version 1.5, a user with “Read Only” privilege level can send requests via the web console to have the device’s configuration changed...

CVE-2020-27149

By exploiting a vulnerability in NPort IA5150A/IA5250A Series before version 1.5, a user with “Read Only” privilege level can send requests via the web console to have the device’s configuration changed...

Authentication flaw

A security vulnerability has been identified in the HPE Edgeline Infrastructure Manager, also known as HPE Edgeline Infrastructure Management Software, prior to version 1.22. The vulnerability could be remotely exploited to bypass remote authentication leading to execution of arbitrary commands,...

CVE-2021-29203

CVE-2021-29203 affects HPE Edgeline Infrastructure Manager prior to version 1.22. The connected Nuclei template documents an authentication bypass vulnerability that could be remotely exploited to bypass remote authentication, potentially allowing execution of arbitrary commands, gaining privileg...