PT-2019-1680

Name of the Vulnerable Software and Affected Versions Django versions 1.11.x through 1.11.17 Django versions 2.0.x through 2.0.9 Django versions 2.1.x through 2.1.4 Description The issue is related to insufficient neutralization of special elements in output used by a downstream component. This c...

USN-3830-1 openjdk-8, openjdk-lts regression

USN-3804-1 fixed vulnerabilities in OpenJDK. Unfortunately, that update introduced a regression when validating JAR files that prevented Java applications from finding classes in some situations. This update fixes the problem. We apologize for the inconvenience...

Event Viewer on PVS servers reports error: "DbAccess error: <Record was not found <-31754> (in DiskLocatorGetByDiskId() called from SSProtocolLogin.ccp:945)"

Event Viewer on PVS servers is reporting the error: "DbAccess error: in DiskLocatorGetByDiskId called from SSProtocolLogin.ccp:945"...

PYSEC-2018-45

It was noticed an XSS in certain 404 pages that could be exploited to perform an XSS attack. Chrome will detect this as a reflected XSS attempt and prevent the page from loading. Firefox and other browsers don't, and are vulnerable to this attack. Mitigation: The fix for this is to upgrade to...

Error: "404 - File or directory not found" when launching new stores created on StoreFront

New stores created on StoreFront are showing error: "404 - File or directory not found" at launch. Old stores can be launched properly...

Error shown on the WEM Agents: "An error occurred while building your environment. Agent processing will now stop."

Following error is shown on the right lower corner of the screen on the WEM Agentsevery time the VUEMUIAgent is launched or refreshed: Event Viewer on the WEM Agents reports the following error under Norskale Agent Service when the issue occurs: The "WEM Agent Session Log" shows the following...

CVE-2017-2613

jenkins before versions 2.44, 2.32.2 is vulnerable to a user creation CSRF using GET by admins. While this user record was only retained until restart in most cases, administrators' web browsers could be manipulated to create a large number of user records SECURITY-406. Accessing these URLs now n...

LiteCart Denial of Service Vulnerability

LiteCart is a free PHP-based e-commerce platform. The platform provides product categorization, payment checkout and search engine and other functions. A security vulnerability exists in LiteCart version 2.1.2, which originates from the fact that the publichtml/logs/notfound.log file can be...

XenMobile: 500 Server Internal Error when uploading Android APK File to XMS

When trying to upload an APK app to the XMS console using Internet Explorer 11, we are getting a 500 Server Internal Error Looking into the error logs. The previous version x.x.x.0 works fine however upgrading the version gives - 500 Server Internal Error...

Cannot power on CachePoint, "Cannot open the disk 'UnideskLayers/..."

After host or storage failure, you may find that one or more CachePoints CP will not longer boot. The error message given by vCenter is: An error was received from the ESX host while powering on VM CP01. Cannot open the disk 'UnideskLayers/User/Desktop3/P14407081000000d8.B0.R1.V0-000001.vmdk' or...

WordPress Plugin Ultimate Product Catalogue 4.2.2 - SQL Injection

Exploit Title: Ultimate Product Catalogue 4.2.2 Sql Injection – Plugin WordPress – Sql Injection Exploit Author: Lenon Leite Vendor Homepage: https://wordpress.org/plugins/ultimate-product-catalogue/ Software Link: https://wordpress.org/plugins/ultimate-product-catalogue/ Contact:...

WordPress Plugin Ultimate Product Catalogue 4.2.2 - SQL Injection

WordPress Plugin Ultimate Product Catalogue 4.2.2 - SQL Injection Exploit Title: Ultimate Product Catalogue 4.2.2 Sql Injection – Plugin WordPress – Sql Injection Exploit Author: Lenon Leite Vendor Homepage: https://wordpress.org/plugins/ultimate-product-catalogue/ Software Link:...

CVE-2016-7366

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2016. Notes: none...

StoreFront 3.5 to 3.8 upgrade fails.

In the MSI logs we get following error: An error occurred creating the configuration section handler for citrix.deliveryservices/protocolTransitionSettings: Could not load file or assembly 'Citrix.DeliveryServices.ProtocolTransition.Configuration, Version=2.6.0.0, OR An error occurred creating th...

An Unexpected MAPI Error Occurred - Catalog Not Found

When trying to promote to the vdisk, it says an unexpected MAPI error occured...

Error: "Cannot establish a connection to the database because the server cannot be found. Please..." on PVS console

Error when attempting to access the PVS console: "Cannot establish a connection to the database because the server cannot be found. Please check your database connection settings in the registry and the network path to your server...

Error: "Profile Installation Failed A Network Error Has Occurred" during XenMobile iOS Enrollment

XenMobile iOS enrollment getting error "Profile Installation Failed A network error has occurred" iOS console logs show: Xens-iPhone profiled148 : Error MC: URL request to https://mdmxms.domain.net:8443/zdm/scep/sp-078435ec-0aed-4ba0-bb3d-be665934be12?operation=GetCACert&message=APPLEPROFILE...

Secure Web unable to access Internal Links with Split Tunnel set to ON via NetScaler Gateway

While trying to access Internal Links or external links with Split Tunnel ON, gets error message as: 'Could not find hostname'...

WordPress Plugin WP Private Messages 1.0.1 - SQL Injection (1)

WordPress Plugin WP Private Messages 1.0.1 - SQL Injection 1 Exploit Title: WP Private Messages 1.0.1 – Plugin WordPress – Sql Injection Exploit Author: Lenon Leite Vendor Homepage: https://wordpress.org/plugins/wp-private-messages/ Software Link: https://wordpress.org/plugins/wp-private-messages...

XenMobile user shows as "Anonymous" in XenMobile Admin Console

Within the XenMobile console, under the user column, few users started showning as anonymous. In zdm.logs we might see:User '[email protected]' not found or is disabled. Switching to anonymous mode...