One Identity Cloud Access Manager Cross-Site Request Forgery Vulnerability

One Identity Cloud Access Manager CAM is a Web-based access management solution from US-based One Identity. The product supports single sign-on, multi-factor authentication, access control and auditing. A cross-site request forgery vulnerability exists in One Identity CAM versions prior to 8.1.4...

PT-2019-17977 · Forcepoint · Forcepoint Email Security

Name of the Vulnerable Software and Affected Versions: Forcepoint Email Security versions 8.5 through 8.5.3 Description: A reported issue allows for cross-site scripting XSS in the software. Recommendations: For Forcepoint Email Security versions 8.5 through 8.5.3, apply the relevant hotfix to...

Cross site request forgery (csrf)

One Identity Cloud Access Manager before 8.1.4 Hotfix 1 allows CSRF for logout requests...

Product update: Virtuozzo 6.0 Update 12 Hotfix 47 (6.0.12-3751)

This update provides a stability and usability fix. Vulnerability id: PSBM-48818 prlbackupclient could continue running even after prlbackupserver had exited. This could prevent further backups from being created...

Security Advisory 0042

Security Advisory 0042 PDF Date: October 9th, 2019 Version: 1.0 Revision | Date | Changes ---|---|--- 1.0 | October 9th, 2019 | Initial Release The CVE-IDs tracking this issue are CVE-2019-14810. CVSSv3 Base Score: 5.9 AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H Description This advisory is to document a...

CVE-2019-11656

Stored XSS vulnerability in Micro Focus ArcSight Logger, affects versions prior to Logger 6.7.1 HotFix 6.7.1.8262.0. This vulnerability could allow Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

Product update: Virtuozzo 7.0 Update 11 Hotfix 2 (7.0.11-304)

The Hotfix 2 for Virtuozzo 7.0.11 fixes a usability issue. Vulnerability id: PSBM-98041 Firewalld failed to start in a CentOS 7.7 container due to a firewalld patch that changed how 'nfconntrack' was loaded...

Incorrect Replica Counters in Monthly Cloud Connect License Usage Report

Challenge Automated monthly license usage reports generated by Veeam Cloud Connect display an unexpected number of replicated VMs and licensed instances. At the same time, Get-VBRCloudTenant -Name "TenantName" PowerShell cmdlet returns proper numbers. Cause Miscalculations are caused by a bug in...

Description of the security update for the information disclosure vulnerability in Microsoft Visual Studio 2015 Update 3: September 10, 2019

None None...

Selio - Real Estate Directory <= 1.1 - SQL Injection & Persistent XSS

----- SQL Injection: ----- Vulnerable 'id' parameter is https://listing-themes.com/selio-wp/wp-admin/admin.php?page=ownlistingaddlisting=21 ----- Persistent XSS: ----- You need a new user account, then go to any property listing on the website and use 'ENQUIRY FORM' on the right sidebar. Or you...

Argument Injection - CVE-2019-15000

Bitbucket Server & Bitbucket Data Center had an argument injection vulnerability, allowing an attacker to inject additional arguments into Git commands, which could lead to remote code execution. Remote attackers can exploit this argument injection vulnerability if they are able to access a Git...

Argument Injection - CVE-2019-15000

Bitbucket Server & Bitbucket Data Center had an argument injection vulnerability, allowing an attacker to inject additional arguments into Git commands, which could lead to remote code execution. Remote attackers can exploit this argument injection vulnerability if they are able to access a Git...

Product update: Virtuozzo 7.0 Update 11 Hotfix 1 (7.0.11-303)

The Hotfix 1 for Virtuozzo 7.0.11 adds a new feature...

CVE-2019-19019

An issue was discovered in TitanHQ WebTitan before 5.18. It contains a Remote Code Execution issue through which an attacker can execute arbitrary code as root. The issue stems from the hotfix download mechanism, which downloads a shell script via HTTP, and then executes it as root. This is...

Backup to Tape Job to the HPE LTO tape drives fails with "Tape error: '1117'" after upgrade to Veeam Backup & Replication 9.5 Update 4b

Challenge Backup and other operations to HPE LTO tape drives may constantly fail after installation of Veeam Backup & Replication 9.5 Update 4b 9.5.4.2866. Veeam fails to connect to the tape drive and returns the following errors: 18.07.2019 15:49:24 Warning TapeDrive alert: The tape drive has a...

CVE-2019-1010208

IDRIX, Truecrypt Veracrypt, Truecrypt Prior to 1.23-Hotfix-1 Veracrypt, all versions Truecrypt is affected by: Buffer Overflow. The impact is: Minor information disclosure of kernel stack. The component is: Veracrypt NT Driver veracrypt.sys. The attack vector is: Locally executed code, IOCTL...

Hardware encryption doesn't work on tape operations after update to 9.5 Patch 4b

Challenge After you update to patch 4b 9.5.4.2866, you may face the following encryption-related issues during the backup and restore procedures. Restore from tape backups made in the previous product versions with enabled hardware encryption may fail with the following error message: 11.07.2019...

McAfee Agent Elevation of Privilege Vulnerability

McAfee Agent MA is a set of client components from McAfee, Inc. that provides secure communications between ePolicy Orchestrator antivirus management platform and managed products. An elevation of privilege vulnerability exists in McAfee MA versions prior to 5.6.1 HF2. An attacker could exploit t...

Description of the security update for the information disclosure vulnerability in Microsoft Visual Studio 2012 Update 5: July 9, 2019

Description of the security update for the information disclosure vulnerability in Microsoft Visual Studio 2012 Update 5: July 9, 2019 Notice Starting on March 10, 2020, Microsoft Update is now offering this security update to additional versions of the Windows OS. Note This security update appli...

Transaction Log Backup Job for Microsoft SQL Server with AlwaysOn Availability Groups fails after installing CU15 for SQL Server 2017

Challenge When utilizing Always On Availability Groups on a Windows Server Failover Cluster using Microsoft SQL Server 2017 and after installing Cumulative Update package 15 CU15 for SQL Server 2017, Veeam Transaction Log Backup Jobs may fail with the following error message in the the statistics...