How to move VDA storage on Citrix Hypervisor

Move VDA disks to another storage on Citrix Hypervisor...

The vulnerability of the Active IQ Unified Manager, a tool for managing the state and performance of data storage systems, arises due to the lack of measures taken to protect the structure of web pages. This vulnerability allows attackers to perform cross-site scripting attacks.

The vulnerability of the Active IQ Unified Manager, a tool for managing system storage performance and status, exists due to the lack of protective measures taken to secure the website structure. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks...

The vulnerability of the Dell EMC Metro node’s data storage management system, related to improper code generation, allows a perpetrator to execute arbitrary commands.

The vulnerability of the Dell EMC Metro node’s data storage management system is related to improper code generation. Exploiting this vulnerability allows an attacker to execute arbitrary commands remotely...

January 19, 2023—KB5019275 (OS Builds 19042.2546, 19044.2546, and 19045.2546) Preview

None None...

Unpreparedness for upgrades contracts that SmartAccount inherits

Lines of code Vulnerability details Description The SmartAccount contract inherits many contracts, some of which have their own storage management logic. In case of an upgrade, adding new storage variables to the inherited contracts will colapse the storage layout. This will create an inconvenien...

CVE-2022-43230

Simple Cold Storage Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=bookings/viewdetails...

Sql injection

Simple Cold Storage Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /bookings/updatestatus.php...

Sql injection

Simple Cold Storage Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=bookings/viewdetails...

CVE-2022-43230: Improper Neutralization of Special Elements used in an SQL Command

Simple Cold Storage Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=bookings/viewdetails...

CVE-2022-43230

CVE-2022-43230 affects Simple Cold Storage Management System v1.0. The vulnerability is an SQL injection in the id parameter of /admin/?page=bookings/view_details. The attached metrics indicate CVSS v3.1 base score 7.2 (HIGH) with Network attack vector, Low attack complexity, Privileges required ...

CVE-2022-43229

CVE-2022-43229 pertains to a SQL injection vulnerability in Simple Cold Storage Management System v1.0, exploitable via the id parameter on the /bookings/update_status.php endpoint. The root cause is unauthenticated/non-validated input being used in a SQL query, enabling an attacker to view, modi...

CVE-2022-43229: Improper Neutralization of Special Elements used in an SQL Command

Simple Cold Storage Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /bookings/updatestatus.php...

CVE-2022-43230

Simple Cold Storage Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=bookings/viewdetails...

CVE-2022-43230

Simple Cold Storage Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=bookings/viewdetails...

CVE-2022-43229

Simple Cold Storage Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /bookings/updatestatus.php...

CVE-2022-43229

Simple Cold Storage Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /bookings/updatestatus.php...

CVE-2022-3587

A vulnerability was found in SourceCodester Simple Cold Storage Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component My Account. The manipulation of the argument First Name leads to cross site scripting. The attack...

Cross site scripting

A vulnerability was found in SourceCodester Simple Cold Storage Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component My Account. The manipulation of the argument First Name leads to cross site scripting. The attack...

CVE-2022-3582

A vulnerability has been found in SourceCodester Simple Cold Storage Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation of the argument change password leads to cross-site request forgery. The attack can be launched...

Cross site request forgery (csrf)

A vulnerability classified as problematic has been found in SourceCodester Simple Cold Storage Management System 1.0. Affected is an unknown function of the file /csms/?page=contactus of the component Contact Us. The manipulation leads to cross-site request forgery. It is possible to launch the...