Prompt to "Upgrade Remaining Delivery Controllers" after XenDesktop/XenApp upgrade

After upgrading site to 7.6, the controller still says the upgrade is not complete. There is only one controller and it has been upgraded but it references another server License Server as needing to be upgraded...

CVE-2016-6824

Huawei AC6003, AC6005, AC6605, and ACU2 access controllers with software before V200R006C10SPC200 allows remote authenticated users to cause a denial of service device restart via crafted CAPWAP packets...

CVE-2016-6824

Huawei AC6003, AC6005, AC6605, and ACU2 access controllers with software before V200R006C10SPC200 allows remote authenticated users to cause a denial of service device restart via crafted CAPWAP packets...

Code injection

Huawei AC6003, AC6005, AC6605, and ACU2 access controllers with software before V200R006C10SPC200 allows remote authenticated users to cause a denial of service device restart via crafted CAPWAP packets...

CVE-2016-6824

Huawei AC6003, AC6005, AC6605, and ACU2 access controllers with software before V200R006C10SPC200 allows remote authenticated users to cause a denial of service device restart via crafted CAPWAP packets...

CVE-2016-6824

CVE-2016-6824 affects Huawei Access Controllers AC6003, AC6005, AC6605 and ACU2 with software older than V200R006C10SPC200. Affected component: CAPWAP handling with input validation vulnerability leads to denial of service via crafted CAPWAP packets, causing device restart. Impact is network-acce...

Yokogawa STARDOM Certification Bypass Vulnerability

The Yokogawa STARDOM FCN/FCJ controller is a controller for use in network-based control systems. The Yokogawa STARDOM FCN/FCJ controller fails to require authentication for Logic Designer connections, which could be used by a remote attacker to submit a special request to control the device...

CVE-2016-4860

Yokogawa STARDOM FCN/FCJ controller R1.01 through R4.01 does not require authentication for Logic Designer connections, which allows remote attackers to reconfigure the device or cause a denial of service via a 1 stop application program, 2 change value, or 3 modify application command...

Important: Red Hat Security Advisory: Red Hat OpenShift Enterprise 3.2 security update and bug fix update

An update for atomic-openshift and heapster is now available for Red Hat OpenShift Enterprise 3.2. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available f...

Denial of Service Vulnerability in Multiple Huawei Products (CNVD-2016-06549)

Huawei Access Controllers AC6003 and others are wireless access controllers from Huawei, China. A denial of service vulnerability exists in multiple Huawei products. An attacker can exploit this vulnerability by sending specially crafted packets to cause a denial of service device reboot...

Security Advisory - Input Validation Vulnerability in Huawei Access Controllers

There is an input validation vulnerability in Huawei access controllers AC. Due to the lack of input validation, an attacker may craft malformed Control And Provisioning of Wireless Access Points CAPWAP protocol packets and send them to the device, causing the device to restart. Vulnerability ID:...

PLC Blaster Worm Targets Industrial Control PLCs

LAS VEGAS – Security researchers at Black Hat USA described a proof-of-concept worm that targets weaknesses within automated industrial control systems used to manage critical infrastructure and manufacturing. The worm, according to OpenSource Security, has the capability to autonomously search f...

Schneider Electric SoMachine HVAC Programming Software for M171/M172 Controllers Arbitrary Code Execution Vulnerability

Schneider Electric SoMachine HVAC Programming Software for M171/M172 Controllers is a set of programming software for M171/M172 controllers from Schneider Electric France. A security vulnerability exists in the ActiveX control in Schneider Electric SoMachine HVAC Programming Software for M171/M17...

CVE-2016-4529

An unspecified ActiveX control in Schneider Electric SoMachine HVAC Programming Software for M171/M172 Controllers before 2.1.0 allows remote attackers to execute arbitrary code via unknown vectors, related to the INTERFACESAFEFORUNTRUSTEDCALLER aka safe for scripting flag...

CVE-2016-4529

An unspecified ActiveX control in Schneider Electric SoMachine HVAC Programming Software for M171/M172 Controllers before 2.1.0 allows remote attackers to execute arbitrary code via unknown vectors, related to the INTERFACESAFEFORUNTRUSTEDCALLER aka safe for scripting flag...

CVE-2016-4529

An unspecified ActiveX control in Schneider Electric SoMachine HVAC Programming Software for M171/M172 Controllers before 2.1.0 allows remote attackers to execute arbitrary code via unknown vectors, related to the INTERFACESAFEFORUNTRUSTEDCALLER aka safe for scripting flag...

Mitsubishi FX3G PLC Denial of Service Vulnerability

FX3G series PLC is specialized in providing customers with more personalized system solutions, which can fully meet the system requirements of customers in different industries. A denial-of-service vulnerability exists in the Mitsubishi FX3G PLC, which allows an attacker to exploit the...

The vulnerability of the Samba file system allows a perpetrator to circumvent existing access restrictions.

The vulnerability of the samldbcheckuseraccountcontrolacl function in the Samba file system located in the samdb/ldbmodules/samldb.c file is related to improper privilege checking during the creation of computer accounts. Exploiting this vulnerability can allow a malicious actor to circumvent...

CVE-2015-8474: Undefined Security Weakness

Open redirect vulnerability in the validbackurl function in app/controllers/applicationcontroller.rb in Redmine before 2.6.7, 3.0.x before 3.0.5, and 3.1.x before 3.1.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a crafted backurl parameter, a...

UBUNTU-CVE-2016-2111

The NETLOGON service in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2, when a domain controller is configured, allows remote attackers to spoof the computer name of a secure channel's endpoint, and obtain sensitive session information, by running a crafted applicatio...