Event ID: 28 "Could not contact any Federated Authentication Servers"

Users are unable to launch Citrix sessions from a FAS enabled store and observe the error - 'Cannot start desktop '. On the StoreFront servers, we observe Event ID: 28 stating - 'Failed to launch the resource 'XXXXXX' using the Citrix XML Service at address '??'. It was not possible to select a...

SUSE-SU-2023:4375-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-3777: Fixed a use-after-free vulnerability in netfilter: nftables component can be exploited to achieve local privilege escalation. bsc1215095 -...

The vulnerability of Google Chrome’s Picture-in-Picture (PiP) technology, which allows attackers to carry out spoofing attacks

The vulnerability of Google Chrome’s Picture-in-Picture PiP technology is related to information representation errors in the user interface. Exploiting this vulnerability can allow attackers to perform spoofing attacks remotely...

CVE-2023-5516

Poorly constructed webap requests and URI components with special characters trigger unhandled errors and exceptions, disclosing information about the underlying technology and other sensitive information details. The website unintentionally reveals sensitive information including technical detai...

Design/Logic Flaw

Poorly constructed webap requests and URI components with special characters trigger unhandled errors and exceptions, disclosing information about the underlying technology and other sensitive information details. The website unintentionally reveals sensitive information including technical detai...

CVE-2023-5516

Poorly constructed webap requests and URI components with special characters trigger unhandled errors and exceptions, disclosing information about the underlying technology and other sensitive information details. The website unintentionally reveals sensitive information including technical detai...

CVE-2023-5516

CVE-2023-5516 is associated with Hitachi Energy eSOMS. The EU/ICS and CVE entries describe a vulnerability where poorly constructed web requests and URI components disclose sensitive information (internal paths, endpoints, server details) via web responses. Affected product: eSOMS (v6.3.13 and pr...

Project Worlds Online Examination System Input Validation Error Vulnerability

Project Worlds Online Examination System is an online examination system. Project Worlds Online Examination System v1.0 suffers from an input validation error vulnerability that stems from susceptibility to multiple open redirection vulnerabilities that allow an attacker to redirect a victim user...

The vulnerability of the Snow License Manager Service Provider Edition software, related to privilege management errors, allows a violator to gain unauthorized access to protected information.

The vulnerability of the Snow License Manager Service Provider Edition software-related license management software is related to privilege management errors. Exploiting this vulnerability allows an intruder to gain unauthorized access to protected information...

Advisory ROSA-SA-2023-2285

software: clamav 0.103.8 WASP: ROSA-CHROME packageevrstring: clamav-0.103.8-1.src.rpm CVE-ID: CVE-2022-20698 BDU-ID: 2022-00587 CVE-Crit: MEDIUM. CVE-DESC.: A vulnerability in the Clam AntiVirus software package is related to insufficient input validation. Exploitation of the vulnerability could...

The vulnerability of the Passkey Handler component in operating systems such as Apple iPadOS, MacOS, and iOS allows a hacker to disclose sensitive information that is protected by this component.

The vulnerability of the Passkey Handler component in Apple’s iPadOS, MacOS, and iOS operating systems is related to authentication errors. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information...

The vulnerability in the full-screen mode of Firefox and Firefox ESR browsers, as well as the Thunderbird email client, allows attackers to carry out spoofing attacks.

The vulnerability in the full-screen mode of Firefox and Firefox ESR browsers, as well as the Thunderbird email client, is related to information representation errors in the user interface. This vulnerability allows a remote attacker to perform spoofing attacks...

The vulnerability of Firefox ESR and the Thunderbird email client, related to information representation errors in the user interface, allows attackers to perform spear-phishing attacks.

The vulnerability of Firefox ESR and the Thunderbird email client is related to information representation errors in the user interface. Exploiting this vulnerability allows a malicious actor to carry out spear-phishing attacks using a specially created link...

SUSE: Security Advisory (SUSE-SU-2023:4224-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of Juniper Networks’ Junos OS routers of the SRX series, related to errors during authentication, allows attackers to circumvent Juniper’s Deep Packet Inspection (JDPI) rules.

The vulnerability of Juniper Networks’ Junos OS routers of the SRX series is related to errors during authentication processes. Exploiting this vulnerability can allow a malicious actor to bypass Juniper’s Deep Packet Inspection JDPI rules...

The vulnerability of the Linux operating system’s kernel, caused by synchronization errors when using shared resources, allows a hacker to execute arbitrary code.

The vulnerability of the Linux operating system’s kernel arises from synchronization errors when using shared resources. Exploiting this vulnerability allows an attacker to execute arbitrary code...

The vulnerability of the Android operating system’s kernel allows attackers to enhance their privileges.

The vulnerability of Android operating system kernels is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow attackers to increase their privileges...

The vulnerability of the “//line” directive in the Go programming language allows a violator to execute arbitrary code.

The vulnerability of the “//line” directive in the Go programming language is related to errors in data processing during syntax analysis of code. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

SUSE: Security Advisory (SUSE-SU-2023:4212-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2023:4214-1 Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: - Updated to version 115.4.0 ESR bsc1216338: - CVE-2023-5721: Fixed a potential clickjack via queued up rendering. - CVE-2023-5722: Fixed a cross-Origin size and header leakage. - CVE-2023-5723: Fixed unexpected errors when handling inval...