org.grails:grails-datastore-gorm (>=2.0.0.m2, <=2.0.0.m3), org.grails:grails-datastore-gorm-hibernate (>=2.0.0.m2, <=2.0.0.m3) +24 more potentially affected by CVE-2018-1000529 via org.grails:grails-core (2.3.0.m1)

org.grails:grails-core MAVEN version 2.3.0.m1 is affected by a known vulnerability. The following packages have a transitive dependency on org.grails:grails-core and may be impacted: - org.grails:grails-datastore-gorm =2.0.0.m2, =2.0.0.m2, =2.0.0.m2, =2.0.0.m2, =2.0.0.m2, =2.0.0.m2, =2.0.0.m3 -...

org.grails:grails-datastore-gorm (2.0.2.release), org.grails:grails-datastore-gorm-hibernate (2.0.2.release) +28 more potentially affected by CVE-2018-1000529 via org.grails:grails-core (2.3.1)

org.grails:grails-core MAVEN version 2.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.grails:grails-core and may be impacted: - org.grails:grails-datastore-gorm 2.0.2.release - org.grails:grails-datastore-gorm-hibernate 2.0.2.release -...

org.grails:grails-datastore-gorm (>=3.1.3.release, <=3.1.5.release), org.grails:grails-datastore-gorm-cassandra (1.0.0-m01) +31 more potentially affected by CVE-2018-1000529 via org.grails:grails-core (2.3.11)

org.grails:grails-core MAVEN version 2.3.11 is affected by a known vulnerability. The following packages have a transitive dependency on org.grails:grails-core and may be impacted: - org.grails:grails-datastore-gorm =3.1.3.release, =3.1.3.release, =3.1.3.release, =3.1.3.release, =3.1.4.release,...

CVE-2018-15593

An issue was discovered in Ivanti Workspace Control before 10.3.10.0 and RES One Workspace. A local authenticated user can decrypt the encrypted datastore or relay server password by leveraging an unspecified attack vector...

CVE-2018-15593

An issue was discovered in Ivanti Workspace Control before 10.3.10.0 and RES One Workspace. A local authenticated user can decrypt the encrypted datastore or relay server password by leveraging an unspecified attack vector...

CVE-2018-15593: Undefined Security Weakness

An issue was discovered in Ivanti Workspace Control before 10.3.10.0 and RES One Workspace. A local authenticated user can decrypt the encrypted datastore or relay server password by leveraging an unspecified attack vector...

RSA Archer Cross-Site Scripting Vulnerability

RSA Archer is an enterprise IT governance and compliance governance product. RSA Archer suffers from a cross-site scripting vulnerability that can be exploited by a remote authenticated malicious Archer user to store malicious HTML or JavaScript code in a trusted application datastore. When an...

openshift-ansible: Incorrectly quoted values in etcd.conf causes disabling of SSL client certificate authentication

OpenShift and Atomic Enterprise Ansible deploys a misconfigured etcd file that causes the SSL client certificate authentication to be disabled. Quotations around the values of ETCDCLIENTCERTAUTH and ETCDPEERCLIENTCERTAUTH in etcd.conf result in etcd being configured to allow remote users to conne...

CVE-2018-1206

Dell EMC Data Protection Advisor versions prior to 6.3 Patch 159 and Dell EMC Data Protection Advisor versions prior to 6.4 Patch 110 contain a hardcoded database account with administrative privileges. The affected account is "apollosuperuser." An attacker with local access to the server where D...

CVE-2018-1206: Use of Hard-coded Credentials

Dell EMC Data Protection Advisor versions prior to 6.3 Patch 159 and Dell EMC Data Protection Advisor versions prior to 6.4 Patch 110 contain a hardcoded database account with administrative privileges. The affected account is "apollosuperuser." An attacker with local access to the server where D...

PT-2018-10978

Name of the Vulnerable Software and Affected Versions Dell EMC Data Protection Advisor versions prior to 6.3 Patch 159 Dell EMC Data Protection Advisor versions prior to 6.4 Patch 110 Description The issue concerns a hardcoded database account with administrative privileges, specifically the...

CVE-2017-1000411

OpenFlow Plugin and OpenDayLight Controller versions Nitrogen, Carbon, Boron, Robert Varga, Anil Vishnoi contain a flaw when multiple 'expired' flows take up the memory resource of CONFIG DATASTORE which leads to CONTROLLER shutdown. If multiple different flows with 'idle-timeout' and...

CVE-2017-1000411

OpenFlow Plugin and OpenDayLight Controller versions Nitrogen, Carbon, Boron, Robert Varga, Anil Vishnoi contain a flaw when multiple 'expired' flows take up the memory resource of CONFIG DATASTORE which leads to CONTROLLER shutdown. If multiple different flows with 'idle-timeout' and...

CVE-2017-1000411

CVE-2017-1000411 affects OpenFlow Plugin and OpenDaylight Controller (Nitrogen, Carbon, Boron) with a flaw where multiple expired flows consume memory in CONFIG DATASTORE, causing the controller to shutdown once JVM/resource limits are reached. The issue arises when idle-timeout and hard-timeout ...

CVE-2017-1000411: Improper Resource Shutdown or Release

OpenFlow Plugin and OpenDayLight Controller versions Nitrogen, Carbon, Boron, Robert Varga, Anil Vishnoi contain a flaw when multiple 'expired' flows take up the memory resource of CONFIG DATASTORE which leads to CONTROLLER shutdown. If multiple different flows with 'idle-timeout' and...

PT-2018-5187

Name of the Vulnerable Software and Affected Versions OpenFlow Plugin and OpenDayLight Controller versions Nitrogen through Robert Varga Description The issue arises when multiple 'expired' flows consume the memory resource of the CONFIG DATASTORE, leading to the shutdown of the CONTROLLER. This...

CVE-2017-11698

Heap-based buffer overflow in the getpage function in lib/dbm/src/hpage.c in Mozilla Network Security Services NSS allows context-dependent attackers to have unspecified impact using a crafted cert8.db file...

Unexpected file removal from datastore after failed NEA deployment

Challenge After a failed attempt to deploy NEA for tenants on the provider's side, all files from the datastore root folder including VM files are deleted. Cause This issue is caused by using only the " " space symbol for the NEA name and the deployment has failed. Veeam tries to detect failed NE...

Distributed File Analysis Framework: Assemblyline

Assemblyline is a scalable distributed file analysis framework . It is designed to process millions of files per day but can also be installed on a single box. Canada’s electronic spy agency says it is taking the “unprecedented step” of releasing one of its own cyber defence tools to the public, ...

datastore.co.il XSS vulnerability

Open Bug Bounty ID: OBB-360821 Description| Value ---|--- Affected Website:| datastore.co.il Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...