29426 matches found
Vulnerability in License Server and Snap-in for Desktop Studio, aka Heartbleed
Secure Configuration of Licensing Heartbleed Update In response to the recent Heartbleed vulnerability in OpenSSL CVE-2014-0160 Citrix released a security advisory, CTX140605, advising customers of its potential effects on some Citrix Licensing components. As part of the Citrix response to this...
IPC Error when Exporting the vDisk on Provisioning Services
IPC Error when exporting vDisk on Provisioning Services PVS. PVS Console log includes thefollowing errors: ERROR EnterpriseAccess.HandlerBase - PvsStatusExceptionHandlerERROR EnterpriseAccess.HandlerBase - return code: 184ERROR EnterpriseAccess.HandlerBase - exception type: PvsStatusExceptionERRO...
Using Veeam Backup Software on Provisioning Services Server
While running Veeam software to backup Provisioning Services PVS servers, one of the PVS servers display status as Down in PVS server console regardless of whether the stream service is running. The following screen shot shows the server status in PVS console. The following screen shot shows the...
How to Prepare Provisioning Services 7.x Master Target Device to be Captured on a vDisk
This article provides the recommended procedure for preparing Provisioning Services 7.x Master Target Device to be captured on a vDisk...
Adding Virtual Machines Created by Machine Creation Services to New Catalog
After deleting the host connection in XenDesktop, desktops created using Machine Creation Service MCS are not visible in the Catalog...
Provisioning Services Console Error is Displayed During KMS Activation
When changing a virtual disk vDisk in private mode to KMS activation and then changing the mode to standard image modeor changing the activation procedure to KMS for a vDisk in standard image mode, the following error message appears, which can be seen in the console.log when in debug level or in...
The vulnerability of the.NET Core software component “Update Services” allows a hacker to gain access to read local files.
The vulnerability of the .NET Core software “Update Services” is related to an incorrect limitation on the path to the directory. Exploiting this vulnerability could allow a malicious actor to gain read access to local files...
Worldwide Support Services Delivery Guide - 2024
Worldwide Support Services Delivery Guide -2024 Information To our Citrix customers and partners, we want to thank you for choosing our products and services. Our goal is to ensure your success, and we have created thisWorldwide Support Services Delivery Guide to help you achieve just that. The...
The vulnerability of the WSDL query processor in the “Update Service” software allows a attacker to gain read access to local files.
The vulnerability of the WSDL query processor in the “Update Service” software is related to an incorrect limitation on the path name to the directory. Exploiting this vulnerability could allow a malicious actor to gain read access to local files...
The vulnerability of the Text Services Framework software interface in Windows operating systems, which allows a hacker to increase their privileges
The vulnerability of the Text Services Framework software interface in Windows operating systems is related to deficiencies in the authentication process. Exploiting this vulnerability can allow attackers to enhance their privileges...
CVE-2024-28872
The TLS certificate validation code is flawed. An attacker can obtain a TLS certificate from the Stork server and use it to connect to the Stork agent. Once this connection is established with the valid certificate, the attacker can send malicious commands to a monitored service Kea or BIND 9,...
Authorization Bypass
alextselegidis/easyappointments is vulnerable to Authorization Bypass. The vulnerability is due to insufficient access control checks on the GET, PUT, and DELETE endpoints for /services/serviceId, allowing low privileged users to fetch, modify, or delete services of any user, including admin...
Rockwell Automation FactoryTalk System Services and Policy Manager
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 6.0 ATTENTION : Low attack complexity Vendor : Rockwell Automation Equipment : FactoryTalk System Services and Policy Manager Vulnerabilities : Improper Privilege Management 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow an...
EcoStruxure Foxboro DCS Core Control Services Buffer Error Vulnerability
Schneider Electric EcoStruxure Foxboro DCS is an innovative fault-tolerant, highly available control component from Schneider Electric France. A buffer error vulnerability exists in EcoStruxure Foxboro DCS Core Control Services 9.8 and prior versions, which stems from the presence of an...
Schneider Electric EcoStruxure Foxboro DCS Input Validation Error Vulnerability
Schneider Electric EcoStruxure Foxboro DCS is an innovative fault-tolerant, highly available control component from Schneider Electric France. An input validation error vulnerability exists in Schneider Electric EcoStruxure Foxboro DCS Core Control Services version 9.8 and earlier, which stems fr...
CVE-2024-21417
Windows Text Services Framework Elevation of Privilege Vulnerability...
CVE-2024-21417
Windows Text Services Framework Elevation of Privilege Vulnerability...
The vulnerabilities of the Analyst component, Web Player, and Automation Services of the Spotfire Analyst platform, as well as the Spotfire Server and AWS Spotfire for AWS Marketplace analytical platforms, allow attackers to execute arbitrary code.
The vulnerabilities of the Analyst component, Web Player, and Automation Services of the Spotfire Analyst platform, as well as the Spotfire Server and the analytics platform based on cloud services AWS Spotfire for AWS Marketplace, are related to insufficient validation of input data. Exploiting...
