CVE-2017-9295

XXE vulnerability in Hitachi Device Manager before 8.5.2-01 and Hitachi Replication Manager before 8.5.2-00 allows authenticated remote users to read arbitrary files...

CVE-2017-9298

Cross-site scripting vulnerability in Hitachi Device Manager before 8.5.2-01 and Hitachi Replication Manager before 8.5.2-00 allows authenticated remote users to execute arbitrary JavaScript code...

CVE-2017-9295

XXE vulnerability in Hitachi Device Manager before 8.5.2-01 and Hitachi Replication Manager before 8.5.2-00 allows authenticated remote users to read arbitrary files...

Xxe

XXE vulnerability in Hitachi Device Manager before 8.5.2-01 and Hitachi Replication Manager before 8.5.2-00 allows authenticated remote users to read arbitrary files...

Cross site scripting

Cross-site scripting vulnerability in Hitachi Device Manager before 8.5.2-01 and Hitachi Replication Manager before 8.5.2-00 allows authenticated remote users to execute arbitrary JavaScript code...

CVE-2017-9298

Cross-site scripting vulnerability in Hitachi Device Manager before 8.5.2-01 and Hitachi Replication Manager before 8.5.2-00 allows authenticated remote users to execute arbitrary JavaScript code...

CVE-2017-9295

CVE-2017-9295 describes an XML External Entity (XXE) information disclosure affecting Hitachi Device Manager (before 8.5.2-01) and Hitachi Replication Manager (before 8.5.2-00). The vulnerability allows authenticated remote users to read arbitrary files due to a flaw in how XML input is processed...

CVE-2017-9298

CVE-2017-9298 is a cross-site scripting vulnerability in Hitachi Device Manager prior to 8.5.2-01 and Hitachi Replication Manager prior to 8.5.2-00. It enables authenticated remote users to execute arbitrary JavaScript in the affected web interfaces. Supported references list the affected product...

CVE-2017-9295: Improper Restriction of XML External Entity Reference

XXE vulnerability in Hitachi Device Manager before 8.5.2-01 and Hitachi Replication Manager before 8.5.2-00 allows authenticated remote users to read arbitrary files...

PT-2017-18830

Name of the Vulnerable Software and Affected Versions Hitachi Device Manager versions prior to 8.5.2-01 Hitachi Replication Manager versions prior to 8.5.2-00 Description A cross-site scripting issue allows authenticated remote users to execute arbitrary JavaScript code. Recommendations For Hitac...

PT-2017-18827

Name of the Vulnerable Software and Affected Versions Hitachi Device Manager versions prior to 8.5.2-01 Hitachi Replication Manager versions prior to 8.5.2-00 Description The issue allows authenticated remote users to read arbitrary files due to an XXE vulnerability. Recommendations For Hitachi...

CVE-2017-9298: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in Hitachi Device Manager before 8.5.2-01 and Hitachi Replication Manager before 8.5.2-00 allows authenticated remote users to execute arbitrary JavaScript code...

Scale-Out Backup Repository Free Space Calculation

Challenge Jobs running to a Scale-Out Backup Repository report "No scale-out repository extents have sufficient disk space to store the backup file, " even though some of the extents have adequate free space. Cause At the beginning of a job, if no other jobs are running, Veeam Backup & Replicatio...

Release Notes for Veeam Backup & Replication 9.5 Update 2

More Recent Version Available Please find the latest version of Veeam Backup & Replication here: Veeam Downloads - Latest Version Challenge Release Notes for Veeam Backup & Replication 9.5 Update 2 Cause Please confirm you are running version 9.5.0.580, 9.5.0.711, 9.5.0.802, or 9.5.0.823 prior to...

Not all Cloud Solutions are Created Equal

The errant swing of a backhoe in a New Jersey field cuts through a major cloud provider's underground cable, bringing activity along the U.S. Eastern Seaboard to a crashing halt. The outage hits some businesses hard. Every minute of downtime means thousands of dollars of lost revenue and hordes o...

EulerOS 2.0 SP1 : mariadb (EulerOS-SA-2016-1035)

According to the versions of the mariadb packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - MariaDB is a community developed branch of MySQL. MariaDB is a multi-user, multi-threaded SQL database server. It is a client/server...

PT-2017-15355

Name of the Vulnerable Software and Affected Versions Juniper Networks NorthStar Controller Application versions prior to 2.1.0 Service Pack 1 Description An information disclosure issue may allow an unprivileged, authenticated, network-based attacker to replicate the underlying Junos OS VM and a...

Fedora 24 : php-pear-CAS (2017-d9d620366e)

Changes in version 1.3.5 - Security Fixes : - Fix possible authentication bypass in validateCAS20 228 Gregory Boddin - Bug Fixes : - Fix file permissions non-executable 177 Remi Collet - Fixed translations Greek and Japanese 192 ikari7789 - Fix errors under phpdbg 204 MasonM - Fix logout...

Failed logon event generated by Veeam ONE on Windows computers

Challenge Repeated audit events for failed logon with bad username or password occur on Hyper V hosts and in Veeam Backup & Replication environment. The events appear to be initiated by Veeam ONE service account. Cause The behavior is described in this Microsoft KB article. Solution Behavior by...

CentOS 7 : 389-ds-base (CESA-2017:0920)

An update for 389-ds-base is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...