2332 matches found
Product update: Virtuozzo 7.0 Update 3 Hotfix 3 (7.0.3-641)
The new packages for Virtuozzo 7.0.3 introducing usability fixes and compatibility with Packet. Vulnerability id: PSBM-62644 Route of container with a host-routed interface was not cleared on source host after migration. Vulnerability id: PSBM-59017 Allowed access to '/dev/kmsg' inside containers...
McAfee ePolicy Orchestrator SQL Injection Vulnerability
McAfee ePolicy Orchestrator is prone to a blind SQL injection vulnerability SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Full VM restore to a new Datacenter cause deletion of production VM if the name of recovered VM will match production VM name
Challenge Production VM will be deleted without warning if following conditions are met: 1. Full VM restore to vCenter Datacenter, different from original VM Datacenter, VM was running under. 2. Name of recovering VM coincide with existing VM in production. Cause Based on VmWare architecture, it...
Product update: Virtuozzo Automator 7 Update 1 Hotfix 2 (7.0.1-740)
The new packages for Virtuozzo Automator 7 introducing a usability bug fix for the management node. Vulnerability id: PVA-36686 The 'vzlicmon' service now automatically starts on VA Management Node update, start, or restart to make sure that the Virtuozzo Automator license will be updated when...
Commvault Edge contains a buffer overflow vulnerability
Overview Commvault Edge, version 11 SP6 11.80.50.0, is vulnerable to a stack-based buffer overflow vulnerability. Description CWE-121: Stack-based Buffer Overflow - CVE-2017-3195A stack based buffer overflow in the Commvault Edge Communication Service cvd allows remote attackers to execute...
Apache Struts 2 Remote Code Execution (CVE-2017-5638)
Description Bamboo used a version of Struts 2 that was vulnerable to CVE-2017-5638|https://cwiki.apache.org/confluence/display/WW/S2-045. Attackers can use this vulnerability to execute Java code of their choice on systems that have a vulnerable version of Bamboo Affected versions: All versions o...
Apache Struts 2 Remote Code Execution (CVE-2017-5638)
Description Bamboo used a version of Struts 2 that was vulnerable to CVE-2017-5638|https://cwiki.apache.org/confluence/display/WW/S2-045. Attackers can use this vulnerability to execute Java code of their choice on systems that have a vulnerable version of Bamboo Affected versions: All versions o...
Apache Struts 2 Remote Code Execution (CVE-2017-5638)
Description Crowd used a version of Struts 2 that was vulnerable to CVE-2017-5638|https://cwiki.apache.org/confluence/display/WW/S2-045. Attackers can use this vulnerability to execute Java code of their choice on systems that have a vulnerable version of Crowd. Affected versions: All versions of...
Product update: Virtuozzo 6.0 Update 12 Hotfix 5 (6.0.12-3672)
The new packages for Virtuozzo 6.0.12 introducing a usability bug fix. Vulnerability id: PSBM-60976 Lack of VNC client capabilities check on host could result in unsupported data being sent to VNC client leading to a disconnection from host with error...
Product security update: Virtuozzo Automator 6.1 Update 2 Hotfix 3
The new packages for Virtuozzo Automator 6.1 introducing a new feature, a security fix, and usability bug fixes for VA Agent for Linux. Vulnerability id: PVA-27270 In cases when multiple containers were processed in a single task by external tools like 'vzabackup', Power Panel of any container...
Citrix XenServer Multiple Vulnerabilities (CTX220771)
The version of Citrix XenServer running on the remote host is missing a security hotfix. It is, therefore, affected by the following vulnerabilities : - A flaw exists in the blitregionisunsafe function within file hw/display/cirrusvga.c when handling a backward mode bitblt copy. A guest attacker...
Plone CMS < 5.0.5 Privilege Escalation Vulnerability
Plone CMS is prone to a privilege escalation vulnerability in WebDAV requests. Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program ...
Plone CMS < 5.0.5 Information Disclosure Vulnerability
Plone CMS is prone to an information disclosure vulnerability. Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software...
Product security update: Virtuozzo 6.0 Update 12 Hotfix 4
The new packages for Virtuozzo 6.0.12 introducing security fixes as well as stability bug fixes. Vulnerability id: PSBM-60778 Possible crash in memcpyfromiovecend triggered from inside container. Vulnerability id: PSBM-59962 Improved isolation for neighbor table settings...
Plone 5.0.5 Cross Site Scripting
Security Advisory - Curesec Research Team 1. Introduction Affected Product: Plone 5.0.5 Fixed in: Hotfix 20170117 Fixed Version Link: https://plone.org/security/hotfix/20170117 Vendor Contact: [email protected] Vulnerability Type: XSS Remote Exploitable: Yes Reported to vendor: 09/05/2016...
PT-2017-16333 · Sendquick +1 · Sendquick Entera +1
Name of the Vulnerable Software and Affected Versions: SendQuick Entera versions prior to 2HF16 Avera versions prior to 2HF16 Description: An issue was discovered where the application failed to check the access control of the request, which could result in an attacker being able to shutdown the...
EMC Avamar ADS / AVE 7.3.0.x < 7.3.0 Hotfix 268253 / 7.3.1.x < 7.3.1 Hotfix 272363 Incorrect File Ownership Local Privilege Escalation (ESA-2016-146)
According to its self-reported version number, the EMC Avamar Data Store ADS or Avamar Virtual Edition AVE software running on the remote host is a version prior to 7.3.0 Hotfix 268253 7.3.0.233 or prior to 7.3.1 Hotfix 272363 7.3.1.125. It is, therefore, affected by a local privilege escalation...
Product security update: Virtuozzo 6.0 Update 12 Hotfix 2 (6.0.12-3658)
The new packages for Virtuozzo 6.0 introducing a security fix. Vulnerability id: PSBM-58425 A vulnerability within vzpkg could allow a malicious user to perform a basic symlink attack resulting in files being moved outside of the container and onto the host file system. The issue only affected...
EMC Avamar Data Store / Virtual Edition 7.3.1 / 7.3.0 Privilege Escalation Vulnerability
Exploit for windows platform in category web applications ESA-2016-146: EMC Avamar Data Store and Avamar Virtual Edition Privilege Escalation Vulnerability EMC Identifier: ESA-2016-146 CVE Identifier: CVE-2016-8214 Severity Rating: CVSSv3 Base Score: 6.7 AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H Affect...
