1447 matches found
Citrix HTML5 Receiver No Longer Works on Chrome Version 30
When accessing StoreFront from a Chrome browser while trying to launch a published resource using Receiver for HTML5, the following error appears: Cannot reach server. Check your network connection or contact your help desk for assistance...
Pass-through Authentication Might Fail Starting Publish Desktops with StoreFront and Desktop Viewer
Pass-through authentication to StoreFront does not work when starting XenApp published desktops. When users log on to the client workstation with Windows Active Directory AD credentials, the Receiver starts and successfully passes the user credentials to the configured Store and displays availabl...
Error: "Could Not Logon. Verify your credentials and network connectivity" and "Service unavailable"
Application enumeration fails when the StoreFront server is connected through Access Gateway Enterprise Edition and iOS Receiver 5.7.x for iPad/iPhone. The following error messages are displayed: “Could Not Logon. Verify your credentials and network connectivity.” "Could Not Logon. Service...
Firefox Users Cannot Access Desktops or Applications from Receiver for Websites
Windows, Mac OS X, and Linux users cannot access desktops and applications from Receiver for websites using Mozilla Firefox 26 or later. When a Firefox user clicks an icon, the Receiver for website displays a spinner for a few seconds, but the desktop or application does not start and no error...
Error: "Cannot upgrade Citrix StoreFront with Receiver for HTML5" when upgrading to StoreFront 2.x
The following error is generated whenupgrading to StoreFront 2.x: "Error Cannot upgrade Storefront for Receiver for HTML5 Use the Citrix HTML5 HDX Engine Configuration tool to remove Receiver from HTML5 from all currently configured Receiver for Web sites. Then, uninstall Receiver for HTML5 and t...
ROS-20240704-06
Vulnerability of logback receiver component of logging library logback is related to recovery of inaccurate data in memory inaccurate data. Exploitation of the vulnerability could allow an attacker to cause a denial of service...
CVE-2024-6470
A vulnerability was found in playSMS 1.4.3. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /index.php?app=main&inc=featureinboxgroup&op=list of the component Template Handler. The manipulation of the argument Receiver Number with the input id...
CVE-2024-6470 playSMS Template injection
A vulnerability was found in playSMS 1.4.3. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /index.php?app=main&inc=featureinboxgroup&op=list of the component Template Handler. The manipulation of the argument Receiver Number with the input id...
CVE-2024-34601
Improper verification of intent by broadcast receiver vulnerability in GalaxyStore prior to version 4.5.81.0 allows local attackers to launch unexported activities of GalaxyStore...
CVE-2024-34601
Improper verification of intent by broadcast receiver vulnerability in GalaxyStore prior to version 4.5.81.0 allows local attackers to launch unexported activities of GalaxyStore...
CVE-2024-34600
Improper verification of intent by broadcast receiver vulnerability in Samsung Flow prior to version 4.9.13.0 allows local attackers to copy image files to external storage...
CVE-2024-34601
Improper verification of intent by broadcast receiver vulnerability in GalaxyStore prior to version 4.5.81.0 allows local attackers to launch unexported activities of GalaxyStore...
CVE-2024-34601
CVE-2024-34601 describes an issue in GalaxyStore before version 4.5.81.0 where the app fails to verify intent in a broadcast receiver, allowing a local attacker to launch unexported activities of GalaxyStore. The NVD/Red Hat/CVE records confirm a local-exploitation vector with low privileges requ...
CVE-2024-34600
Improper verification of intent by broadcast receiver vulnerability in Samsung Flow prior to version 4.9.13.0 allows local attackers to copy image files to external storage...
PT-2024-26016 · Samsung · Galaxy Store
Name of the Vulnerable Software and Affected Versions: GalaxyStore versions prior to 4.5.81.0 Description: The issue is related to improper verification of intent by a broadcast receiver in GalaxyStore, allowing local attackers to launch unexported activities of GalaxyStore. Recommendations: For...
PT-2024-26015 · Samsung · Samsung Flow
Name of the Vulnerable Software and Affected Versions: Samsung Flow versions prior to 4.9.13.0 Description: The issue is related to improper verification of intent by a broadcast receiver in Samsung Flow, allowing local attackers to copy image files to external storage. Recommendations: For...
Storefront - Event ID 3005 - The request queue limit of the session is exceeded
When a user attempts to enumerate using the StoreWeb URL in a browser, not all icons are not enumerated. This can also occasionally result in enumeration failure and an error stating "Cannot complete your request" during enumeration. On the Storefront server, Windows Event Viewer Applications and...
Paradox IP150 Internet Module 1.40.00 Cross Site Request Forgery
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Paradox IP150 Internet Module Cross-Site Request Forgery Link: https://github.com/sbaresearch/advisories/tree/public/2024/SBA-ADV-20240321-01ParadoxCrossSiteRequestForgery Vulnerability Overview The Paradox IP150 Internet Module in version 1.40.00 i...
Denial Of Service (DoS)
ch.qos.logback:logback-classic is vulnerable to Denial Of Service DoS. The vulnerability is due to the readObject method in the LoggingEventVO class which fails to check the length of an argument array during deserialization. An attacker could send crafted data, resulting in Denial of Service DoS...