CVE-2020-8258

Improper privilege management on services run by Citrix Gateway Plug-in for Windows, versions before and including 13.0-61.48 and 12.1-58.15, allows an attacker to modify arbitrary files...

CVE-2020-8257

Improper privilege management on services run by Citrix Gateway Plug-in for Windows, versions before and including 13.0-61.48 and 12.1-58.15, lead to privilege escalation attacks...

CVE-2020-8258

Improper privilege management on services run by Citrix Gateway Plug-in for Windows, versions before and including 13.0-61.48 and 12.1-58.15, allows an attacker to modify arbitrary files...

CVE-2020-8257

Improper privilege management on services run by Citrix Gateway Plug-in for Windows, versions before and including 13.0-61.48 and 12.1-58.15, lead to privilege escalation attacks...

Input validation

Improper privilege management on services run by Citrix Gateway Plug-in for Windows, versions before and including 13.0-61.48 and 12.1-58.15, lead to privilege escalation attacks...

CVE-2020-8257

CVE-2020-8257 relates to Citrix Gateway Plug-in for Windows. Affected versions before 13.0-64.35 and 12.1-59.16 (including 12.1-FIPS 55.190) have improper privilege management enabling local privilege escalation to SYSTEM. Citrix CTX282684 fixes: upgrade to Citrix Gateway Plug-in 13.0-64.35+, 12....

CVE-2020-8257: Improper Privilege Management

Improper privilege management on services run by Citrix Gateway Plug-in for Windows, versions before and including 13.0-61.48 and 12.1-58.15, lead to privilege escalation attacks...

CVE-2020-8258: Improper Privilege Management

Improper privilege management on services run by Citrix Gateway Plug-in for Windows, versions before and including 13.0-61.48 and 12.1-58.15, allows an attacker to modify arbitrary files...

Apache Traffic Server Information Disclosure Vulnerability

Apache Traffic Server ATS is the United States Apache Apache Software Foundation's set of scalable HTTP proxy and caching server. An information disclosure vulnerability exists in the Apache Traffic Server product, which can be exploited by a local attacker to read memory fragments and obtain...

CVE-2020-9115

ManageOne versions 6.5.1.1.B010, 6.5.1.1.B020, 6.5.1.1.B030, 6.5.1.1.B040, ,6.5.1.1.B050, 8.0.0 and 8.0.1 have a command injection vulnerability. An attacker with high privileges may exploit this vulnerability through some operations on the plug-in component. Due to insufficient input validation ...

Command injection

ManageOne versions 6.5.1.1.B010, 6.5.1.1.B020, 6.5.1.1.B030, 6.5.1.1.B040, ,6.5.1.1.B050, 8.0.0 and 8.0.1 have a command injection vulnerability. An attacker with high privileges may exploit this vulnerability through some operations on the plug-in component. Due to insufficient input validation ...

Apache Cordova 安全漏洞

Apache Cordova is a camera plug-in for Android from the Apache Foundation. An access control error vulnerability exists in Cordova Android, which can be exploited by an attacker to gain access to photos taken externally using the application...

PT-2020-20507

Name of the Vulnerable Software and Affected Versions ManageOne versions 6.5.1.1.B010 through 6.5.1.1.B050, 8.0.0, 8.0.1 Description The issue is related to a command injection vulnerability. An attacker with high privileges may exploit this vulnerability through some operations on the plug-in...

CVE-2020-9115: Improper Input Validation

ManageOne versions 6.5.1.1.B010, 6.5.1.1.B020, 6.5.1.1.B030, 6.5.1.1.B040, ,6.5.1.1.B050, 8.0.0 and 8.0.1 have a command injection vulnerability. An attacker with high privileges may exploit this vulnerability through some operations on the plug-in component. Due to insufficient input validation ...

Hacked Security Software Used in Novel South Korean Supply-Chain Attack

The Lazarus cybercriminal group is using a novel supply-chain attack against visitors to websites operated by the South Korean government and financial firms, in order to deliver dropper malware that eventually plants a remote access trojan on victim’s PCs. The attacks use stolen digital...

CVE-2020-3588

A vulnerability in virtualization channel messaging in Cisco Webex Meetings Desktop App for Windows could allow a local attacker to execute arbitrary code on a targeted system. This vulnerability occurs when this app is deployed in a virtual desktop environment and using virtual environment...

CVE-2020-3588: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability in virtualization channel messaging in Cisco Webex Meetings Desktop App for Windows could allow a local attacker to execute arbitrary code on a targeted system. This vulnerability occurs when this app is deployed in a virtual desktop environment and using virtual environment...

Release Information for Fsas ETERNUS AF/DX Series Plug-In for Veeam Backup & Replication

This plug-in leverages the Veeam Universal Storage API, which enables storage OEMs to allow Veeam Backup & Replication integration to the arrays for backup and replication jobs. Requirements Before installing Fsas ETERNUS AF/DX Series Plug-In v1.3, ensure that you are running Veeam Backup &...

Citrix Gateway Plug-in for Windows 12.1.x < 12.1.59.16 / 13.0.x < 13.0.64.35 Multiple Vulnerabilities (CTX282684)

The version of Citrix Gateway Plug-in for Windows is 12.1 prior to 12.1.59.16 or 13.0 prior to 13.0.64.35. It is, therefore, affected by multiple vulnerabilities that, if exploited, can result in a local user escalating their privilege level to SYSTEM. Note that Nessus has not attempted to exploi...

PT-2020-20066

Name of the Vulnerable Software and Affected Versions Citrix Gateway Plug-in for Windows versions prior to 13.0-61.49 Citrix Gateway Plug-in for Windows versions prior to 12.1-58.16 Description The issue is related to improper privilege management on services run by the software, allowing an...