CVE-2024-37281

An issue was discovered in Kibana where a user with Viewer role could cause a Kibana instance to crash by sending a large number of maliciously crafted requests to a specific endpoint...

Kibana 7.17.23/8.14.0 Security Update (ESA-2024-16)

Kibana Denial of Service issue ESA-2024-16 An issue was discovered in Kibana where a user with Viewer role could cause a Kibana instance to crash by sending a large number of maliciously crafted requests to a specific endpoint. Affected Versions: Kibana 8.x versions prior to 8.14.0 and Kibana 7.x...

CVE-2024-37281: Uncontrolled Resource Consumption

An issue was discovered in Kibana where a user with Viewer role could cause a Kibana instance to crash by sending a large number of maliciously crafted requests to a specific endpoint...

PT-2024-27445 · Elastic · Kibana

Name of the Vulnerable Software and Affected Versions: Kibana affected versions not specified Description: An issue was discovered where a user with Viewer role could cause a Kibana instance to crash by sending a large number of maliciously crafted requests to a specific endpoint. Recommendations...

WordPress plugin Happy Addons for Elementor has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PDF-XChange Editor Out-of-Bounds Write Vulnerability (CNVD-2024-33589)

PDF-XChange Editor is a PDF-XChange company running on Microsoft Windows systems in the PDF file viewer software. PDF-XChange Editor suffers from an out-of-bounds write vulnerability that can be exploited by an attacker to execute arbitrary code...

cad-viewer-widget (>=1.3.5, <=1.4.0), jupyter-cadquery (>=3.1.0rc0, <=3.2.2) potentially affected by CVE-2024-39700 via jupyterlab (3.5.0rc0)

jupyterlab PYPI version 3.5.0rc0 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - cad-viewer-widget =1.3.5, =3.1.0rc0, =3.2.2 Source cves: CVE-2024-39700 Source advisory: OSV:PYSEC-2024-322...

elyra-code-snippet-extension (>=3.14.0, <=3.14.1), elyra-code-viewer-extension (>=3.14.0, <=3.14.1) +9 more potentially affected by CVE-2024-39700 via jupyterlab (3.5.3)

jupyterlab PYPI version 3.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - elyra-code-snippet-extension =3.14.0, =3.14.0, =3.14.0, =3.14.0, =3.14.0, =3.14.0, =0.0.7, =0.1.2, =0.0.1, =0.1.0, =0.0.2, =0.0.3 Source cve...

cad-viewer-widget (1.4.1), jupyter-cadquery (>=3.3.0, <=3.5.2) +1 more potentially affected by CVE-2024-39700 via jupyterlab (3.6.0rc1)

jupyterlab PYPI version 3.6.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - cad-viewer-widget 1.4.1 - jupyter-cadquery =3.3.0, =3.5.2 - jupyter-cadquery-orion 0.0.1 Source cves: CVE-2024-39700 Source advisory:...

CVAD Session Recording Hub Article

Introduction This article is a summary of the top support articles related to Session Recording. Common issue resolutions and security bulletin for Session Recording. Top Knowledge Content Troubleshooting Common Problems User sessions are not recorded : CTX477232 - Session Recording: User session...

Error: Unable to Create Deployment in StoreFront

When creating a new deployment in StoreFront, the deployment fails with the following error: "Unable to Create Deployment " This error is logged in Event Viewer: New Server Deployment Citrix.DeliveryServices.PowerShell.Command.Runner.Exceptions.PowerShellExecutionException: An error occured runni...

Provisioning Services Target Device Software Fails to Install

Provisioning Services Target Device Software might fail during the installation with the following error: When you click OK , the following error appears: Reviewing the Event Viewer of the server displays the following errors: “Product: Citrix Provisioning Services Target Device x64 -- Error...

Error "Failed to create the Credential Wallet replication channel" after Upgrading StoreFront to Version 3.0.0.44

After upgrading previous versions of StoreFront to version 3.0.0.44 the following issues can be seen. Event Viewer Applications and Services Logs Citrix Delivery Services log: Level: Error, Source: Citrix Credential Wallet Service, Event ID: 1, Task Category 2302 Error Text:Failed to create the...

Error: "An error occurred during synchronization" in StoreFront

When trying to synchronize changes on a StoreFront multi-server environment, the following errors are displayed: Error: “An error occurred during synchronization” You might also view errors in the StoreFront Server Console Server Group. Error: “Cannot get valid synchronization state information...

vDisk Inactive State with Broadcom Network Cards

After installing Citrix Provisioning Services Server Target Device Software on a client computer that has a Broadcom Network Interface Card and restarting the target device, the Provisioning Services PVS status in the system tray displays Inactive. After initially installing the Target Device...

Adobe Bridge input validation error vulnerability

Adobe Bridge is a file viewer from the American company Audobee Adobe. Adobe Bridge suffers from an overflow vulnerability that can be exploited by an attacker to execute arbitrary code on a system...

Track Viewer Client Privilege Escalation

The vulnerability of the Track Viewer Client component of the software for calculating positions of individual RTLS transponders in the SIMATIC RTLS Locating Manager system is related to insufficient protection of registration data. Exploiting this vulnerability could allow attackers to increase...

MuPDF PDF Viewer GlutAddSubMenu DoS

The vulnerability of the GlutAddSubMenu function in the MuPDF PDF viewer software is related to a memory leak through the MenuEntry variable. Exploiting this vulnerability could allow an attacker to cause a service failure...

PT-2024-28046 · Unknown · Bigbluebutton

Name of the Vulnerable Software and Affected Versions: BigBlueButton versions prior to 2.6.18 BigBlueButton versions prior to 2.7.8 BigBlueButton versions prior to 3.0.0-alpha.7 Description: BigBlueButton is an open-source virtual classroom designed to help teachers teach and learners learn. An...

WordPress PDF Viewer plugin <= 1.1.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Yudistira Arya Patchstack Alliance in WordPress Plugin PDF Viewer versions = 1.1.0...