2349 matches found
CISA Releases Secure by Demand Guidance
Today, CISA and the Federal Bureau of Investigation FBI have released Secure by Demand Guide: How Software Customers Can Drive a Secure Technology Ecosystem to help organizations drive a secure technology ecosystem by ensuring their software manufacturers prioritize secure technology from the...
CVE-2024-40787
CVE-2024-40787 is a local, low-privilege impact issue in Apple platforms where an attacker could bypass internet permission prompts. The root cause involves the handling of user consent prompts, allowing a Shortcut to circumvent Internet permission requirements. Affected products/versions include...
OPENSUSE-SU-2024:0220-1 Security update for caddy
This update for caddy fixes the following issues: - Update to version 2.8.4: cmd: fix regression in auto-detect of Caddyfile 6362 Tag v2.8.3 was mistakenly made on the v2.8.2 commit and is skipped - Update to version 2.8.2: cmd: fix auto-detetction of .caddyfile extension 6356 caddyhttp: properly...
From Top Dogs to Unified Pack
Embracing a consolidated security ecosystem Cybersecurity is as unpredictable as it is rewarding. Each day often presents a new set of challenges and responsibilities, particularly as organizations accelerate digital transformation efforts. This means you and your cyber team may find yourselves...
PT-2024-10477 · Ibm · Ibm Engineering Requirements Management Doors Next
Name of the Vulnerable Software and Affected Versions: IBM Engineering Requirements Management DOORS Next versions 7.0.2 and 7.0.3 Description: IBM Engineering Requirements Management DOORS Next is susceptible to a race condition that can allow a remote attacker to bypass security restrictions an...
IBM Engineering Requirements Management DOORS Web Access XML External Entity Injection Vulnerability
IBM Engineering Requirements Management DOORS Web Access is an engineering requirements management software from International Business Machines IBM. An XML external entity injection vulnerability exists in IBM Engineering Requirements Management DOORS Web Access version 9.7.2.8, which can be...
CVE-2023-50304
IBM Engineering Requirements Management DOORS Web Access 9.7.2.8 is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 273335...
CVE-2023-50304 IBM Engineering Requirements Management DOORS XML external entity injection
IBM Engineering Requirements Management DOORS Web Access 9.7.2.8 is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 273335...
CVE-2023-50304
CVE-2023-50304 affects IBM Engineering Requirements Management DOORS Web Access 9.7.2.8, where an XML External Entity (XXE) vulnerability exists in XML processing. The underlying issue could allow a remote attacker to expose sensitive information or cause memory/resource consumption. Public docum...
CVE-2023-50304 IBM Engineering Requirements Management DOORS XML external entity injection
IBM Engineering Requirements Management DOORS Web Access 9.7.2.8 is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 273335...
CVE-2023-50304: Improper Restriction of XML External Entity Reference
IBM Engineering Requirements Management DOORS Web Access 9.7.2.8 is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 273335...
Kaspersky Exits U.S. Market Following Commerce Department Ban
Russian security vendor Kaspersky has said it's exiting the U.S. market nearly a month after the Commerce Department announced a ban on the sale of its software in the country citing a national security risk. News of the closure was first reported by journalist Kim Zetter. The company is expected...
RHEL 9 : kernel-rt (RHSA-2024:4554)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:4554 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirement...
Exploit for Race Condition in Openbsd Openssh
CVE-2024-6387 Installation et Exécution du script 💻 Pré...
FAQ: Fail-To-Wire Feature in CloudBridge 2000 and 3000 Appliances
This article is an FAQ on the Fail-To-Wire FTW functionality found in the new Citrix CloudBridge 2000 and Citrix CloudBridge 3000 appliances. Q: What is the supported software release? A : The FTW feature is supported with the following software releases: SVM build: NS 10.0.72.5007 CloudBridge...
How to Enable and Configure the Windows DumpConfigurator Utility to Capture System Dumps
This article describes how to enable and configure the Windows DumpConfigurator Utility to Capture System Dumps. Requirements This utility supports Windows 2003, Windows 2003 64-bit, Windows 2008, Windows 2008 64-bit, and Windows 2008 R2.To download this DumpConfigurator Utility, click here...
How to Configure StoreFront and Smart Card Authentication for Internal Users using Stores
This article describes how to configure Citrix StoreFront 2.0 and Smart Card authentication using Gemalto .NET cards against stores for internal users. Requirements The following components are needed to allow users connectthrough Smart Card to StoreFront: Citrix StoreFront 2.x Citrix Receiver fo...
Error 2320: "No value could be found for LegacyLocaluserNameAndPassword" when opening ICA connection
The following message is displayed when opening an ICA connection: Error 2320: Citrix Receiver configuration manager: No value could be found for LegacyLocaluserNameAndPassword that satisfies all lockdown requirements. The lockdown requirements in force might be conflicting...
How to Replace a Network Interface Card in a XenServer Host
This article describes the procedure to replace a Network Interface Card NIC in a XenServer Host. For example, the procedure can be used to replace a faulty NIC. Requirements The XenServer host must be standalone and not joined to a resource pool. Replacing the NIC used as management interface...