Security update for roundcubemail (important)

This update to roundcubemail 1.1.4 fixes the following issues: - CVE-2015-8770: Path traversal vulnerability allowed code execution to remote authenticated users if they were also upload files to the same server through some other method boo962067 This update also contains all upstream fixes in...

Security update for roundcubemail (important)

This update to roundcubemail 1.0.8 fixes the following issues: - CVE-2015-8770: Path traversal vulnerability allowed code execution to remote authenticated users if they were also upload files to the same server through some other method boo962067 This update also contains all upstream fixes in...

Advantech WebAccess Security Restriction Bypass Vulnerability

WebAccess HMI/SCADA software provides remote control and management, allowing users to easily view and configure automation devices in facility management systems, power stations and building automation systems. A security vulnerability exists in Advantech WebAccess versions prior to 8.1, which c...

FAQ: Connection Leasing in XenApp/XenDesktop 7.6

Q: What is Connection leasing? A: It allows users to connect to recently used published applications or desktops launchedwithin the last 2 weeks or less during a site database failure using a combination of a license lease and cached information on the Delivery Controllers. The Delivery...

CVE-2015-4946

Rational LifeCycle Project Administration in Jazz Team Server in IBM Rational Collaborative Lifecycle Management CLM 3.x and 4.x before 4.0.7 IF9, 5.x before 5.0.2 IF9, and 6.x before 6.0.1; Rational Quality Manager RQM 3.x before 3.0.1.6 IF7, 4.x before 4.0.7 IF9, 5.x before 5.0.2 IF9, and 6.x...

CVE-2015-4946

Rational LifeCycle Project Administration in Jazz Team Server in IBM Rational Collaborative Lifecycle Management CLM 3.x and 4.x before 4.0.7 IF9, 5.x before 5.0.2 IF9, and 6.x before 6.0.1; Rational Quality Manager RQM 3.x before 3.0.1.6 IF7, 4.x before 4.0.7 IF9, 5.x before 5.0.2 IF9, and 6.x...

Design/Logic Flaw

Unspecified vulnerability in Jazz Team Server in Jazz Foundation in IBM Rational Collaborative Lifecycle Management CLM 3.x and 4.x before 4.0.7 IF8 and 5.x before 5.0.2 IF10; Rational Quality Manager RQM 2.x and 3.x before 3.0.1.6 IF7, 4.x before 4.0.7 IF8, and 5.x before 5.0.2 IF10; Rational Te...

CVE-2015-1971

Unspecified vulnerability in Jazz Team Server in Jazz Foundation in IBM Rational Collaborative Lifecycle Management CLM 3.x and 4.x before 4.0.7 IF8 and 5.x before 5.0.2 IF10; Rational Quality Manager RQM 2.x and 3.x before 3.0.1.6 IF7, 4.x before 4.0.7 IF8, and 5.x before 5.0.2 IF10; Rational Te...

PT-2016-3634

Name of the Vulnerable Software and Affected Versions IBM Rational Collaborative Lifecycle Management CLM versions 3.x through 4.0.7 IF8 and 5.x through 5.0.2 IF8 and versions prior to 6.0.1 IBM Rational Quality Manager RQM versions 3.x through 3.0.1.6 IF6 and 4.x through 4.0.7 IF8 and 5.x throug...

PT-2016-3589

Name of the Vulnerable Software and Affected Versions IBM Rational Collaborative Lifecycle Management CLM versions 3.x through 4.x before 4.0.7 IF8 IBM Rational Collaborative Lifecycle Management CLM versions 5.x before 5.0.2 IF10 Rational Quality Manager RQM versions 2.x through 3.x before 3.0.1...

PT-2016-3642

Name of the Vulnerable Software and Affected Versions Jazz Team Server in Jazz Foundation in IBM Rational Collaborative Lifecycle Management CLM versions 3.x through 4.0.7 IF8, 5.x through 5.0.2 IF8, and 6.x before 6.0.1 Rational Quality Manager RQM versions 3.x through 3.0.1.6 IF6, 4.x through...

CVE-2015-4962: Exposure of Sensitive Information to an Unauthorized Actor

Jazz Team Server in Jazz Foundation in IBM Rational Collaborative Lifecycle Management CLM 3.x and 4.x before 4.0.7 IF9, 5.x before 5.0.2 IF9, and 6.x before 6.0.1; Rational Quality Manager RQM 3.x before 3.0.1.6 IF7, 4.x before 4.0.7 IF9, 5.x before 5.0.2 IF9, and 6.x before 6.0.1; Rational Team...

PT-2016-3588

Name of the Vulnerable Software and Affected Versions IBM Rational Collaborative Lifecycle Management CLM versions 3.x through 4.0.7 IF8 and 5.x through 5.0.2 IF10 and 6.x through 6.0.0 IF3 Rational Quality Manager RQM versions 3.x through 3.0.1.5 IF6 and 4.x through 4.0.7 IF8 and 5.x through 5.0...

[SECURITY] Fedora 23 Update: bugzilla-4.4.10-1.fc23

Bugzilla is a popular bug tracking system used by multiple open source proj ects It requires a database engine installed - either MySQL, PostgreSQL or Oracl e. Without one of these database engines local or remote, Bugzilla will not work - see the Release Notes for details...

Nutanix Acropolis Hypervisor Support in XenApp/XenDesktop

The Nutanix Acropolis hypervisor running on Nutanix Acropolis Operating System AOS 4.6.1.x or later has been designated as Citrix Ready and is supported in XenApp and XenDesktop 7.9 or later as mentioned on theCitrix Ready Marketplaceand theNutanix Solutions for Citrix desktop and application...

Yahoo! Launches Free Web Application Security Scanner

Yahoo! has open-sourced Gryffin – a Web Application Security Scanner – in an aim to improve the safety of the Web for everyone. Currently in its beta, Project Gryffin has made available on Github under the BSD-style license that Yahoo! has been using for a number of its open-sourced projects...

Cisco AnyConnect Secure Mobility Client for Linux and Mac OS X Privilege Escalation Vulnerability

A vulnerability in the code responsible for the self-updating feature of Cisco AnyConnect Secure Mobility Client for Linux and the Cisco AnyConnect Secure Mobility Client for Mac OS X could allow an authenticated, local attacker to execute an arbitrary executable file of its choosing with...

Veeam Backup & Replication fails to connect to Linux server with an error about negotiation

Challenge When attempting to add a managed Linux server or edit a Linux repository one of the following errors occurs: Negotiation failed. The client and the server have no common key exchange algorithm. Copy Negotiation failed. The client and the server have no common encryption algorithm. Copy...

Cisco TelePresence Video Communication Server Expressway Arbitrary File Injection Vulnerability

A vulnerability in the command-line interface CLI of the Cisco TelePresence Video Communication Server VCS Expressway could allow an authenticated, local attacker to inject arbitrary arguments to a script on an affected system. The vulnerability is due to insufficient input validation of content ...

Cisco ASR 9000 Series Aggregation Services Routers tmp Files Denial of Service Vulnerability

A vulnerability in Cisco ASR 9000 Series Aggregation Services Routers could allow an authenticated, local attacker to produce excessive tmp/config files, causing the system to become unresponsive. The vulnerability is due to the abrupt closure of the user's vty sessions after the commit/end in...