4057 matches found
F5 BIG-IP Denial of Service Vulnerability (CNVD-2023-75604)
F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, and remote access policy management. A denial of service vulnerability exists in F5 BIG-IP, which can be exploited by attackers to cause an increase in memory...
F5 BIG-IP Edge Client Cryptographic Signature Validation Error Vulnerability
F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, and remote access policy management. A cryptographic signature validation error vulnerability exists in the F5 BIG-IP Edge client, which can be exploited by an...
F5 BIG-IP Information Disclosure Vulnerability (CNVD-2023-75595)
F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, and remote access policy management. An information disclosure vulnerability exists in F5 BIG-IP, which can be exploited by an attacker to view shared keys...
F5 BIG-IP Information Disclosure Vulnerability (CNVD-2023-75596)
F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, and remote access policy management. An information disclosure vulnerability exists in F5 BIG-IP, which can be exploited by an attacker to view TSIG keys in...
F5 BIG-IP HTTP/2 Denial of Service Vulnerability
F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, and remote access policy management. A denial of service vulnerability exists in F5 BIG-IP HTTP/2, which can be exploited by an attacker to cause TMM termination...
F5 BIG-IP Information Disclosure Vulnerability (CNVD-2023-75598)
F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, and remote access policy management. An information disclosure vulnerability exists in F5 BIG-IP, which can be exploited by attackers to view sensitive information...
F5 BIG-IP Denial of Service Vulnerability (CNVD-2023-75597)
F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, remote access policy management and other functions. A denial of service vulnerability exists in F5 BIG-IP, which can be exploited by attackers to cause a denial o...
The vulnerability of Citrix ADC application delivery controllers (formerly known as Citrix NetScaler Application Delivery Controller) and Citrix Gateway access control systems (formerly known as Citrix NetScaler Gateway) relates to operations that go beyond buffer boundaries in memory. This allows attackers to influence the confidentiality, integrity, and accessibility of protected information.
The vulnerability of Citrix ADC application delivery controllers formerly known as Citrix NetScaler Application Delivery Controller and Citrix Gateway access control systems formerly known as Citrix NetScaler Gateway relates to operations that go beyond the buffer boundaries in memory. Exploiting...
CVE-2023-41858
Cross-Site Request Forgery CSRF vulnerability in Ashok Rane Order Delivery Date for WP e-Commerce plugin = 1.2 versions...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF vulnerability in Ashok Rane Order Delivery Date for WP e-Commerce plugin = 1.2 versions...
CVE-2023-41858 WordPress Order Delivery Date for WP e-Commerce Plugin <= 1.2 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Ashok Rane Order Delivery Date for WP e-Commerce plugin = 1.2 versions...
CVE-2023-41858
CVE-2023-41858 is a CSRF vulnerability in the WordPress plugin Order Delivery Date for WP e-Commerce (versions <= 1.2). Root cause: CSRF allows unauthorized actions on behalf of an authenticated user. Impact per sources: high confidentiality, integrity, and availability impact (CVSS 3.1/3.1 ve...
F5 BIG-IP 安全漏洞
F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, remote access policy management and other functions. An access control error vulnerability exists in F5 BIG-IP, which can be exploited by attackers to cross the...
WordPress Plugin Order Delivery Date for WP e-Commerce Cross-Site Request Forgery Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery...
Citrix Systems ADC and NetScaler Gateway Security Vulnerability
Citrix Systems ADC and NetScaler Gateway is an application delivery controller from Citrix Systems. A security vulnerability exists in Citrix Systems ADC and NetScaler Gateway that stems from the presence of sensitive information disclosure...
A week in security (October 2 - October 8)
Last week on Malwarebytes Labs: Multi-factor authentication has proven it works, so what are we waiting for? Amazon Prime email scammer snatches defeat from the jaws of victory 2023 MITRE ATT&CK® Evaluation results: Malwarebytes earns high marks for detection, blocks initial malware executions...
ConfigSync Failure May Be Seen When Delivering App-V, MSIX, or MSIX App Attach Packages
For customers using Delivery Controller Version 2308 and delivering App-V, MSIX or MSIX app attach packages through Citrix, errors with the source “Citrix ConfigSync Service” and the Event ID “505” may be logged to the Windows Event Viewer on Delivery Controllers with the following message: “The...
CVE-2023-41859
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Ashok Rane Order Delivery Date for WP e-Commerce plugin = 1.2 versions...
Cross site scripting
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Ashok Rane Order Delivery Date for WP e-Commerce plugin = 1.2 versions...
CVE-2023-41859 WordPress Order Delivery Date for WP e-Commerce Plugin <= 1.2 is vulnerable to Cross Site Scripting (XSS)
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Ashok Rane Order Delivery Date for WP e-Commerce plugin = 1.2 versions...