Notice Of Change Announcement For Citrix - Citrix SD-WAN

Citrix Systems, Inc. announces a Notice of Status Change for the Citrix SD-WAN product line SD-WAN 110-SE, SD-WAN 210-SE, SD-WAN 210-PE, SD-WAN 1100-SE, SD-WAN 1100-PE, SD-WAN 2100-SE, SD-WAN 2100-PE, SD-WAN 4100-SE, SD-WAN 4100PE, SD-WAN 6100-SE, SD-WAN 6100-PE, Advanced edition Add-On SKU, Clou...

Rockwell Automation Factory Talk VantagePoint SQL Injection Vulnerability

Rockwell Automation Factory Talk VantagePoint is an advanced industrial application ecosystem from Rockwell Automation, Inc. The SQL injection vulnerability in Rockwell Automation Factory Talk VantagePoint stems from a failure to properly validate SQL statements entered by users when retrieving...

PT-2022-26408 · Pdf Xchange · Pdf-Xchange Editor

Name of the Vulnerable Software and Affected Versions: PDF-XChange Editor affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations. User interaction is required, where the target must visit a malicious page or open...

CVE-2022-41524

TOTOLINK NR1800X V9.1.0u.6279B20210910 was discovered to contain an authenticated stack overflow via the week, sTime, and eTime parameters in the setParentalRules function...

Rockwell Automation Factory Talk VantagePoint SQL注入漏洞

Rockwell Automation Factory Talk VantagePoint is an advanced industrial application ecosystem from Rockwell Automation, Inc. The SQL injection vulnerability in Rockwell Automation Factory Talk VantagePoint stems from a failure to properly validate SQL statements entered by users when retrieving...

ATutor <= 2.2.4 Access Control Vulnerability

Atutor is prone to an access control vulnerability. This VT has been deprecated and merged into the VT SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

NSC: Citrix ADC MPX 8905/8905Z, MPX/SDX 8910/SDX 8910Z, MPX/SDX 8920/8920Z, MPX/SDX 8930/8930Z

Citrix Systems, Inc. announces a Notice of Status Change for the Citrix ADC NetScaler MPX 8905/8905Z, MPX/SDX 8910/SDX 8910Z, MPX/SDX 8920/8920Z, MPX/SDX 8930/8930Z The tables below explain the Citrix ADC life cycle management milestones as well as important information regarding dates and option...

[SECURITY] Fedora 35 Update: bind-dyndb-ldap-11.9-16.fc35

This package provides an LDAP back-end plug-in for BIND. It features support for dynamic updates and internal caching, to lift the load off of your LDAP server...

Matrix 安全漏洞

Matrix is an ambitious new ecosystem for open federated instant messaging and VoIP. A security vulnerability exists in versions of Matrix matrix-android-sdk2 prior to 1.5.1, which stems from the fact that its matrix-android-sdk2 implements an overly lax key-forwarding policy on the receiving end...

[SECURITY] Fedora 36 Update: bind-dyndb-ldap-11.9-20.fc36

This package provides an LDAP back-end plug-in for BIND. It features support for dynamic updates and internal caching, to lift the load off of your LDAP server...

The vulnerability in the src/undo.c component of the Vim text editor allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the src/undo.c component of the Vim text editor lies in the fact that “undo” leaves the end of the visual area at the end of the line. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and even cause service failur...

[SECURITY] Fedora 37 Update: bind-dyndb-ldap-11.10-6.fc37

This package provides an LDAP back-end plug-in for BIND. It features support for dynamic updates and internal caching, to lift the load off of your LDAP server...

ALPINE-CVE-2022-2881

The underlying bug might cause read past end of the buffer and either read memory it should not read, or crash the process...

CVE-2022-2881

CVE-2022-2881 is described across multiple records as a read-past-end-of-buffer issue in ISC BIND, specifically in the DNS statistics channel, leading to memory reads outside bounds or a crash. The connected documents confirm ISC BIND as affected and reference several advisories (USN-5626-1, CNVD...

UBUNTU-CVE-2022-2881

The underlying bug might cause read past end of the buffer and either read memory it should not read, or crash the process...

Design/Logic Flaw

The OWASP ModSecurity Core Rule Set CRS is affected by a partial rule set bypass by submitting a specially crafted HTTP Content-Type header field that indicates multiple character encoding schemes. A vulnerable back-end can potentially be exploited by declaring multiple Content-Type "charset" nam...

CVE-2022-39955 Partial rule set bypass in OWASP ModSecurity Core Rule Set by submitting a specially crafted HTTP Content-Type header

The OWASP ModSecurity Core Rule Set CRS is affected by a partial rule set bypass by submitting a specially crafted HTTP Content-Type header field that indicates multiple character encoding schemes. A vulnerable back-end can potentially be exploited by declaring multiple Content-Type "charset" nam...

September 20, 2022—KB5017380 (OS Builds 19042.2075, 19043.2075, and 19044.2075) Preview

None None...

SUSE-SU-2022:3313-1 Security update for release-notes-susemanager, release-notes-susemanager-proxy

This update for release-notes-susemanager, release-notes-susemanager-proxy fixes the following issues: Release notes for SUSE Manager: - Update to SUSE:Manager 4.2.9 Notification about SUSE Manager end-of-life has been added CVEs fixed: CVE-2021-43138, CVE-2021-42740, CVE-2022-31129, CVE-2021-414...

PT-2022-37287 · Git +1 · Bluez

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 4 crash has been reported. The crash involves the following functions: element end, emit end element, and g markup parse...