CVE-2020-15069

Sophos XG Firewall 17.x through v17.5 MR12 allows a Buffer Overflow and remote code execution via the HTTP/S Bookmarks feature for clientless access. Hotfix HF062020.1 was published for all firewalls running v17.x. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed...

PT-2020-14161 · Sophos · Sophos Firewall

Name of the Vulnerable Software and Affected Versions: Sophos XG Firewall versions 17.x through v17.5 MR12 Description: The issue is related to a buffer overflow flaw in the HTTP/S Bookmarks feature for clientless access, allowing remote code execution. A hotfix, HF062020.1, has been published fo...

Product release: Virtuozzo Infrastructure Platform 3.0 Update 5 Hotfix 3 (3.0.5-72)

This update provides a fix for the 3.0 to 3.5 upgrade procedure. Vulnerability id: VSTOR-34105 Upgrade from version 3.0 to 3.5 may fail in some cases due to the absence of an internal product file...

CVE-2020-14006

Solarwinds Orion with Web Console WPM 2019.4.1, and Orion Platform HF4 or NPM HF2 2019.4 allows XSS via a Responsible Team...

PT-2020-13833 · Solarwinds · Solarwinds Orion

Name of the Vulnerable Software and Affected Versions: Solarwinds Orion versions 2019.4.1 through 2019.4 with Web Console WPM and Orion Platform HF4 or NPM HF2 Description: The issue allows remote attackers to execute arbitrary code via a defined event. This can be achieved through command...

HPESBHF04008 rev.1 - HPE Systems Insight Manager (SIM), Remote Code Execution

Potential Security Impact: Remote: Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Systems Insight Manager for HP-UX v7.4, v7.5, v7.6 with Hotfix 63 or lower HPE Systems Insight Manager for Linux v7.4, v7.5, v7.6 with Hotfix 63 or lower HPE Systems Insight Manag...

Virtuozzo Hybrid Server 7.5 Update 1 Hotfix 3 (7.5.1-737)

The Hotfix 3 for Virtuozzo Hybrid Server 7.5 Update 1 provides a stability and usability bug fix. Vulnerability id: PSBM-130586 VM disk resize functionality could stop working for non-root users after upgrading to version 7.5.1...

Product update: Virtuozzo Automator 7.0 Update 2 Hotfix 11 (VA MN: 7.0.2-649, VA Agent: 7.0.2-372)

Hotfix 11 for Virtuozzo Automator 7.0.2 provides stability and usability fixes. Vulnerability id: PVA-37488 Changing VM's OS distribution via API calls could reset the 'cpulimit' and 'iolimit' values. Vulnerability id: PVA-37495 VA Agent did not return the 'counterioused' value. Vulnerability id:...

GHSA-3GW4-M5W7-V89C Uncontrolled Resource Consumption in Indy Node

Summary Indy Node has a bug in TAA handling code. The current primary can be crashed with a malformed transaction from a client, which leads to a view change. Repeated rapid view changes have the potential of bringing down the network. Discovery On May 18, Evernym's monitoring of Sovrin StagingNe...

Security Bulletin: IBM Prospect is affected by Expat XML Parser vulnerability (CVE-2019-15903)

Summary Prospect Server is affected by Expat XML parsing vulnarability CVE-2019-15903 which may result in a heap-based buffer over-read. Vulnerability Details CVEID: CVE-2019-15903 DESCRIPTION: In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to...

Description of the cumulative update for Lync 2010 Attendee - Administrator level installation: June 2012

Describes the cumulative update for Lync 2010 Attendee, Administrator level installation that is dated June 2012.SummaryThis article describes the issue that is fixed in the cumulative update for Microsoft Lync 2010 Attendee - Administrator level installation that is dated June 2012.This article...

Update Rollup 3 for System Center 2012 R2 Data Protection Manager

Update Rollup 3 for System Center 2012 R2 Data Protection Manager Introduction This article describes new features and issues that are fixed in Update Rollup 3 for Microsoft System Center 2012 R2 Data Protection Manager DPM. Additionally, this article contains the installation instructions for...

Issues that are fixed in System Center 2012 Data Protection Manager SP1 Update Rollup 5

Issues that are fixed in System Center 2012 Data Protection Manager SP1 Update Rollup 5 Introduction This article describes the issues that are fixed in Update Rollup 5 for Microsoft System Center 2012 Data Protection Manager Service Pack 1 SP1. Additionally, this article contains the installatio...

Virtuozzo Hybrid Server 7.5 Update 1 Hotfix 1 (7.5.1-734)

The Hotfix 1 for Virtuozzo Hybrid Server 7.5 Update 1 provides a new feature and a stability and usability bug fix. Vulnerability id: PSBM-129299 Version 1 ploop images of virtual environments created in Virtuozzo 6 and earlier could get corrupted after updating to Virtuozzo Hybrid Server 7.5.1...

McAfee VirusScan Enterprise < 8.8 Patch 14 Hotfix 116778 Privilege Escalation Vulnerability (SB10316)

The version of McAfee VirusScan Enterprise VSE installed on the remote Windows host is prior to 8.8 Patch 14 Hotfix 116778. It is, therefore, affected by a privilege escalation vulnerability. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid136668; scriptversion"1.4";...

Product update: Virtuozzo Automator 7.0 Update 2 Hotfix 10 (VA MN: 7.0.2-647, VA Agent: 7.0.2-367)

Hotfix 10 for Virtuozzo Automator 7.0.2 provides stability and usability fixes. Vulnerability id: PVA-37446 Unable to set "Advanced firewall mode with the default policy Drop" for containers. Vulnerability id: PVA-37477 VA Agent could consume 100% of one CPU. Vulnerability id: PVA-37479 VA Agent...

Security Advisory 0048

Security Advisory 0048 PDF Date: May 13, 2020 Version: 1.0 Revision | Date | Changes ---|---|--- 1.0 | May 13, 2020 | Initial Release The CVE-ID tracking this issue: CVE-2020-10188 CVSSv3 Base Score: 9.8 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Description: This security advisory documents the exposur...

Orchard Core RC1 Cross Site Scripting

Exploit Title: Orchard Core RC1 - Persistent Cross-Site Scripting Google Dork: "Orchardcms" Date: 2020-05-07 Exploit Author: SunCSR Sun Cyber Security Research Vendor Homepage: http://www.orchardcore.net/ Software Link: https://github.com/OrchardCMS/OrchardCore Version: RC1 Tested on: Windows CVE...

Orchard Core RC1 - Persistent Cross-Site Scripting Vulnerability

Exploit for asp platform in category web applications Exploit Title: Orchard Core RC1 - Persistent Cross-Site Scripting Google Dork: "Orchardcms" Exploit Author: SunCSR Sun Cyber Security Research Vendor Homepage: http://www.orchardcore.net/ Software Link: https://github.com/OrchardCMS/OrchardCor...

Orchard Core RC1 - Persistent Cross-Site Scripting

Exploit Title: Orchard Core RC1 - Persistent Cross-Site Scripting Google Dork: "Orchardcms" Date: 2020-05-07 Exploit Author: SunCSR Sun Cyber Security Research Vendor Homepage: http://www.orchardcore.net/ Software Link: https://github.com/OrchardCMS/OrchardCore Version: RC1 Tested on: Windows CVE...