Design/Logic Flaw

ColdFusion versions Update 6 and earlier have an insecure inherited permissions of default installation directory vulnerability. Successful exploitation could lead to privilege escalation...

CVE-2019-8256

ColdFusion versions Update 6 and earlier have an insecure inherited permissions of default installation directory vulnerability. Successful exploitation could lead to privilege escalation...

CVE-2019-8256

Adobe ColdFusion is affected by CVE-2019-8256 due to insecure inherited permissions of the default installation directory, enabling privilege escalation. Public details across connected sources indicate affected versions include ColdFusion installations older than 2018u7 (e.g.,

Product update: Virtuozzo Infrastructure Platform 2.5 Update 6 (2.5.0-1642)

This update provides stability and usability fixes. Vulnerability id: VSTOR-9712, VSTOR-21601 Command-line tools improvements. Vulnerability id: VSTOR-21059 Fixed possible crash of vstorage-target-monitor on shutdown. Vulnerability id: VSTOR-21075 Automatic replication could stall in case some...

Veeam Management Pack 8.0 Update 6 cumulative patch for Veeam Backup & Replication monitoring

Challenge Veeam Management Pack 8.0 Update 6 cumulative patch for Veeam Backup & Replication monitoring. Cause Veeam Support has received quite enough customer feedback on issues related to MP for Veeam Backup & Replication provided as part of Veeam Management Pack for System Center. For example,...

Micro Focus Filr Path Traversal Vulnerability

Micro Focus Filr is a file access and sharing solution for businesses. A path traversal vulnerability exists in the web application component of Micro Focus Filr prior to version 3.0 Security Update 6. An attacker could exploit this vulnerability to download arbitrary files from the Filr server...

Privilege escalation

A local privilege escalation vulnerability in the famtd component of Micro Focus Filr 3.0 allows a local attacker authenticated as a low privilege user to escalate to root. This vulnerability affects all versions of Filr 3.x prior to Security Update 6...

CVE-2019-3474

A path traversal vulnerability in the web application component of Micro Focus Filr 3.x allows a remote attacker authenticated as a low privilege user to download arbitrary files from the Filr server. This vulnerability affects all versions of Filr 3.x prior to Security Update 6...

CVE-2019-3475

A local privilege escalation vulnerability in the famtd component of Micro Focus Filr 3.0 allows a local attacker authenticated as a low privilege user to escalate to root. This vulnerability affects all versions of Filr 3.x prior to Security Update 6...

CVE-2019-3474 Path traversal vulnerability in Filr web application

A path traversal vulnerability in the web application component of Micro Focus Filr 3.x allows a remote attacker authenticated as a low privilege user to download arbitrary files from the Filr server. This vulnerability affects all versions of Filr 3.x prior to Security Update 6...

CVE-2018-15961

Adobe ColdFusion versions July 12 release 2018.0.0.310739, Update 6 and earlier, and Update 14 and earlier have an unrestricted file upload vulnerability. Successful exploitation could lead to arbitrary code execution...

CVE-2018-15959

Adobe ColdFusion versions July 12 release 2018.0.0.310739, Update 6 and earlier, and Update 14 and earlier have a deserialization of untrusted data vulnerability. Successful exploitation could lead to arbitrary code execution...

CVE-2018-15961

Adobe ColdFusion versions July 12 release 2018.0.0.310739, Update 6 and earlier, and Update 14 and earlier have an unrestricted file upload vulnerability. Successful exploitation could lead to arbitrary code execution...

CVE-2018-15959

CVE-2018-15959 describes an insecure deserialization vulnerability in Adobe ColdFusion. The issue affects ColdFusion versions released July 12, 2018 (2018.0.0.310739) and Update 6 and earlier, as well as Update 14 and earlier, where deserializing untrusted data can lead to arbitrary code executio...

Release Notes for Veeam Management Pack 8.0 Update 6

Challenge Release Notes for Veeam Management Pack 8.0 Update 6. NOTE : The Veeam Management Pack 8.0 Update 6 cumulative patches for Veeam Backup & Replication monitoring and VMware vSphere 7.0 monitoring are available through kb2940 and kb3172 correspondingly. Cause Please confirm you are runnin...

Update Veeam MP Core Services to Support TLS 1.2 Protocol

Challenge Starting with vSphere 6.5, the TLS protocol version 1.2 is enabled by default. Cause To allow Veeam Virtualization Extensions Service and Veeam VMware Collectors to connect to vCenter Servers that use the TLS 1.2 protocol, you must update Veeam MP core services. Solution NOTE: The...

Product update: Virtuozzo 7.0 Update 6 Hotfix 2 (7.0.6-695)

The Hotfix 2 for Virtuozzo 7.0 Update 6 provides a new feature as well as stability and usability bug fixes. Vulnerability id: PSBM-65549 Resource alerts could be shown in Virtuozzo Automator for Windows VMs with enough resources. Vulnerability id: PSBM-78460 Container live migration could fail d...

Product update: Virtuozzo 7.0 Update 6 Hotfix 1 (7.0.6-678)

The Hotfix 1 for Virtuozzo 7.0 Update 6 provides stability and usability bug fixes. Vulnerability id: PSBM-72443 Migration of a VM with two HDDs from Virtuozzo 6 to 7 could fail due to a libvirt conversion failure. Vulnerability id: PSBM-77096 vstorage-mount could crash under certain conditions d...

Microsoft Exchange Server CVE-2014-6336 Tokens Validation URI Redirection Vulnerability

Description Microsoft Exchange Server is prone to a URI-redirection vulnerability. An attacker can leverage this issue by constructing a crafted URI and enticing a user to follow it. When an unsuspecting victim follows the link, they may be redirected to an attacker-controlled site; this may aid ...

Sun Java System Web Server 7.0 Update 6 'admin' Server Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/37909/info Sun Java System Web Server is prone to a denial-of-service vulnerability. An attacker can exploit this issue to crash the effected application, denying service to legitimate users. Sun Java System Web Server 7....