MGASA-2023-0121 Updated xapian packages fix security vulnerability

Xapian database corruption on disk full is possible. It doesn't happen in every case as ENOSPC needs to happen on a particular operation during the commit but then not happen on a repeat attempt at that operation. bdo1032398...

Updated xapian packages fix security vulnerability

Xapian database corruption on disk full is possible. It doesn't happen in every case as ENOSPC needs to happen on a particular operation during the commit but then not happen on a repeat attempt at that operation. bdo1032398...

Large MCS deployments in Azure may fail due to Azure throttling of disk clones

Customers hosting VMs in Azure may experience an error when attempting to create a large machine catalog or add additional machines in bulk, resulting in failure to create new machines. This error will appear in Azure as: "Too many attempts to copy from a writable resource a managed disk; please...

CVE-2023-27246

An arbitrary file upload vulnerability in the Virtual Disk of MK-Auth 23.01K4.9 allows attackers to execute arbitrary code via uploading a crafted .htaccess file...

CVE-2023-27246

An arbitrary file upload vulnerability in the Virtual Disk of MK-Auth 23.01K4.9 allows attackers to execute arbitrary code via uploading a crafted .htaccess file...

Design/Logic Flaw

An arbitrary file upload vulnerability in the Virtual Disk of MK-Auth 23.01K4.9 allows attackers to execute arbitrary code via uploading a crafted .htaccess file...

CVE-2023-27246

Summary of CVE-2023-27246: An arbitrary file upload vulnerability exists in the Virtual Disk component of MK-Auth 23.01K4.9 that allows an attacker to execute arbitrary code by uploading a crafted .htaccess file. The public references describe MK-Auth 23.01K4.9 as affected, with the vulnerability...

PT-2023-21028 · Mk-Auth · Mk-Auth

Name of the Vulnerable Software and Affected Versions: MK-Auth version 23.01K4.9 Description: An arbitrary file upload vulnerability in the Virtual Disk of MK-Auth allows attackers to execute arbitrary code via uploading a crafted .htaccess file. Recommendations: For MK-Auth version 23.01K4.9,...

CVE-2023-27246

An arbitrary file upload vulnerability in the Virtual Disk of MK-Auth 23.01K4.9 allows attackers to execute arbitrary code via uploading a crafted .htaccess file...

CVE-2023-27246: Unrestricted Upload of File with Dangerous Type

An arbitrary file upload vulnerability in the Virtual Disk of MK-Auth 23.01K4.9 allows attackers to execute arbitrary code via uploading a crafted .htaccess file...

CVE-2022-48359

The recovery mode for updates has a vulnerability that causes arbitrary disk modification. Successful exploitation of this vulnerability may affect confidentiality...

How to check write cache disk usage from XenServer Hypervisor

How to check Write Cache Disk usage from XenServer hypervisor...

CVE-2022-48359

The recovery mode for updates has a vulnerability that causes arbitrary disk modification. Successful exploitation of this vulnerability may affect confidentiality...

CVE-2022-48359

CVE-2022-48359 describes a vulnerability in the recovery mode for updates that can lead to arbitrary disk modification and potential confidentiality impact. Public sources (NVD) assign CVSS v3.1: Network attack vector, low attack complexity, no privileges required, user interaction not needed, wi...

CVE-2022-48359: Improperly Controlled Modification of Dynamically-Determined Object Attributes

The recovery mode for updates has a vulnerability that causes arbitrary disk modification. Successful exploitation of this vulnerability may affect confidentiality...

Certain DesignJet and PageWide XL products - Potential information disclosure

Certain DesignJet and PageWide XL TAA compliant models may have risk of potential information disclosure if the hard disk drive is physically removed from the printer. HP has provided firmware updates to resolve the issue for the potentially affected products listed in the table below...

PT-2023-15736 · Huawei · Emui +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The recovery mode for updates contains a flaw that allows for arbitrary disk modification, potentially impacting confidentiality. There is no informatio...

CVE-2022-48359

The recovery mode for updates has a vulnerability that causes arbitrary disk modification. Successful exploitation of this vulnerability may affect confidentiality...

MiniDVBLinux 5.4 - Arbitrary File Read

Exploit Title: MiniDVBLinux 5.4 - Arbitrary File Read Exploit Author: LiquidWorm !/usr/bin/env python3 MiniDVBLinux 5.4 Arbitrary File Read Vulnerability Vendor: MiniDVBLinux Product web page: https://www.minidvblinux.de Affected version: =5.4 Summary: MiniDVBLinuxTM Distribution MLD. MLD offers ...

disk-o-tape.com Cross Site Scripting vulnerability OBB-3235997

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...