CVE-2018-14670

Incorrect configuration in deb package in ClickHouse before 1.1.54131 could lead to unauthorized use of the database...

cPanel Information Disclosure Vulnerability (CNVD-2019-26212)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. An information disclosure vulnerability exists in versions of cPanel prior to 66.0.2. The vulnerability stems from an error in th...

PrinterOn Central Print Services Information Disclosure Vulnerability

PrinterOn Central Print Services CPS is a print service center management solution from PrinterOn Canada. An information disclosure vulnerability exists in PrinterOn CPS version 4.1.4 and earlier. The vulnerability stems from an error in configuration or other errors in the operation of a network...

HumHub Social Network Kit Enterprise Information Disclosure Vulnerability

HumHub Social Network Kit Enterprise is an open source social networking kit. version 1.3.13 of HumHub Social Network Kit Enterprise contains an information disclosure vulnerability that stems from a configuration or other error in the operation of the network system or product, which could be...

Infinova Swann SWWHD-INTCAM-HD Information Disclosure Vulnerability

The Infinova Swann SWWHD-INTCAM-HD is a webcam from Infinova USA. An information disclosure vulnerability exists in Infinova Swann SWWHD-INTCAM-HD. The vulnerability arises from a configuration or other error in the operation of a network system or product. An unauthorized attacker could exploit...

IBM Sterling B2B Integrator Information Disclosure Vulnerability (CNVD-2019-14590)

IBM Sterling B2B Integrator is a suite of software from IBM USA that integrates critical B2B processes, transactions and relationships. The software supports secure integration of complex B2B processes with diverse partner communities. An information disclosure vulnerability exists in IBM Sterlin...

The vulnerability of the coTURN server, related to configuration errors, allows attackers to compromise data integrity.

The vulnerability of the coTURN server is related to a configuration error that causes external traffic to be redirected to the backend interface of its own host. Exploiting this vulnerability allows an attacker to compromise the integrity of data...

The vulnerability of the library package responsible for performing security transformations using GOST algorithms in the Astra Linux operating system allows a perpetrator to trigger a service failure. This vulnerability is related to a configuration error in the package.

The vulnerability of the library package responsible for performing security transformations based on GOST algorithms in the Astra Linux operating system is related to a configuration error in the package. This error causes the security transformation to be enabled automatically during package...

The vulnerability of the password generation and quality assessment library in Astra Linux’s operating system, libpam-pwquality, is related to a configuration error that allows an attacker to gain unauthorized access to the system.

The vulnerability of the password generation and quality assessment library in the Astra Linux operating system is related to a configuration error that causes no checks are performed to ensure that domain user passwords comply with the specified security policies. Exploiting this vulnerability...

The vulnerability of the SoMachine Basic software, related to configuration errors, allows a perpetrator to execute SoMachine.

The vulnerability of the SoMachine Basic software is related to configuration errors. Exploiting this vulnerability allows a remote attacker to execute SoMachine by sending specially crafted Ethernet messages...

"Cannot complete request" when logging on via NetScaler using dual factor authentication and SSON to StoreFront Server 3.14

After configuring a remote portal with StoreFront servers load balanced with NetScaler, a user authenticates and they get the error "Cannot complete your request". From the event Viewer logs of the StoreFront SF server: "An error occurred while using SSL configuration for endpoint 0.0.0.443. The...

Volume groups created by proxy got stuck in UI

Challenge When a Veeam Backup for Nutanix AHV backup job fails unexpectedly, or the backup proxy appliance is powered off for some reason manual power-off, hypervisor host crash, or any unexpected failure, you may get the volume groups created for backup purposes left in Prism Element and not...

StoreFront 3.5 upgrade to 3.15 fails with error " Citrix StoreFront 3.15.0.18019 failed"

StoreFront Version 3.5 fails to upgrade to version 3.15, during the upgrade process the wizard displays the following message "Citrix StoreFront 3.15.0.18019 failed" At the bottom of the upgrade wizard window, another message is displayed "NOTE: An error occurred during installation. Please ensur...

WEM Admin console error: "A valid license server with appropriate licenses needs to be configured"

When attempting to connect to infrastructure services using the WEM Administration Console, the following error is seen: A valid license server with appropriate licenses needs to be configured before you can start using Citrix Workspace Environment Management...

Quick tip: Watch out — restriction by location can be circumvented.

by @Andrey Danau, Wallarm Research If you are like many app developers, you may be using nginx or apache proxy or a web server on the front end of your application. If you are on a tight schedule, it is tempting to tie authorization and data controls simply to the locations defined in the front...

vulners.com: [vulners.com] nginx alias_traversal

Incorrect configuration of alias could allow an attacker to read file stored outside the target folder. https://github.com/yandex/gixy/blob/master/docs/en/plugins/aliastraversal.md Уязвимость только в конфигурации http, на https такого нет. Пример: http GET /static../monit/COPYING HTTP/1.1 Host:...

The vulnerability in the Hawtio web console of the Apache ActiveMQ software platform allows a perpetrator to obtain confidential information or exert other effects.

The vulnerability of the Hawtio web console of the Apache ActiveMQ software platform is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor, operating remotely, to obtain confidential information or exert other unauthorized actions...

Windows SMB Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in the default Windows SMB Server configuration which allows anonymous users to remotely access certain named pipes that are also configured to allow anonymous access to users who are logged on locally. An unauthenticated attacker who successfully...

'Couldn't find the current boot disk in the list of disk' or 'A configuration error exists' App Layering/Unidesk 2.x: Desktop Task Fails

Desktop edit fails with 'Couldn't find the current boot disk in the list of disk' or 'A configuration error exists'. Note, "A configuration error exists" could also apply to an inconsistent snapshot configuration on the VM, so see this KB article as well...

The vulnerability of the Android CAF-release operating system, related to configuration errors, allows a perpetrator to compromise privacy, integrity, and accessibility.

The vulnerability of the Android CAF-release operating system is related to configuration errors. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information when loading the external application QTEE...