UBUNTU-CVE-2020-16027

Insufficient policy enforcement in developer tools in Google Chrome prior to 87.0.4280.66 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information from the user's disk via a crafted Chrome Extension...

Available driver versions for XenServer and Citrix Hypervisor

Latest driver disk updates for XenServer and Citrix Hypervisor We work with partner organizations to ensure that drivers are available to enable new hardware and resolve critical issues. We regularly deliver updated versions of these drivers when partner organizations provide them to us. For Citr...

Driver Disk for Microsemi aacraid 1.2.1.60001 - For Citrix Hypervisor 8.x CR

Who Should Install this Driver Disk? Customers running a Citrix Hypervisor 8.x release who use Microsemi's aacraid driver and wish to use the latest version of the following: Driver Module| Version ---|--- aacraid| 1.2.1.60001 Issues Resolved In this Driver Disk Includes general enhancements and...

Baidu.com PC version suffers from dll hijacking vulnerability

Baidu.com is a cloud service product. A dll hijacking vulnerability exists in the PC version of Baidu.com Disk. An attacker can exploit the vulnerability to load a malicious dll and execute malicious code...

Google Android Resource Management Error Vulnerability

Google Android is a Linux-based open source operating system from the USGoogleOpen Handheld Alliance Google. Google Android OS suffers from a resource management error vulnerability that arises from improper management of system resources e.g., memory, disk space, files, etc. by a networked syste...

Insufficient Policy Enforcement

Insufficient policy enforcement in intent handling in Google Chrome on Android allowed a remote attacker to obtain potentially sensitive information from disk via a crafted HTML page...

CVE-2020-5803

Relative Path Traversal in Marvell QConvergeConsole GUI 5.5.0.74 allows a remote, authenticated attacker to delete arbitrary files on disk as SYSTEM or root...

JVN#10100024: Management software for NEC Storage disk array system vulnerable to improper server certificate verification

Management software for NEC Storage disk array system provided by NEC Corporation is vulnerable to improper server certificate verification CWE-295. Impact A man-in-the-middle attack may allow an attacker to eavesdrop on an encrypted communication or alter the communication. Solution Update the...

SUSE SLED15 / SLES15 Security Update : salt (SUSE-SU-2020:3155-1)

This update for salt fixes the following issues : Properly validate eauth credentials and tokens on SSH calls made by Salt API bsc1178319, bsc1178362, bsc1178361, CVE-2020-25592, CVE-2020-17490, CVE-2020-16846 Fix disk.blkid to avoid unexpected keyword argument 'pubuser'. bsc1177867 Ensure...

SUSE SLES15 Security Update : Salt (SUSE-SU-2020:3244-1)

This update fixes the following issues : salt : Avoid regression on 'salt-master': set passphrase for salt-ssh keys to empty string bsc1178485 Properly validate eauth credentials and tokens on SSH calls made by Salt API bsc1178319, bsc1178362, bsc1178361, CVE-2020-25592, CVE-2020-17490,...

SUSE SLED15 / SLES15 Security Update : salt (SUSE-SU-2020:3243-1)

This update for salt fixes the following issues : Avoid regression on 'salt-master': set passphrase for salt-ssh keys to empty string bsc1178485 Properly validate eauth credentials and tokens on SSH calls made by Salt API bsc1178319, bsc1178362, bsc1178361, CVE-2020-25592, CVE-2020-17490,...

Unauthorized access vulnerability in Lenovo Filez Enterprise Web Drive (CNVD-2020-73276)

Lenovo Filez Enterprise Web Disk is an enterprise file collaboration and management platform based on cloud storage. An unauthorized access vulnerability exists in Lenovo Filez Enterprise NetDrive, which can be exploited by attackers to obtain sensitive information...

Denail Of Service (DoS)

Polygen is vulnerable to denial of service. Precompiled grammar objects with world-writable permissions that are generated allows local users to cause a denial of service disk consumption and possibly perform other unauthorized activities...

Yifang Cloud Web Disk has Elevation of Privilege Vulnerability

Yifang Cloud Web Disk is a file cloud storage software. A privilege elevation vulnerability exists in Yifang Cloud Web Disk. An attacker can exploit the vulnerability to elevate privileges...

Driver Disk for Cisco enic 4.0.0.11 - For Citrix Hypervisor 8.x CR

Who Should Install this Driver Disk? Customers running a Citrix Hypervisor 8.x release who use Cisco's enic driver and wish to use the latest version of the following: Driver Module| Version ---|--- enic| 4.0.0.11 Issues Resolved In this Driver Disk Includes general enhancements and bug fixes...

Driver Disk for Intel i40e 2.9.21 - For Citrix Hypervisor 8.x CR

Who Should Install this Driver Disk? Customers running a Citrix Hypervisor 8.x release who use Intel's i40e driver and wish to use the latest version of the following: Driver Module| Version ---|--- i40e| 2.9.21 Issues Resolved In this Driver Disk This driver disk contains mitigations for the...

Driver Disk for Broadcom bnxt_en 1.10.1-216.1.123.0 - For Citrix Hypervisor 8.x CR

Who Should Install this Driver Disk? Customers running a Citrix Hypervisor 8.x release who use Bnxt's en driver and wish to use the latest version of the following: Driver Module| Version ---|--- bnxten| 1.10.1216.1.123.0 Issues Resolved In this Driver Disk Includes general enhancements and bug...

Driver Disk for Cisco fnic 2.0.0.59 - For Citrix Hypervisor 8.x CR

Who Should Install this Driver Disk? Customers running a Citrix Hypervisor 8.x release who use Cisco's fnic driver and wish to use the latest version of the following: Driver Module| Version ---|--- fnic| 2.0.0.59 Issues Resolved In this Driver Disk Includes general enhancements and bug fixes...

Driver Disk for Qlogic qede 8.30.13.0 - For XenServer 7.x CR

Who Should Install this Driver Disk? Customers running a Citrix XenServer 7.x. Current Release who use qlogic's qede driver and wish to use the latest version of the following: Driver Module| Version ---|--- qede| 8.30.13.0 Issues Resolved In this Driver Disk Includes general enhancements and bug...

Driver Disk for Broadcom bnxt_en 1.10.0_216.0.119.0 - For Citrix Hypervisor 8.x CR

Who Should Install this Driver Disk? Customers running a Citrix Hypervisor 8.x release who use Broadcomm's bnxten driver and wish to use the latest version of the following: Driver Module| Version ---|--- bnxten| 1.10.0216.0.119.0 Issues Resolved In this Driver Disk Includes general enhancements...