Adobe Framemaker 缓冲区错误漏洞

Adobe FrameMaker is a document processing program used to write and edit large or complex documents, including structured documents.An out-of-bounds write vulnerability exists in Adobe Framemaker 2019 Update 8, 2020 Release Update 2 and earlier versions. An attacker could exploit this vulnerabili...

Adobe Framemaker 缓冲区错误漏洞

Adobe FrameMaker is a document processing program used to write and edit large or complex documents, including structured documents.An out-of-bounds read vulnerability exists in Adobe Framemaker 2019 Update 8, 2020 Release Update 2 and earlier versions. An attacker could exploit this vulnerabilit...

Adobe Framemaker 缓冲区错误漏洞

Adobe FrameMaker is a document processing program for writing and editing large or complex documents, including structured documents. A memory out-of-bounds access vulnerability exists in Adobe Framemaker 2019 Update 8, 2020 Release Update 2, and earlier versions. An attacker can exploit the...

Sql injection

MapService.svc in Hexagon GeoMedia WebMap 2020 before Update 2 aka 16.6.2.66 allows blind SQL Injection via the Id within sourceItems parameter to the GetMap method...

CVE-2021-37749

The CVE-2021-37749 entry concerns Hexagon GeoMedia WebMap 2020 prior to Update 2 (16.6.2.66). A vulnerability in MapService.svc allows blind SQL injection via the Id (within sourceItems) parameter to the GetMap method. CVSSv3.1 base score 9.8 (CRITICAL) with network attack vector, no user interac...

CVE-2021-37749

MapService.svc in Hexagon GeoMedia WebMap 2020 before Update 2 aka 16.6.2.66 allows blind SQL Injection via the Id within sourceItems parameter to the GetMap method...

Virtuozzo Automator 7.0 Update 2 Hotfix 15 (VA MN 7.0.2-680, VA Agent 7.0.2-407)

The Hotfix 15 for Virtuozzo Automator 7.0.2 provides stability and usability fixes. Vulnerability id: PVA-37501 pvaagentd could be killed by SIGSEGV. Vulnerability id: PVA-37697, PVA-37707 Coalesce operation could be performed on an outdated cached list of backups. Vulnerability id: PVA-37537 Fre...

CVE-2020-24815

A Server-Side Request Forgery SSRF affecting the PDF generation in MicroStrategy 10.4, 2019 before Update 6, and 2020 before Update 2 allows authenticated users to access the content of internal network resources or leak files from the local system via HTML containers embedded in a...

Server side request forgery (ssrf)

A Server-Side Request Forgery SSRF affecting the PDF generation in MicroStrategy 10.4, 2019 before Update 6, and 2020 before Update 2 allows authenticated users to access the content of internal network resources or leak files from the local system via HTML containers embedded in a...

Product update: Virtuozzo Automator 7.0 Update 2 Hotfix 11 (VA MN: 7.0.2-649, VA Agent: 7.0.2-372)

Hotfix 11 for Virtuozzo Automator 7.0.2 provides stability and usability fixes. Vulnerability id: PVA-37488 Changing VM's OS distribution via API calls could reset the 'cpulimit' and 'iolimit' values. Vulnerability id: PVA-37495 VA Agent did not return the 'counterioused' value. Vulnerability id:...

Product release: Virtuozzo Infrastructure Platform 3.5 Update 2 Hotfix 2 (3.5.2-39)

This update provides a stability fix for the metadata service. Vulnerability id: VSTOR-32856 Unreadable files may be created when using erasure coding during the upgrade from version 3.0 to 3.5...

Product release: Virtuozzo Infrastructure Platform 3.5 Update 2 Hotfix 1 (3.5.2-35)

This update provides a stability fix for the metadata service. Vulnerability id: VSTOR-30452 The metadata service may restart after the upgrade from version 3.0 to 3.5...

Product update: Virtuozzo Automator 7.0 Update 2 Hotfix 9 (VA MN: 7.0.2-645, VA Agent: 7.0.2-364)

Hotfix 9 for Virtuozzo Automator 7.0.2 provides stability and usability fixes. Vulnerability id: PVA-35779 Virtuozzo Automator warns about low disk space on SSDs with storage cache and journals. Vulnerability id: PVA-37393 VA agent can fully load MDS on nodes with lots of containers on Virtuozzo...

About the security content of macOS Mojave 10.14.6 Supplemental Update 2, Security Update 2019-005 High Sierra, and Security Update 2019-005 Sierra

About the security content of macOS Mojave 10.14.6 Supplemental Update 2, Security Update 2019-005 High Sierra, and Security Update 2019-005 Sierra This document describes the security content of macOS Mojave 10.14.6 Supplemental Update 2, Security Update 2019-005 High Sierra, and Security Update...

Product update: Virtuozzo Infrastructure Platform 3.0 Update 2 (3.0.2-46)

This update provides a new feature as well as fixes and improvements. Vulnerability id: VSTOR-26019 Update Decreased the free space required on the "/boot" partition from 200 MB to 150 MB. Vulnerability id: VSTOR-26041 Admin panel Management node backup would fail if anaconda-ks.cfg was missing...

Release Information for Veeam Availability for Nutanix AHV 1.0 Update 2

Challenge Release Notes for Veeam Availability for Nutanix AHV 1.0 Update 2. Solution Veeam Availability for Nutanix AHV 1.0 Update 2 includes fixes for series of bugs and issues. The most critical ones are listed below. Improved backup performance in some cases due to not enough queue depth on...

Default credentials

AVEVA Wonderware System Platform 2017 Update 2 and prior uses an ArchestrA network user account for authentication of system processes and inter-node communications. A user with low privileges could make use of an API to obtain the credentials for this account...

Product update: Virtuozzo Automator 7.0 Update 2 Hotfix 7 (VA MN: 7.0.2-617, VA Agent: 7.0.2-329)

The hotfix for Virtuozzo Automator 7.0.2 provides stability fixes. Vulnerability id: PVA-36493, PVA-37325 Backups created with CLI were not listed in the web-based control panel. Vulnerability id: PVA-37287 Fixed behavior when alerts could be triggered before set limit was exceeded. Vulnerability...

Insufficient Input Validation in Bleach module in Intel® Distribution for Python (IDP) version IDP 2018 Update 2 potentially allows an unprivileged user to bypass URI sanitization and cause a Denial of Service via local vector

Summary: Insufficient Input Validation in Bleach module in Intel® Distribution for Python IDP version IDP 2018 Update 2 potentially allows an unprivileged user to bypass URI sanitization and cause a Denial of Service via local vector. Description: A vulnerable version of the Mozilla Bleach librar...

Product update: Virtuozzo Automator 7.0 Update 2 Hotfix 5 (VA MN: 7.0.2-597, VA Agent: 7.0.2-320)

This hotfix for Virtuozzo Automator 7.0.2 provides a new feature as well as stability and usability bug fixes. Vulnerability id: PVA-35645 Systemd reported the 'va-agent/va-mn' service as started before it had been initialized. Vulnerability id: PVA-37260 Scheduled backup of a large VM could fail...