CVE-2016-6033

CVE-2016-6033 affects IBM Tivoli Storage Manager for Virtual Environments: Data Protection for VMware and Tivoli Storage FlashCopy Manager for VMware. The root cause is a cross-site request forgery (CSRF) vulnerability that could allow an attacker to execute malicious actions transmitted from a t...

CVE-2016-6033: Cross-Site Request Forgery (CSRF)

IBM Tivoli Storage Manager for Virtual Environments 7.1 VMware is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM Reference : 1995545...

PT-2017-8857

Name of the Vulnerable Software and Affected Versions IBM Tivoli Storage Manager for Virtual Environments version 7.1 VMware Description The issue allows an attacker to execute malicious and unauthorized actions by exploiting cross-site request forgery. This could be done by transmitting actions...

IBM TSM for Virtual Environments 7.1.3.0 < 7.1.6.4 Windows Domain Credential Disclosure

The IBM Tivoli Storage Manager TSM for Virtual Environments installed on the remote host is a version later than 7.1.3.0 but prior to 7.1.6.4. It is, therefore, affected by an unspecified flaw in the vSphere GUI that allows an authenticated, remote attacker to disclose Windows domain credentials....

Multiple Arbitrary Code Execution Vulnerabilities in GNU Bash

Bash is a shell command language interpreter written by American software developer Brian J. Fox for the GNU Project, which runs on Unix-like operating systems the default shell for Linux systems and is capable of reading and executing commands from a standard input device or file, and also...

Best Practices for deploying PVS in multi-geo environments

In scenarios where companies have a Global presence with multiple geographical locations, it is sometimes desirable to have a Provisioning Services Farm that spans multiple locations across the globe. PVS requires a constant andreliable connection to the SQL database. If there's a delay in...

[SECURITY] Fedora 24 Update: spice-0.12.8-2.fc24

The Simple Protocol for Independent Computing Environments SPICE is a remote display system built for virtual environments which allows you to view a computing 'desktop' environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine...

[SECURITY] Fedora 25 Update: spice-0.13.3-2.fc25

The Simple Protocol for Independent Computing Environments SPICE is a remote display system built for virtual environments which allows you to view a computing 'desktop' environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine...

IBM Tivoli Storage Manager Information Disclosure Vulnerability

IBM Tivoli Storage Manger for Virtual Environments: Data Protection for VMware is a suite of VM backup and recovery solutions from IBM USA. An information disclosure vulnerability exists in IBM Tivoli Storage Manger for Virtual Environments versions 7.1.3.0 through 7.1.6.3. An attacker could...

CentOS Update for spice-server CESA-2017:0253 centos6

Check the version of spice-server SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882652";...

spice security update

CentOS Errata and Security Advisory CESA-2017:0253 An update for spice-server is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

Moderate: Red Hat Security Advisory: spice security update

An update for spice is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

CVE-2016-6034

IBM Tivoli Storage Manager for Virtual Environments VMware could disclose the Windows domain credentials to a user with a high level of privileges...

Design/Logic Flaw

IBM Tivoli Storage Manager for Virtual Environments VMware could disclose the Windows domain credentials to a user with a high level of privileges...

CVE-2016-6034

IBM Tivoli Storage Manager for Virtual Environments VMware could disclose the Windows domain credentials to a user with a high level of privileges...

CVE-2016-6034: Exposure of Sensitive Information to an Unauthorized Actor

IBM Tivoli Storage Manager for Virtual Environments VMware could disclose the Windows domain credentials to a user with a high level of privileges...

PT-2017-8858

Name of the Vulnerable Software and Affected Versions IBM Tivoli Storage Manager for Virtual Environments VMware affected versions not specified Description The issue could disclose Windows domain credentials to a user with a high level of privileges. Recommendations At the moment, there is no...

Linux Malware Detect: LMD

Linux Malware Detect LMD is a malware scanner for Linux released under the GNU GPLv2 license, that is designed around the threats faced in shared hosted environments. It uses threat data from network edge intrusion detection systems to extract malware that is actively being used in attacks and...

CVE-2017-3241

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE subcomponent: RMI. Supported versions that are affected are Java SE: 6u131, 7u121 and 8u112; Java SE Embedded: 8u111; JRockit: R28.3.12. Difficult to exploit vulnerability allows unauthenticated attacker with...

[SECURITY] Fedora 25 Update: xemacs-packages-extra-20170114-1.fc25

XEmacs is a highly customizable open source text editor and application development system. It is protected under the GNU General Public License and related to other versions of Emacs, in particular GNU Emacs. Its emphasis is on modern graphical user interface support and an open software...