Lucene search
+L

4020 matches found

Citrix
Citrix
added 2023/11/30 12:00 a.m.10 views

Missing configuration on GUI after updating WAF signatures on ADC.

WAF was enabled, and after updating the RFC Compliance / security signatures the configuration ns.config was wiped...

7.2AI score
SaveExploits0
IBM Security Bulletins
IBM Security Bulletins
added 2023/11/23 6:05 p.m.30 views

Security Bulletin: IBM App Connect Enterprise Certified Container operator and operands are vulnerable to HTTP header injection due to [CVE-2023-29406]

Summary Golang Go is used by IBM App Connect Enterprise Certified Container in the operator catalog, the operator and its operands. The IBM App Connect Enterprise Certified Container operator and the IntegrationServer & IntegrationRuntime operands are vulnerable to HTTP header injection leading t...

6.5CVSS9.1AI score0.01453EPSS
SaveExploits0Affected Software1
Citrix
Citrix
added 2023/11/22 12:00 a.m.23 views

Citrix Delivery Controllers generates Event ID 505 and Event ID 3602 continuously

Upgrading CVAD version to 2308 generates“Citrix ConfigSync Service” with "Event ID “505 ” and "Citrix High Availability Service" with "Event ID 3602" The Citrix Config Sync Service failed an import. Error details: Error importing configuration data into secondary Broker...

7.2AI score
SaveExploits0
The Hacker News
The Hacker News
added 2023/11/21 11:57 a.m.123 views

New Agent Tesla Malware Variant Using ZPAQ Compression in Email Attacks

A new variant of the Agent Tesla malware has been observed delivered via a lure file with the ZPAQ compression format to harvest data from several email clients and nearly 40 web browsers. "ZPAQ is a file compression format that offers a better compression ratio and journaling function compared t...

9.3CVSS7.6AI score0.99945EPSS
SaveExploits33
Citrix
Citrix
added 2023/11/17 12:00 a.m.11 views

Explanation of Delivery Group power management for single session

Explain the detail difference between"Machines to be powered on" in delivery group and "PeakBufferSizePercent" in DDC powershell SDK, when control the power management for pool random delivery groupor unassigned machines...

7.1AI score
SaveExploits0
NVD
NVD
added 2023/11/14 7:15 p.m.39 views

CVE-2023-32655

Path transversal in some IntelR NUC Kits & Mini PCs - NUC8i7HVK & NUC8HNK USB Type C power delivery controller installatio software before version 1.0.10.3 for Windows may allow an authenticated user to potentially enable escalation of privilege via local access...

7.3CVSS0.00221EPSS
SaveExploits0References1
OSV
OSV
added 2023/11/14 7:15 p.m.11 views

CVE-2023-32655

Path transversal in some IntelR NUC Kits & Mini PCs - NUC8i7HVK & NUC8HNK USB Type C power delivery controller installatio software before version 1.0.10.3 for Windows may allow an authenticated user to potentially enable escalation of privilege via local access...

7.3CVSS5.8AI score0.00221EPSS
SaveExploits0References1
Prion
Prion
added 2023/11/14 7:15 p.m.24 views

Path traversal

Path transversal in some IntelR NUC Kits & Mini PCs - NUC8i7HVK & NUC8HNK USB Type C power delivery controller installatio software before version 1.0.10.3 for Windows may allow an authenticated user to potentially enable escalation of privilege via local access...

4.1CVSS7.4AI score0.00221EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/11/14 7:04 p.m.33 views

CVE-2023-32655

Path transversal in some IntelR NUC Kits & Mini PCs - NUC8i7HVK & NUC8HNK USB Type C power delivery controller installatio software before version 1.0.10.3 for Windows may allow an authenticated user to potentially enable escalation of privilege via local access...

6.7CVSS7.6AI score0.00221EPSS
SaveExploits0References1
CVE
CVE
added 2023/11/14 7:04 p.m.74 views

CVE-2023-32655

CVE-2023-32655 concerns a path traversal in the USB Type-C power delivery controller installation software for Intel NUC Kits & Mini PCs (NUC8i7HVK, NUC8HNK). Root cause: path traversal in the installer could allow an authenticated local user to escalate privileges. Affected versions: Intel NUC8i...

7.3CVSS7.3AI score0.00221EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2023/11/14 12:00 a.m.30 views

PT-2023-23935 · Intel · Intel Nuc Kits & Mini Pcs +1

Name of the Vulnerable Software and Affected Versions: IntelR NUC Kits & Mini PCs - NUC8i7HVK & NUC8HNK USB Type C power delivery controller installation software versions prior to 1.0.10.3 Description: The issue allows an authenticated user to potentially enable escalation of privilege via local...

7.3CVSS7.3AI score0.00221EPSS
SaveExploits0References3
Citrix
Citrix
added 2023/11/14 12:00 a.m.12 views

Citrix Director Trends>Network page shows "Refused to connect" after integration with ADM

"Refused to connect" message is seen on the Citrix Director TrendsNetwork page after integrating with Citrix Application Delivery Management...

7AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2023/11/08 12:00 a.m.13 views

The vulnerability of Citrix ADC application delivery controllers (formerly known as Citrix NetScaler Application Delivery Controller) and Citrix Gateway virtual environment access control systems (formerly known as Citrix NetScaler Gateway) relates to an operation that goes beyond the buffer in memory, allowing a malicious actor to cause service failures.

The vulnerability of the Citrix ADC application delivery controller formerly Citrix NetScaler Application Delivery Controller and the Citrix Gateway access control system formerly Citrix NetScaler Gateway relates to an operation that goes beyond the buffer in memory. Exploiting this vulnerability...

8.5CVSS7.4AI score0.00885EPSS
SaveExploits0References2Affected Software2
ATTACKERKB
ATTACKERKB
added 2023/11/04 11:15 p.m.6 views

CVE-2023-40922

kerawen before v2.5.1 was discovered to contain a SQL injection vulnerability via the ocsidcart parameter at KerawenDeliveryModuleFrontController::initContent...

9.8CVSS5.8AI score0.00504EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/11/04 12:00 a.m.7 views

PT-2023-27702 · Kerawen · Kerawen

Name of the Vulnerable Software and Affected Versions: Kerawen versions prior to 2.5.1 Description: The issue is related to a SQL injection vulnerability. It occurs via the ocs id cart parameter at the KerawenDeliveryModuleFrontController::initContent function. Recommendations: For versions prior...

9.8CVSS9.7AI score0.00504EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/11/02 12:00 a.m.9 views

IBM MQ Appliance Input Validation Error Vulnerability

IBM MQ IBM WebSphere MQ is a messaging middleware product from International Business Machines IBM. The product focuses on providing a reliable and validated messaging backbone for Service Oriented Architecture SOA. An input validation error vulnerability exists in IBM MQ Appliance, which stems...

5.3CVSS6.6AI score0.00599EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2023/11/01 12:00 a.m.8 views

GitLab Security Breach

GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD continuous integration and continuous delivery, and other features. GitLab suffers from a security vulnerability that originates from a...

6.5CVSS6.9AI score0.00643EPSS
SaveExploits0References4
Citrix
Citrix
added 2023/10/31 12:00 a.m.11 views

How to move a file from one Netscaler to another via CLI using SCP.

Understand how to utilize the SCP command to move a file from one ADC to another via CLI...

7.2AI score
SaveExploits0
Citrix
Citrix
added 2023/10/31 12:00 a.m.13 views

Error launching application in DAAS "The resource is unavailable currently"

All applications in a particular Delivery Group\Catalog fail to launch . Applications in other Delivery Groups have no issue launching . With CWA the error seen is "The resource is unavailable currently" With HTML5 client this error is seen "ICA retrieved successfully, connecting..."...

7AI score
SaveExploits0
GithubExploit
GithubExploit
added 2023/10/29 3:31 p.m.476 views

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Citrix Netscaler_Application_Delivery_Controller

CVE-2023-4966 An Exploitation script developed to exploit the...

9.4CVSS8.6AI score0.99999EPSS
SaveExploits15
Rows per page
Query Builder