11086 matches found
Recommended Install Order for Preparing Target Device Captured by Provisioning Server to Deploy vDisk
This article contains the recommended order to install or prepare a target device that must be captured by the Provisioning Services Sever to deploy a virtual disk...
Vulnerability fixed in GitLab CE/EE
GitLab has fixed a vulnerability in GitLab CE/EE A malicious person could exploit the vulnerability under certain circumstances to start a Continuous Integration/Continuous Deployment CI/CD pipeline process as any other user. GitLab has released updates to fix the vulnerability in GitLab CE/EE...
Citrix Endpoint Management (aka XenMobile Server) 10.15.0 Rolling Patch 8
Package name: xms10.15.0.10808.bin For: XenMobile Server 10.15.0 Deployment type: On-premises only Replaces: xms10.15.0.10731.bin, xms10.15.0.10624.bin, xms10.15.0.10517.bin, xms10.15.0.10417.bin, xms10.15.0.10327.bin, xms10.15.0.10220.bin, and xms10.15.0.10125.bin Date: July 2024 Languages...
GitLab CE/EE Security Vulnerabilities
GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD Continuous Integration and Continuous Delivery, and other features. A security vulnerability exists in GitLab CE/EE version 17.0 up to and includi...
Description of the security update for SharePoint Server Subscription Edition: July 9, 2024 (KB5002606)
None None...
Description of the security update for SharePoint Server 2019: July 9, 2024 (KB5002615)
None None...
Description of the security update for Outlook 2016: July 9, 2024 (KB5002621)
None None...
Description of the security update for Office 2016: July 9, 2024 (KB5002620)
None None...
KNIME Business Hub Security Vulnerability
KNIME Business Hub is KNIME's enterprise software for data science automation, deployment modeling, team collaboration and management workflows. A security vulnerability exists in KNIME Business Hub versions 1.10.0 and 1.10.1 that stems from vulnerability to denial-of-service attacks, which can...
Ping Identity PingFederate Security Vulnerability
Ping Identity PingFederate is a flagship software-based federation server from US-based Ping Identity, Inc. for identity management. Ping Identity A security vulnerability exists in PingFederate versions prior to 12.0.1, which stems from an unauthorized user being able to access the deployment...
Siemens TIA Portal and SIMATIC STEP 7
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...
io.inkstand:inkstand-deployment-resteasy (>=0.1.1, <=0.1.2), io.inkstand:inkstand-http-undertow (>=0.1.1, <=0.1.2) +8 more potentially affected by CVE-2024-5971 via io.undertow:undertow-core (1.2.0.beta3)
io.undertow:undertow-core MAVEN version 1.2.0.beta3 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.inkstand:inkstand-deployment-resteasy =0.1.1, =0.1.1, =0.0.1, =0.0.1, =4.0.0, =1.0.0.alpha11,...
com.onyxdevtools:onyx-web-database (>=1.2.0, <=2.0.0), io.undertow:undertow-http2-test-suite (1.3.0.beta2) +33 more potentially affected by CVE-2024-5971 via io.undertow:undertow-core (1.3.0.beta2)
io.undertow:undertow-core MAVEN version 1.3.0.beta2 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - com.onyxdevtools:onyx-web-database =1.2.0, =2.0.0.alpha5, =2.0.0.alpha5, =2.0.0.alpha5, =2.0.0.alpha5,...
Security Bulletin: IBM QRadar Deployment Intelligence app for IBM QRadar SIEM is vulnerable to using components with known vulnerabilities (CVE-2024-4067, CVE-2024-28849, CVE-2024-4068)
Summary The product includes vulnerable components e.g., framework libraries that may be identified and exploited with automated tools. IBM QRadar Deployment Intelligence app for IBM QRadar SIEM has addressed the applicable CVEs. Vulnerability Details CVEID:CVE-2024-4067 DESCRIPTION: Node.js...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.16.1 bug fix and security update
Red Hat OpenShift Container Platform release 4.16.1 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.16. Red Hat Product Security has rated this update as having a...
Citrix Endpoint Management (aka XenMobile Server) 10.16.0 Rolling Patch 2
Package name: xms10.16.0.10205.bin For: XenMobile Server 10.16.0 Deployment type: On-premises only Replaces: xms10.16.0.10108.bin Date: July 2024 Languages supported: English US Important notes about this update As a best practice, Citrix recommends that you install this and other updates to ensu...
Moderate: Red Hat Security Advisory: Secondary Scheduler Operator for Red Hat OpenShift 1.3.0 for RHEL 9
Secondary Scheduler Operator for Red Hat OpenShift 1.3.0 for RHEL 9 Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...
GHSA-GPPG-GQW8-WH9G litellm vulnerable to remote code execution based on using eval unsafely
BerriAI/litellm version v1.35.8 contains a vulnerability where an attacker can achieve remote code execution. The vulnerability exists in the adddeployment function, which decodes and decrypts environment variables from base64 and assigns them to os.environ. An attacker can exploit this by sendin...
CVE-2024-5751 Remote Code Execution in BerriAI/litellm
BerriAI/litellm version v1.35.8 contains a vulnerability where an attacker can achieve remote code execution. The vulnerability exists in the adddeployment function, which decodes and decrypts environment variables from base64 and assigns them to os.environ. An attacker can exploit this by sendin...
Critical: Red Hat Security Advisory: OpenShift Container Platform 4.16.0 bug fix and security update
Red Hat OpenShift Container Platform release 4.16.0 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.16. Red Hat Product Security has rated this update as having a...