CVE-2016-2205

Symantec Workspace Streaming (SWS) and Workspace Virtualization (SWV) are affected by CVE-2016-2205, a path traversal in the file-download configuration file of the management consoles. An authenticated user could read arbitrary application files on the host via this vulnerability. Affected versi...

CVE-2016-2205

Directory traversal vulnerability in the file-download configuration file in the management console in Symantec Workspace Streaming SWS 7.5.x before 7.5 SP1 HF9 and 7.6.0 before 7.6 HF5 and Symantec Workspace Virtualization SWV 7.5.x before 7.5 SP1 HF9 and 7.6.0 before 7.6 HF5 allows remote...

CVE-2016-2206

The management console in Symantec Workspace Streaming SWS 7.5.x before 7.5 SP1 HF9 and 7.6.0 before 7.6 HF5 and Symantec Workspace Virtualization SWV 7.5.x before 7.5 SP1 HF9 and 7.6.0 before 7.6 HF5 allows remote authenticated users to read arbitrary files by modifying the file-download...

CVE-2016-2206

The CVE-2016-2206 entry affects Symantec Workspace Streaming (SWS) and Symantec Workspace Virtualization (SWV). The vulnerability exists in the management consoles where an attacker can read arbitrary host files by altering the file-download configuration file. Affected versions include SWS 7.5.x...

Symantec Workspace Streaming/Workspace Virtualization Path Traversal Vulnerability

Symantec Workspace Streaming enables on-demand application setup, real-time software license management, and instant application upgrades.Symantec Workspace Virtualization enables application virtualization, which reduces application conflicts, lowers testing requirements, and reduces support...

Symantec Workspace Streaming/Workspace Virtualization Arbitrary File Read Vulnerability

Symantec Workspace Streaming enables on-demand application setup, real-time software license management, and instant application upgrades.Symantec Workspace Virtualization enables application virtualization, which reduces application conflicts, lowers testing requirements, and reduces support...

Symantec Workspace Streaming and Workspace Virtualization Path Traversal and Arbitrary File Read

SUMMARY Symantec Workspace Streaming SWS and Workspace Virtualization SWV management consoles were susceptible to a path traversal in a file download configuration file that could allow a malicious user who could access the vulnerable file to view unauthorized application files of specific file...

Faraday v1.0.20 - Collaborative Penetration Test and Vulnerability Management Platform

Faraday introduces a new concept - IPE Integrated Penetration-Test Environment a multiuser Penetration test IDE. Designed for distribution, indexation and analysis of the generated data during the process of a security audit. A brand new Faraday version is ready! Faraday v1.0.20 Community, Pro &...

pcre: workspace overflow for (*ACCEPT) with deeply nested parentheses (8.39/13, 10.22/12)

The compilebranch function in pcrecompile.c in PCRE 8.x before 8.39 and pcre2compile.c in PCRE2 before 10.22 mishandles patterns containing an ACCEPT substring in conjunction with nested parentheses, which allows remote attackers to execute arbitrary code or cause a denial of service stack-based...

Slack: Access to some Slack workspace metadata and settings available to unauthorized parties

In April 2016, @secalert alerted us to a vulnerability which may have allowed access to some Slack workspace metadata and settings to unauthorized parties. We implemented an initial fix within minutes, and a complete fix within two weeks. Nothing further is required from users to be protected...

How to Enable/Disable Workspace Control in StoreFront

This article describes how to enable/disable workspace control in StoreFront...

KDE Plasma-Workspace Local Security Bypass Vulnerability

KDE Plasma-Workspace is an umbrella term for all graphical environments developed by the KDE community as part of KDE Software Compilation 4. A local security bypass vulnerability exists in KDE Plasma-Workspace, which allows attackers to exploit the vulnerability to bypass security restrictions...

SUSE-SU-2016:0303-1 Security update for kdebase4-workspace

This update for kdebase4-workspace fixes the following issues: - CVE-2014-8651: Privilege escalation via KDE Clock KCM helper when non-default polkit settings are used bsc904625 The following non-security bugs were fixed: - bsc929718: Make kdm recognize an IPv6 localhost address as localhost...

Web Cams Not Working Through Published Desktop OS Session | Being Redirected As Optimized USB

The End-Users are unable to use the Web Cam through a Published Desktop OS session launched using Workspace App USB Device Being Redirected As Optimized USB...

The vulnerability of the Oracle Database database management system allows a hacker to execute arbitrary code.

The vulnerability of the Workspace Manager component of the Oracle Database management system is related to errors in the code. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely through network packets...

Oracle Database Server Multiple Unspecified Vulnerabilities -04 (Jan 2016)

Oracle Database Server is prone to multiple unspecified vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Unspecified Vulnerability in Oracle Database Workspace Manager Component

Oracle Database is a large database of commercial nature. An unspecified security vulnerability exists in the Oracle Database Workspace Manager component, which could be exploited by remote attackers to modify data, access data, and conduct denial-of-service attacks...

Oracle Database Server Unspecified Vulnerability -01 (Jan 2016)

Oracle Database Server is prone to an unspecified vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2015-4925

Unspecified vulnerability in the Workspace Manager component in Oracle Database Server 11.2.0.4 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors...

Design/Logic Flaw

Unspecified vulnerability in the Workspace Manager component in Oracle Database Server 11.2.0.4 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors...