Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from an integer overflow that could lead to a configuration error...

EulerOS 2.0 SP8 : openssl (EulerOS-SA-2025-1126)

According to the versions of the openssl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Issue summary: Calling the OpenSSL API function SSLselectnextproto with an empty supported client protocols buffer may cause a crash or memory...

Fedora 41 : llvm-test-suite (2024-6d9aba8c3c)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-6d9aba8c3c advisory. Remove ClamAV subdirectory because of viruses in input files: These were the findings: MultiSource/Applications/ClamAV/inputs/rtf-test/rtf1.rtf:...

CVE-2024-37203 WordPress Laybuy Payment Extension for WooCommerce plugin <= 5.3.9 - Broken Access Control vulnerability

Missing Authorization vulnerability in Laybuy Laybuy Payment Extension for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Laybuy Payment Extension for WooCommerce: from n/a through 5.3.9...

Get-MonitorConfiguration returns an error after DDC/Site upgrade

When admin invokes a cmdlet: Get-MonitorConfiguration, the error is displayed: A database operation failed and could not be recovered : Reason ? CDF Control trace captured on the DDC shows the error: Monitor System Setting 'DisableGoogleAnalytics' exists in the database was loaded but not found i...

EulerOS 2.0 SP12 : openssl (EulerOS-SA-2024-2537)

According to the versions of the openssl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Issue summary: Calling the OpenSSL API function SSLselectnextproto with an empty supported client protocols buffer may cause a crash or memory...

Error "Invalid Client ID/Secret key" throws while configuring Probe Agent for Cloud Monitor

While configuring Citrix Probe Agent for Cloud Monitor it throws error "Invalid Client ID/Secret key" although Client ID, Secret and Customer ID are correct...

CVE-2024-22064 Configuration error Vulnerability in ZTE ZXUN-ePDG

ZTE ZXUN-ePDG product, which serves as the network node of the VoWifi system, under by default configuration, uses a set of non-unique cryptographic keys during establishing a secure connectionIKE with the mobile devices connecting over the internet . If the set of keys are leaked or cracked, the...

CVE-2024-22064 Configuration error Vulnerability in ZTE ZXUN-ePDG

ZTE ZXUN-ePDG product, which serves as the network node of the VoWifi system, under by default configuration, uses a set of non-unique cryptographic keys during establishing a secure connectionIKE with the mobile devices connecting over the internet . If the set of keys are leaked or cracked, the...

ICA Latency in Director shows Cannot retrieve the data

When checking ICA latency for a VDA on an App Layering based image, Director does not show that data. ICA Latency within Director says "Cannot retrieve the data." Hovering over that error message in Director pops up the message: "Data source unresponsive due to a configuration error. View Directo...

seccenter.exe Privilege Escalation Arbitrary Code

The vulnerability of the configuration file seccenter.exe used by antivirus protection software such as Bitdefender Total Security, Bitdefender Internet Security, Bitdefender Antivirus Plus, and Bitdefender Antivirus Free is related to errors in system settings or configuration. Exploiting this...

Microsoft Defender Bypass Security Restrictions

The vulnerability of Microsoft Defender’s operating system vulnerabilities is related to security configuration errors. Exploiting this vulnerability can allow a hacker to bypass existing security restrictions using a specially created file...

Kerberos Network Protocol Windows Bypass

The vulnerability of the Kerberos network protocol implementation in Windows operating systems is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to bypass security restrictions remotely...

Error message "Invalid URL entered" while configuring Okta as an identity provider

Error message "Invalid URL entered" while configuring Okta as an identity provider...

Isolated Sandbox macOS Unauthorized Access

The vulnerability of the isolated Sandbox software environment in the macOS operating system is related to security configuration errors. Exploiting this vulnerability can allow a malicious individual to gain unauthorized access to removable storage devices...

VulnCheck KEV: CVE-2021-45967

An issue was discovered in Pascom Cloud Phone System before 7.20.x. A configuration error between NGINX and a backend Tomcat server leads to a path traversal in the Tomcat server, exposing unintended endpoints...

CVE-2023-46835

The current setup of the quarantine page tables assumes that the quarantine domain domio has been initialized with an address width of DEFAULTDOMAINADDRESSWIDTH 48 and hence 4 page table levels. However domio being a PV domain gets the AMD-Vi IOMMU page tables levels based on the maximum hot...

App protection setup issue

Error in configuring App Protection using the following guide: https://docs.citrix.com/en-us/tech-zone/learn/poc-guides/app-protection-policies.html. When running the below commandlet to enable app protection: Set-BrokerDesktopGroup -Name Applicationprotection - $true Error is displayed saying th...

IBM Robotic Process Automation Security Configuration Error

The vulnerability of the IBM Robotic Process Automation software lies in security configuration errors. Exploiting this vulnerability could allow an attacker to alter the cluster configuration...

Microsoft Office Security Configuration Bypass

The vulnerability of the Microsoft Office suite is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to bypass existing security restrictions remotely...