Citrix App Layering | Start Menu does not respond to left click on Windows 10 when template is published via Azure Connector

Start menu does not respond to left click for VDI's created from a template published via the Azure connector The start menu may respond on first logon - but will always fail on second and subsequent logons After logon we see the following events in the application event logs:...

VulnCheck KEV: CVE-2019-3369

Atlassian Confluence and Data Center is vulnerable to a remote code execution vulnerability in the 'widget connector' component. The issue lies in a server-side template injection weakness...

openSUSE 15 Security Update : mysql-connector-java (openSUSE-SU-2021:1126-1)

The remote SUSE Linux SUSE15 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:1126-1 advisory. - Vulnerability in the MySQL Connectors product of Oracle MySQL component: Connector/J. Supported versions that are affected are 8.0.14 and...

openSUSE: Security Advisory for mysql-connector-java (openSUSE-SU-2021:1126-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OPENSUSE-SU-2021:1126-1 Security update for mysql-connector-java

This update for mysql-connector-java fixes the following issues: - CVE-2020-2875: Unauthenticated attacker with network access via multiple protocols can compromise MySQL Connectors. bsc1173600 - CVE-2020-2934: Fixed a vulnerability which could cause a partial denial of service of MySQL Connector...

SAP ERP 路径遍历漏洞

SAP Cloud Connector is used to establish a secure connection between a computer and the SAP cloud platform. A path traversal vulnerability exists in SAP Cloud Connector version 2.0, which arises by allowing the upload of zip files as backups. Such backup files can be spoofed by injecting special...

SAP ERP 跨站脚本漏洞

SAP Cloud Connector is a connector for connecting to the SAP Cloud Platform from SAP Germany. A cross-site scripting vulnerability exists in SAP Cloud Connector version 2.0, which arises from a program that does not adequately encode user-controlled input, and can be exploited by an attacker with...

SAP ERP 信任管理问题漏洞

SAP Cloud Connector is a connector for connecting to the SAP Cloud Platform from SAP Germany. SAP Cloud Connector 2.0 suffers from a trust management issue vulnerability that stems from SAP Cloud Connector being able to communicate with the backend without sufficiently validating certificates. An...

openSUSE: Security Advisory for mysql-connector-java (openSUSE-SU-2021:2622-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE 15 Security Update : mysql-connector-java (openSUSE-SU-2021:2622-1)

The remote SUSE Linux SUSE15 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:2622-1 advisory. - Vulnerability in the MySQL Connectors product of Oracle MySQL component: Connector/J. Supported versions that are affected are 8.0.14 and...

OPENSUSE-SU-2021:2622-1 Security update for mysql-connector-java

This update for mysql-connector-java fixes the following issues: - CVE-2020-2875: Unauthenticated attacker with network access via multiple protocols can compromise MySQL Connectors. bsc1173600 - CVE-2020-2934: Fixed a vulnerability which could cause a partial denial of service of MySQL Connector...

Security update for mysql-connector-java (moderate)

openSUSE Security Update: Security update for mysql-connector-java Announcement ID: openSUSE-SU-2021:2622-1 Rating: moderate References: 1173600 Cross-References: CVE-2020-2875 CVE-2020-2933 CVE-2020-2934 CVSS scores: CVE-2020-2875 NVD : 4.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N...

Zscaler Client Connector Buffer Overflow Vulnerability

Zscaler Client Connector is an application for zscaler. An application installed on an appliance that ensures that Internet traffic and access to an organization's internal applications is secure and compliant with the organization's policies, even when not on the corporate network.A security...

CVE-2020-11634

The Zscaler Client Connector for Windows prior to 2.1.2.105 had a DLL hijacking vulnerability caused due to the configuration of OpenSSL. A local adversary may be able to execute arbitrary code in the SYSTEM context...

CVE-2020-11632

The Zscaler Client Connector prior to 2.1.2.150 did not quote the search path for services, which allows a local adversary to execute code with system privileges...

CVE-2020-11632

The Zscaler Client Connector prior to 2.1.2.150 did not quote the search path for services, which allows a local adversary to execute code with system privileges...

Code injection

The Zscaler Client Connector prior to 2.1.2.150 did not quote the search path for services, which allows a local adversary to execute code with system privileges...

CVE-2020-11634

CVE-2020-11634 affects the Zscaler Client Connector for Windows prior to version 2.1.2.105. The vulnerability is a DLL hijacking issue arising from the OpenSSL configuration, enabling a local adversary to execute arbitrary code in the SYSTEM context. The affected component is the Windows client (...

CVE-2020-11632

The CVE-2020-11632 vulnerability affects Zscaler Client Connector prior to version 2.1.2.150. The root cause is failure to quote the search path for services, enabling a local attacker to execute code with SYSTEM privileges. Affected versions are pre-2.1.2.150; upgrade to 2.1.2.150 or newer (per ...

CVE-2020-11632

The Zscaler Client Connector prior to 2.1.2.150 did not quote the search path for services, which allows a local adversary to execute code with system privileges...