SolarWinds Serv-U Managed File Transfer Web client Cross-Site Request Forgery Vulnerability

SolarWinds Serv-U Managed File Transfer Web client MFT is a file transfer client application from the American company SolarWinds. A cross-site request forgery vulnerability exists in the file upload feature of the SolarWinds Serv-U MFT Web client prior to version 15.1.6 Hotfix 2. An attacker can...

Abacus OAuth Login Cross-Site Scripting Vulnerability

Abacus OAuth Login is a single sign-on software from Abacus Switzerland. A cross-site scripting vulnerability exists in oauth/oauth2/v1/saml/ in version 201901r4201910210000 prior to Abacus OAuth Login R4 20.11.2019 Hotfix, which can be exploited by an attacker to execute JavaScript code in a...

CVE-2019-19381

oauth/oauth2/v1/saml/ in Abacus OAuth Login 201901r4201910210000 before prior to R4 20.11.2019 Hotfix allows Reflected Cross Site Scripting XSS via an error message...

Cross site scripting

oauth/oauth2/v1/saml/ in Abacus OAuth Login 201901r4201910210000 before prior to R4 20.11.2019 Hotfix allows Reflected Cross Site Scripting XSS via an error message...

CVE-2019-19381

Affected product: Abacus OAuth Login. Vulnerable component: oauth/oauth2/v1/saml/ handling. Root cause: reflected XSS triggered by error message in the login flow for version 2019_01_r4_20191021_0000 prior to R4. Impact: could allow execution of JavaScript in a user’s browser (client-side impact)...

Cumulative Update 27 for Microsoft Dynamics NAV 2018 (Build 41203)

Cumulative Update 27 for Microsoft Dynamics NAV 2018 Build 41203 This article applies to Microsoft Dynamics NAV 2018 for all countries and all language locales.A remote code execution vulnerability exists in Microsoft Dynamics NAV. A user who has the permission to access certain features that...

Cumulative Update 10 for Microsoft Dynamics 365 Business Central April'19 on-premises (Application Build 14.11.41204, Platform Build 14.0.41143)

None None...

Product release: Virtuozzo Infrastructure Platform 3.5 Update 1 Hotfix 1 (3.5.1-45)

This update provides an important bug fix for Backup Gateway. Vulnerability id: VSTOR-31604 Backup Gateway may be unstable...

Zyxel 0day Affects its Firewall Products, Too

On Monday, networking hardware maker Zyxel released security updates to plug a critical security hole in its network attached storage NAS devices that is being actively exploited by crooks who specialize in deploying ransomware. Today, Zyxel acknowledged the same flaw is present in many of its...

Virtuozzo Hybrid Server 7.5 Hotfix 3 (7.5.0-610)

The Hotfix 3 for Virtuozzo Hybrid Server 7.5 provides stability and usability bug fixes. Vulnerability id: PSBM-124766 VM's filesystem could remain frozen and non-working after backup. Vulnerability id: PSBM-125260 EZ templates are now installed and their post-install scripts are now run in the...

Virtuozzo Hybrid Server 7.5 Hotfix 2 (7.5.0-605)

The Hotfix 2 for Virtuozzo Hybrid Server 7.5 provides a new feature as well as stability and usability bug fixes. Vulnerability id: PSBM-124770 Ploop corruptions after updating to Virtuozzo Hybrid Server 7.5. Vulnerability id: PSBM-124714 libvirt could hang while reading large output from iptable...

CVE-2013-5687

RiskNet Acquirer before hotfix 6.0 b7+ADHOC-443 ApplicationServiceBean contains a service information disclosure...

Information disclosure

RiskNet Acquirer before hotfix 6.0 b7+ADHOC-443 ApplicationServiceBean contains a service information disclosure...

D-Link DIR-842 REVC Buffer Overflow Vulnerability

The D-Link DIR-842 REVC is a wireless router from AUO D-Link of Taiwan, China. A buffer overflow vulnerability exists in the D-Link DIR-842 REVC using firmware version v3.13B09 HOTFIX. The vulnerability originates when a network system or product performs an operation on memory without properly...

CVE-2013-5687

Technical details for CVE-2013-5687 are not publicly available in the provided documents. No affected product versions, root cause, impact, or fixes are disclosed here. Monitor for updates.

CVE-2013-5687

RiskNet Acquirer before hotfix 6.0 b7+ADHOC-443 ApplicationServiceBean contains a service information disclosure...

CVE-2020-8962

CVE-2020-8962 describes a stack-based buffer overflow in the D-Link DIR-842 REVC, caused by the use of strcpy for LOGINPASSWORD when handling a POST request to the /MTFWU endpoint (firmware v3.13B09 HOTFIX). The provided documents do not explicitly detail the impact beyond the overflow descriptio...

Product update: Virtuozzo 7.0 Update 12 Hotfix 3 (7.0.12-361)

The Hotfix 3 for Virtuozzo 7.0 Update 12 provides stability and usability bug fixes. Vulnerability id: PSBM-100126 Ploop is corrupted after node reboot repair image outgrows device size. Vulnerability id: PSBM-101150 vzstat does not show actual IO and IOPS load and limits. Vulnerability id:...

APSB20-08 Security update available for Adobe Experience Manager

Adobe has released security hotfixes for Adobe Experience Manager AEM. These hotfixes resolve a vulnerability in AEM versions 6.5 and 6.4 rated Important. Successful exploitation could result in a denial-of-service condition...

Symantec Mail Security for Exchange Live Update Priviledge Escalation Vulnerability (SYMSA1488)

The version of Symantec Mail Security for Exchange SMSMSE installed on the remote Windows host is affected by a privilege escalation vulnerability. An unauthenticated, remote attacker can exploit this to compromise the Live Update software application and gain elevated access to resources that ar...