Oracle Application Testing Suite (Apr 2023 CPU)

The version of Oracle Application Testing Suite installed on the remote host is affected by multiple vulnerabilities as referenced in the April 2023 CPU advisory: - Vulnerability in the Oracle Application Testing Suite product of Oracle Enterprise Manager component: Load Testing for Web Apps Apac...

How to control IP address returned in a DNS query based on source IP address (local DNS IP address)

This article contains information about how to control IP address returned in a DNS query based on source IP address local DNS IP address The IP addresses DNS returned must work inactive/standby mode. Also, you can use DNS policy expressions to monitor load balancing service statusassociate to th...

Mozilla Firefox 安全漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation. A security vulnerability exists in Mozilla Firefox that originates from a failure to properly validate a URI received by WebExtension during a load request, which can be exploited by an attacker to obtain sensitive...

CVE-2023-28140

An Executable Hijacking condition exists in the Qualys Cloud Agent for Windows platform in versions before 4.5.3.1. Attackers may load a malicious copy of a Dependency Link Library DLL via a local attack vector instead of the DLL that the application was expecting, when processes are running with...

SAP Web Dispatcher Access Control Error Vulnerability

SAP Web Dispatcher is the core component of Load Balancing from SAP, which supports load balancing and provides the function of reverse proxy so that users from outside the network can access internal applications. An Access Control Error vulnerability exists in SAP Web Dispatcher, which stems fr...

CVE-2023-29013 HTTP header parsing could cause a deny of service

Traefik pronounced traffic is a modern HTTP reverse proxy and load balancer for deploying microservices. There is a vulnerability in Go when parsing the HTTP headers, which impacts Traefik. HTTP header parsing could allocate substantially more memory than required to hold the parsed headers. This...

CVE-2023-28240

Windows Network Load Balancing Remote Code Execution Vulnerability...

CVE-2023-28240

Windows Network Load Balancing Remote Code Execution Vulnerability...

Remote code execution

Windows Network Load Balancing Remote Code Execution Vulnerability...

CVE-2023-28240 Windows Network Load Balancing Remote Code Execution Vulnerability

...

CVE-2023-28240

Technical details for CVE-2023-28240 are not publicly available in the provided documents; monitor for updates.

CVE-2023-28240 Windows Network Load Balancing Remote Code Execution Vulnerability

...

Moderate: Red Hat Security Advisory: haproxy security update

An update for haproxy is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

Windows Network Load Balancing Remote Code Execution Vulnerability

...

SAP Web Dispatcher 安全漏洞

SAP Web Dispatcher is the core component of Load Balancing from SAP, which supports load balancing and provides the function of reverse proxy so that users from outside the network can access internal applications. An Access Control Error vulnerability exists in SAP Web Dispatcher, which stems fr...

Microsoft Windows Network Load Balancing 安全漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Network Load Balancing. The following products and editions are affected:Windows Server 2012 R2,Windows Server 2012 R2 Server Core...

ALSA-2023:1696 Moderate: haproxy security update

The haproxy packages provide a reliable, high-performance network load balancer for TCP and HTTP-based applications. Security Fixes: haproxy: segfault DoS CVE-2023-0056 haproxy: request smuggling attack in HTTP/1 header parsing CVE-2023-25725 For more details about the security issues, including...

PT-2023-2560 · Microsoft · Windows Network Load Balancing +1

Name of the Vulnerable Software and Affected Versions: Windows Network Load Balancing affected versions not specified Description: The issue is related to insufficient input validation in the Windows Network Load Balancing NLB component, allowing remote attackers to execute arbitrary code by...

Moderate: haproxy security update

The haproxy packages provide a reliable, high-performance network load balancer for TCP and HTTP-based applications. Security Fixes: haproxy: segfault DoS CVE-2023-0056 haproxy: request smuggling attack in HTTP/1 header parsing CVE-2023-25725 For more details about the security issues, including...

PT-2023-20847 · Unknown · Delight Nashorn Sandbox

Name of the Vulnerable Software and Affected Versions: delight-nashorn-sandbox versions 0.2.4 through 0.2.5 Description: The issue allows for sandbox escape when allowExitFunctions is set to false. The loadWithNewGlobal function can be used to invoke the exit and quit methods, leading to the exit...