89 matches found
PT-2024-30991 · Apple · Apple Macos
Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.7.1 macOS versions prior to 14.7.1 Description: A path deletion issue was addressed by preventing vulnerable code from running with privileges, which could allow an app to bypass Privacy preferences. Recommendations...
Citrix DAAS: After creating machine Catalog, VDAs gets deleted after Turning them ON in Azure
After creating Machine Catalog and Delivery Group, VDAs would get deleted after turning them ON in Azure. These happens to Windows 11 Single and Multi session VDAs Error: FailureMessage: Error starting machine. At least one resource deployment operation failed...
Mozilla: IndexedDB files retained in private browsing mode
A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes this flaw as follows: If the browser.privatebrowsing.autostart preference is enabled, IndexedDB files were not properly deleted when the window was closed. This preference is disabled by default in Firefox...
Mozilla: IndexedDB files retained in private browsing mode
A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes this flaw as follows: If the browser.privatebrowsing.autostart preference is enabled, IndexedDB files were not properly deleted when the window was closed. This preference is disabled by default in Firefox...
CVE-2024-35050
An issue in SurveyKing v1.3.1 allows attackers to escalate privileges via re-using the session ID of a user that was deleted by an Admin...
USN-6668-1: python-openstackclient vulnerability
It was discovered that when python-openstackclient attempted to delete a non-existing access rule, it would delete another existing access rule instead, contrary to expectations...
The Citrix Workspace app cannot be reset via the command line
When installed by specifying an account Store URL from the command line, the Citrix Workspace app cannot be reset via the following command from the CLI. And the Delete button on the "Account-Edit" screen becomes inactive so that the account cannot be deleted. "C:\Program Files x86\Citrix\ICA...
Registered OTP Device Removal Failure on native OTP management page
The following log can be found in "/tmp/aaad.debug" nsldapregisterencryptedotp 1-52: nsldapregisterencryptedotp: secret empty, nothing to delete for user...
CVE-2021-38363
An issue was discovered in ONOS 2.5.1. In IntentManager, the install-requested intent which causes an exception remains in pendingMap in memory forever. Deletion is possible neither by a user nor by the intermittent Intent Cleanup process...
CLSA-2022-1669236934 vim: Fix of CVE-2022-3352
CVE-2022-3352: disallow deleting the current buffer to avoid using freed memory...
Unable to delete expired certificate with no bindings
The following error is returned when trying to delete a certificate that has no bindings when clicking on "show bindings" "Certificate is referenced by a CRL, OCSP responder, vserver, service, monitor, SSL profile, CA Cert Group, another certificate, or a policy expression using XMLENCRYPT or...
Vdisks Are Not Deleted From VDisk Store after Being Deleted From PVS Console
After doing a merge, deleting vdisk versions on PVS console does not delete them from vdisk store, no errors are seen on PVS console. After deleting the versions, if we check store using File Explorer, we still see the vdisk versions present...
PT-2021-10273 · Halo · Halo
Name of the Vulnerable Software and Affected Versions: Halo version 0.4.3 Description: A File Deletion issue exists via the delBackup function. Recommendations: For Halo version 0.4.3, consider restricting access to the delBackup function as a temporary workaround until a patch is available...
CVE-2020-29623
"Clear History and Website Data" did not clear the history. The issue was addressed with improved data deletion. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, iOS 14.3 and iPadOS 14.3, tvOS 14.3. A user may be unable to fully delete...
CVE-2020-14031
Ozeki NG SMS Gateway (versions up to 4.17.6) contains an arbitrary file deletion vulnerability in the TXT File module’s Outbox feature. An attacker can delete all/most files in a folder, with the product typically running under NT AUTHORITY\SYSTEM, meaning only running/security attribute-protecte...
CVE-2020-3890
The issue was addressed with improved deletion. This issue is fixed in iOS 13.4 and iPadOS 13.4. Deleted messages groups may still be suggested as an autocompletion...
OPENSUSE-SU-2019:2211-1 Security update for phpMyAdmin
This update for phpMyAdmin to 4.9.1 fixes the following issues: Security issue fixed: - CVE-2019-12922: Fixed CSRF issue that allowed deletion of any server in the Setup page. boo1150914...
Provisioning Services - Not able to delete vDisk files
When attempting to delete the vDisk Files, we encounter the following error: "The action cannot be completed because the file is open in MgmtDaemon.exe"...
USN-3449-1 nova vulnerabilities
George Shuklin discovered that OpenStack Nova incorrectly handled the migration process. A remote authenticated user could use this issue to consume resources, resulting in a denial of service. CVE-2015-3241 George Shuklin and Tushar Patil discovered that OpenStack Nova incorrectly handled deleti...