Mitsubishi Electric Air Conditioning Systems

1. EXECUTIVE SUMMARY CVSS v3 9.3 ATTENTION: Exploitable remotely/low attack complexity Vendor: Mitsubishi Electric Equipment: Multiple Air Conditioning Systems Vulnerability: Improper Restriction of XML External Entity Reference 2. RISK EVALUATION Successful exploitation of this vulnerability may...

Citrix Hypervisor 8.2 unable to load 2nd HBA card

Jun 4 15:46:50 hostname kernel: 75.692775 xen: -- pirq=85 - irq=85 gsi=85Jun 4 15:46:50 hostname kernel: 75.692987 Failed to setup GSI :85, errcode:-28Jun 4 15:46:50 hostname kernel: 75.928523 lpfc 0000:87:00.1: 3:6101 Disabling NVME support: Not supported by firmware: 1 1Jun 4 15:46:50 hostname...

CVE-2021-34370

Accela Civic Platform through 20.1 allows ssoAdapter/logoutAction.do successURL XSS. NOTE: the vendor states "there are configurable security flags and we are unable to reproduce them with the available information...

PT-2021-20482 · Accela · Accela Civic Platform

Name of the Vulnerable Software and Affected Versions: Accela Civic Platform versions prior to 20.2 Description: The issue allows for successURL XSS in the ssoAdapter/logoutAction.do endpoint. The vendor has stated that there are configurable security flags and they are unable to reproduce the...

SUSE: Security Advisory (SUSE-SU-2018:3927-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2019:13921-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Null pointer dereference

A NULL pointer dereference flaw was found in the megasas-gen2 SCSI host bus adapter emulation of QEMU in versions before and including 6.0. This issue occurs in the megasascommandcancelled callback function while dropping a SCSI request. This flaw allows a privileged guest user to crash the QEMU...

CVE-2020-35503

CVE-2020-35503 affects QEMU’s megasas-gen2 SCSI host bus adapter emulation. A NULL pointer dereference in megasas_command_cancelled() during dropping a SCSI request can crash the QEMU process on the host, causing a denial of service. The description specifies this is a local/privileged-guest flaw...

CVE-2020-35503

A NULL pointer dereference flaw was found in the megasas-gen2 SCSI host bus adapter emulation of QEMU in versions before and including 6.0. This issue occurs in the megasascommandcancelled callback function while dropping a SCSI request. This flaw allows a privileged guest user to crash the QEMU...

CVE-2020-35505

A NULL pointer dereference flaw was found in the am53c974 SCSI host bus adapter emulation of QEMU in versions before 6.0.0. This issue occurs while handling the 'Information Transfer' command. This flaw allows a privileged guest user to crash the QEMU process on the host, resulting in a denial of...

CVE-2020-35506

A use-after-free vulnerability was found in the am53c974 SCSI host bus adapter emulation of QEMU in versions before 6.0.0 during the handling of the 'Information Transfer' command CMDTI. This flaw allows a privileged guest user to crash the QEMU process on the host, resulting in a denial of servi...

CVE-2020-35506

CVE-2020-35506 is a use-after-free vulnerability in QEMU’s am53c974 SCSI host bus adapter emulation. It affects versions before 6.0.0 and is triggered during handling of the Information Transfer (CMD_TI) command, allowing a privileged guest user to crash the host QEMU process, causing denial of s...

CVE-2020-35505

A NULL pointer dereference flaw was found in the am53c974 SCSI host bus adapter emulation of QEMU in versions before 6.0.0. This issue occurs while handling the 'Information Transfer' command. This flaw allows a privileged guest user to crash the QEMU process on the host, resulting in a denial of...

CVE-2020-35505

A NULL pointer dereference flaw was found in the am53c974 SCSI host bus adapter emulation of QEMU in versions before 6.0.0. This issue occurs while handling the 'Information Transfer' command. This flaw allows a privileged guest user to crash the QEMU process on the host, resulting in a denial of...

The vulnerability of the implementations of WPA and WPA2 driver 6.1316.1209 Wi-Fi adapter ALFA allows a intruder to inject and decode packets in WPA or WPA2 networks.

The vulnerability of WPA and WPA2 driver version 6.1316.1209 Wi-Fi adapter implementations lies in the lack of verification of the integrity of fragmented TKIP packets. Exploiting this vulnerability allows a malicious actor to inject and decode packets in WPA or WPA2 networks remotely...

The vulnerability of implementations of WEP, WPA, WPA2, and WPA3 drivers 1030.36.604 for Wi-Fi adapter ALFA allows a perpetrator to compromise the integrity of protected information.

The vulnerability of implementations of WEP, WPA, WPA2, and WPA3 drivers 1030.36.604 for Wi-Fi adapter ALFA exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to compromise the integrity of the protected information...

The vulnerability of implementations of algorithms WEP, WPA, WPA2, and WPA3 for the 6.1316.1209 Wi-Fi adapter ALFA driver allows a hacker to inject arbitrary data frames.

The vulnerability of implementations of WEP, WPA, WPA2, and WPA3 drivers 6.1316.1209 for Wi-Fi adapters ALFA exists due to the failure to address certain security measures. Exploiting this vulnerability allows a remote attacker to inject arbitrary data frames...

CVE-2021-30213

Knowage Suite 7.3 is vulnerable to unauthenticated reflected cross-site scripting XSS. An attacker can inject arbitrary web script in '/servlet/AdapterHTTP' via the 'targetService' parameter...

Unbreakable Enterprise kernel-container security update

4.14.35-2047.503.1.el7 - bpf, x86: Validate computation of branch displacements for x86-64 Piotr Krysiuk Orabug: 32759961 CVE-2021-29154 - uek-rpm: Add Amazon Elastic Network Adapter module to nano rpm. Somasundaram Krishnasamy Orabug: 32781585 - ext4: handle error of ext4setupsystemzone on remou...

Windows does not recognize the VMXNET3 on App layer after upgraded to Windows 10 20H2.

After upgraded to Windows 10 20H2 on OS layer, then add a new version to App layer or platform layer, Windows virtual machine does not recognize the VMXNET3 virtual adapter. In the Windows device manager, you see a message similar to on packing machine: This device cannot start. Code 10 Operation...