Veeam Backup & Replication plug-in missing in vSphere HTML5 Web Client after upgrade to VMware vSphere 6.7

Challenge After installing Veeam 9.5 Update 3a and simultaneous upgrade of vSphere from 6.5 to 6.7 Veeam vSphere Web Client Plugin might stop working for vSphere HTML5 Web Client. However it is still operational in vSphere Flash/Flex Web Client. The issue is only reproducible in case the plugin w...

Microsoft Windows: Sign-in last interactive user automatically

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winsigninlastuser.nasl 11363 2018-09-12 13:46:05Z emoss $ Check value for Sign-in last interactive user automatically after a system-initiated restart Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...

CVE-2018-5528

Under certain conditions, TMM may restart and produce a core file while processing APM data on BIG-IP 13.0.1 or 13.1.0.4-13.1.0.7...

CVE-2018-5528

CVE-2018-5528 affects F5 BIG-IP TMM when processing BIG-IP APM data, potentially causing TMM restart and core file creation leading to a DoS. Vulnerable: BIG-IP APM/TMM on BIG-IP versions 13.0.1 and 13.1.0.4–13.1.0.7. Impact: temporary traffic processing disruption and device group failover durin...

Microsoft Windows: Prevent the computer from joining a homegroup

This policy setting specifies whether users can add computers to a homegroup. By default, users can add their computer to a homegroup on a private network. If you enable this policy setting, users cannot add computers to a homegroup. This policy setting does not affect other network sharing...

Servicing stack update for Windows 10, version 1803: June 26, 2018

None None...

Digisol DG-BR4000NG Buffer Overflow

Exploit Title: DIGISOL DG-BR4000NG - Buffer Overflow PoC Date 2018-06-24 Vendor Homepagea http://www.digisol.com Hardware Link httpswww.amazon.inDigisol-DG-BR4000NG-Wireless-Broadband-802-11ndpB00A19EHYK Version: DIGISOL DG-BR4000NG Wireless Router Category Hardware Exploit Author Adipta Basu...

Microsoft Windows: Configure registry policy processing (background processing)

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winnobackgroundpolicy.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for Configure registry policy processing:Do not apply during periodic background processing Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone...

Multiple Cisco Products NX-OS Software SNMP Denial of Service Vulnerabilities

Cisco Nexus 2000 Series Switches are products of Cisco Corporation.Cisco Nexus 2000 Series Switches are switch devices.Fabric Modules are switch matrix modules.NX-OS Software is a set of data center-grade operating system software for the switches.Simple Network Management Protocol SNMP input...

CVE-2018-0291

A vulnerability in the Simple Network Management Protocol SNMP input packet processor of Cisco NX-OS Software could allow an authenticated, remote attacker to cause the SNMP application on an affected device to restart unexpectedly. The vulnerability is due to improper validation of SNMP protocol...

CVE-2018-0291

Summary of CVE-2018-0291 : A vulnerability in the SNMP input packet processor of Cisco NX-OS Software allows an authenticated, remote attacker to cause the SNMP application to restart, potentially repeatedly, leading to a system-level DoS. The issue stems from improper validation of SNMP PDUs in ...

Cisco NX-OS Software Authenticated Simple Network Management Protocol Denial of Service Vulnerability

A vulnerability in the Simple Network Management Protocol SNMP input packet processor of Cisco NX-OS Software could allow an authenticated, remote attacker to cause the SNMP application on an affected device to restart unexpectedly. The vulnerability is due to improper validation of SNMP protocol...

Cisco Meeting Server Web Admin Interface Denial of Service Vulnerability

A vulnerability in the Web Admin Interface of Cisco Meeting Server could allow an authenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to insufficient validation of incoming HTTP requests. An attacker could exploit this vulnerability by sending a...

PT-2018-1853

Name of the Vulnerable Software and Affected Versions Cisco NX-OS Software versions prior to the fixed version Description A vulnerability in the Simple Network Management Protocol SNMP input packet processor could allow an authenticated, remote attacker to cause the SNMP application on an affect...

Security Bulletin: OPEN Source Apache Struts Vulnerabilities IBM Platform Cluster Manager Standard Edition, IBM Platform Cluster Manager Advanced Edition, and Platform HPC (CVE-2016-4003)

Summary Apache Struts is vulnerable to cross-site scripting, caused by improper validation of user-supplied input by the URLDecoder implementation. A remote attacker could exploit this vulnerability using a specially-crafted URL to execute script in a victim's Web browser within the security...

Security Bulletin: The Elastic Storage Server and the GPFS Storage Server are affected by a vulnerability in IBM Spectrum Scale (CVE-2017-1654)

Summary The Elastic Storage Server and the GPFS Storage Server are affected by a vulnerability in IBM Spectrum Scale that could allow a local unprivileged user access to information located in dump files. User data could be sent to IBM during service engagements. Vulnerability Details CVEID:...

Security Bulletin: Open Source GNU (glibc) vulnerability affects IBM SONAS (CVE-2017-1000366 )

Summary IBM SONAS is shipped with GNU glibc, for which a fix is available for a security vulnerability. Vulnerability Details A GNU local memory corruption vulnerability affects IBM SONAS. CVEID: CVE-2017-1000366 DESCRIPTION: Glibc could allow a local attacker to execute arbitrary code on the...

Security Bulletin: GNU C library (glibc) vulnerability affects IBM Security Privileged Identity Manager Virtual Appliance (CVE-2015-7547)

Summary A GNU C library glibc stack-based buffer overflow in getaddrinfo vulnerability affects IBM Security Privileged Identity Manager Virtual Appliance Vulnerability Details CVEID: CVE-2015-7547 DESCRIPTION: GNU C Library glibc is vulnerable to a stack-based buffer overflow, caused by improper...

Security Bulletin: GNU C library (glibc) vulnerability affects IBM Security Identity Manager Virtual Appliance (CVE-2015-7547)

Summary A GNU C library glibc stack-based buffer overflow in getaddrinfo vulnerability affects IBM Security Identity Manager Virtual Appliance Vulnerability Details CVEID: CVE-2015-7547 DESCRIPTION: GNU C Library glibc is vulnerable to a stack-based buffer overflow, caused by improper bounds...

Security Bulletin: GNU C library (glibc) vulnerability affects InfoSphere Guardium BM InfoSphere Guardium (CVE-2015-0235)

Summary GNU C library glibc vulnerability that has been referred to as GHOST affects IBM InfoSphere Guardium. Vulnerability Details CVEID: CVE-2015-0235 DESCRIPTION: The gethostbyname functions of the GNU C Library glibc are vulnerable to a buffer overflow. By sending a specially crafted, but val...