CVE-2018-4355

The CVE-2018-4355 entry refers to a configuration issue that affected iOS prior to 12 and macOS Mojave 10.14. According to Apple’s security content, the issue involved Bluetooth and was mitigated by applying additional restrictions and input validation changes. Affected products include iPhone/iP...

CVE-2018-4342

A configuration issue was addressed with additional restrictions. This issue affected versions prior to macOS Mojave 10.14.1...

CVE-2018-4342

CVE-2018-4342 is tied to macOS and was fixed in macOS Mojave 10.14.1. The available description indicates a configuration issue that could be mitigated by applying the 10.14.1 Security Update, which adds restrictions and addresses the vulnerability. Affected context in the provided materials cent...

CVE-2017-13911: Improper Input Validation

A configuration issue was addressed with additional restrictions. This issue affected versions prior to macOS X El Capitan 10.11.6 Security Update 2018-002, macOS Sierra 10.12.6 Security Update 2018-002, macOS High Sierra 10.13.2...

CVE-2018-4353: Improper Input Validation

A configuration issue was addressed with additional restrictions. This issue affected versions prior to macOS Mojave 10.14...

A configuration error occurred. Please try again. When Importing Android Enterprise Enterprise.config file or while enabling Android Enterprise.

A configuration error occurred. Please try again. When Importing Android Enterprise Enterprise.config file or while enabling Android Enterprise...

CVE-2019-6799

Summary of CVE-2019-6799 (phpMyAdmin) Affected: phpMyAdmin before 4.8.5. The issue arises when the AllowArbitraryServer setting is true and a rogue MySQL server is used. The vulnerability allows an attacker to read arbitrary files on the server that the web server user can access. It is related t...

Citrix Workspace app for Mac unable to see USB device

A USB Joystick has been tested successfully from a windows client. USB device pass through is configured on a Citrix policy via Studio, but USB device options on mac receiver client show "Policy Restricted" in the "Virtual Channel" column. Customer tried updating the local policy by editing the...

Anonymous FTP Login Reporting

Reports if the remote FTP Server allows anonymous logins. Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you...

KMS Activation Takes Too Much Time to Finish

After configured KMS mentioned in CTX128276, the KMS activation takes too much time to finish...

Huawei Backup App v6.30.52.12.L - Session Vulnerability

Document Title: =============== Huawei Backup App v6.30.52.12.L - Session Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1815 Video: https://www.vulnerability-lab.com/getcontent.php?id=1987 Release Date: ============= 2018-07-29...

U.S. Dept Of Defense: Partial PII leakage due to public set gitlab

Summary: ████████ allows you to explore the repos, snippets,etc. On the snippets we find a name+icon and some code information. This shouldn't publicly exposed as an attacker may use it to perform further attacks Description: A configuration issue allows code and the name+icon of a user on the...

PT-2018-10988 · Ellislab · Codeigniter

Name of the Vulnerable Software and Affected Versions: CodeIgniter versions prior to 3.1.9 Description: A Session Fixation issue exists because session.use strict mode in the Session Library was mishandled. This issue can be exploited due to the mishandling of the session configuration...

Error: "Cannot Complete Your Request" When Connecting to StoreFront Through Proxy

The following error is displayed when connecting to StoreFront through proxy due to proxy configuration: Cannot Complete Your Request...

SUSE-SU-2018:0865-1 Security update for docker-distribution

This update for docker-distribution fixes the following issues: Security issues fixed: - CVE-2017-11468: Fixed a denial of service memory consumption via the manifest endpoint bsc1049850. Bug fixes: - bsc1083474: docker-distirbution-registry overwrites configuration file with update. - bsc1033172...

RADIUS Group Extraction Failing with Error "Extracted group : Null"

NetScaler unable to extract the group from the Radius server and we get the following response from the Radius server"Extracted group : Null" in aaad.debug log...

Clarifying the behavior of mandatory ASLR

Last week, the CERT/CC published an advisory describing some unexpected behavior they observed when enabling system-wide mandatory Address Space Layout Randomization ASLR using Windows Defender Exploit Guard WDEG and EMET on Windows 8 and above. In this blog post, we will explain the configuratio...

Clarifying the behavior of mandatory ASLR

Last week, the CERT/CC published an advisory describing some unexpected behavior they observed when enabling system-wide mandatory Address Space Layout Randomization ASLR using Windows Defender Exploit Guard WDEG and EMET on Windows 8 and above. In this blog post, we will explain the configuratio...

WEM Admin Console Error: "Specified Infrastructure Server seems to be offline or have a wrong database configuration. Please check configuration and try again"

After performing in-place upgrade of the WEM Broker, The WEM Admin console gives the following error when trying to connect to the WEM site:. "Specified Infrastructure Server seems to be offline or have a wrong database configuration. Please check configuration and try again" Plus, when opening t...

Error "Could not update master user list" while saving the LDAP Configuration on XenMobile server

Unable to save LDAP configuration and getting Error "Could not update master user list" For sample logs: 2017-08-21T09:21:30.411-0700 | 3811F15F6AE686BC | INFO | http-nio-14443-exec-11 | com.citrix.cg.identity.ldap.LdapManager | Given baseDN 'dc=domain,dc=example,dc=com'is valid:true...