UBUNTU-CVE-2024-41082

In the Linux kernel, the following vulnerability has been resolved: nvme-fabrics: use reserved tag for reg read/write command In some scenarios, if too many commands are issued by nvme command in the same time by user tasks, this may exhaust all tags of adminq. If a reset nvme reset or IO timeout...

Multiple vulnerabilities in FutureNet NXR series, VXR series and WXR series

Overview FutureNet NXR series, VXR series and WXR series provided by Century Systems Co., Ltd. contain multiple vulnerabilities listed below. Initialization of a Resource with an Insecure Default CWE-1188 - CVE-2024-31070 Active Debug Code CWE-489 - CVE-2024-36475 OS Command Injection CWE-78 -...

PT-2024-37827 · Delphix · Delphix Data Control Tower

Name of the Vulnerable Software and Affected Versions: Delphix Data Control Tower DCT versions prior to 19.0.0 Description: A flaw in Delphix Data Control Tower results in broken authentication through the enable-scale-testing functionality of the application. Recommendations: For versions prior ...

CVE-2024-6727: Improper Access Control

A flaw in versions of Delphix Data Control Tower DCT prior to 19.0.0 results in broken authentication through the enable-scale-testing functionality of the application...

SAP Enable Now Authorization Issues Vulnerability

SAP Enable Now is a collaborative content creation, management and sharing platform from SAP. The platform is primarily used for e-learning and training in SAP and non-SAP systems. SAP Enable Now suffers from an authorization issue vulnerability that stems from a lack of authorization checking,...

SUSE CVE-2022-48849

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: bypass tiling flag check in virtual display case v2 vkms leverages common amdgpu framebuffer creation, and also as it does not support FB modifier, there is no need to check tiling flags when initing framebuffer when...

SUSE CVE-2024-39502

In the Linux kernel, the following vulnerability has been resolved: ionic: fix use after netifnapidel When queues are started, netifnapiadd and napienable are called. If there are 4 queues and only 3 queues are used for the current configuration, only 3 queues' napi should be registered and...

Citrix DAAS Local Host Cache

Introduction This article is a summary of the top support articles related to Local Host Cache / High Availability mode for Citrix Desktops-as-a-Service DaaS Top Support Knowledge Content CTX312157 - Citrix DaaS in an Outage State and Local Host Cache CTX272155 - Enable Local Host Cache with...

Printing with the Mac 10.x ICA Client Explained

This article provides a brief overview of the printing architecture with the 10.x versions of the Mac ICA Client. Background The Mac 10.x ICA Client is a feature-rich client offering. Many of the same features found with Win32 clients/plug-ins. This includes the ability to autocreate all of the...

How to Enable Receiver Logging to Troubleshoot StoreFront Activation/Provisioning

This article describes how to enable Receiver Logging to troubleshoot StoreFront store Activation/ Provisioning in Citrix Receiver for Windows...

DEBIAN-CVE-2024-39502

In the Linux kernel, the following vulnerability has been resolved: ionic: fix use after netifnapidel When queues are started, netifnapiadd and napienable are called. If there are 4 queues and only 3 queues are used for the current configuration, only 3 queues' napi should be registered and...

CVE-2024-39596

Due to missing authorization checks, SAP Enable Now allows an author to escalate privileges to access information which should otherwise be restricted. On successful exploitation, the attacker can cause limited impact on confidentiality of the application...

CVE-2024-34692

Due to missing verification of file type or content, SAP Enable Now allows an authenticated attacker to upload arbitrary files. These files include executables which might be downloaded and executed by the user which could host malware. On successful exploitation an attacker can cause limited...

CVE-2024-34692 [CVE-2024-34692] Unrestricted File upload vulnerability in SAP Enable Now

Due to missing verification of file type or content, SAP Enable Now allows an authenticated attacker to upload arbitrary files. These files include executables which might be downloaded and executed by the user which could host malware. On successful exploitation an attacker can cause limited...

CVE-2024-34692

CVE-2024-34692 concerns SAP Enable Now. The connected documents confirm an authentication requirement and a flaw where missing verification of file type or content allows an attacker to upload arbitrary files, including executables, which may be downloaded and executed by users, potentially hosti...

CVE-2024-34692 [CVE-2024-34692] Unrestricted File upload vulnerability in SAP Enable Now

Due to missing verification of file type or content, SAP Enable Now allows an authenticated attacker to upload arbitrary files. These files include executables which might be downloaded and executed by the user which could host malware. On successful exploitation an attacker can cause limited...

CVE-2024-39596 [CVE-2024-39596] Missing Authorization check vulnerability in SAP Enable Now

Due to missing authorization checks, SAP Enable Now allows an author to escalate privileges to access information which should otherwise be restricted. On successful exploitation, the attacker can cause limited impact on confidentiality of the application...

CVE-2024-39596

CVE-2024-39596 describes an authorization issue in SAP Enable Now where missing authorization checks allow an author to escalate privileges to access information that should be restricted. The reported impact is limited confidentiality impact, with a CVSS v3.1 base score of 4.3 (MEDIUM) and netwo...

CVE-2024-39596 [CVE-2024-39596] Missing Authorization check vulnerability in SAP Enable Now

Due to missing authorization checks, SAP Enable Now allows an author to escalate privileges to access information which should otherwise be restricted. On successful exploitation, the attacker can cause limited impact on confidentiality of the application...

CVE-2024-34692: Unrestricted Upload of File with Dangerous Type

Due to missing verification of file type or content, SAP Enable Now allows an authenticated attacker to upload arbitrary files. These files include executables which might be downloaded and executed by the user which could host malware. On successful exploitation an attacker can cause limited...