Micro Focus NetIQ eDirectory Open Redirect Vulnerability

Micro Focus NetIQ eDirectory is an identity management infrastructure platform from Micro Focus UK that combines identity management architecture and directory services technology. The platform provides authentication policies, data backup and recovery services, and data disaster recovery. An ope...

CVE-2018-7692

Unvalidated redirect vulnerability in in NetIQ eDirectory before 9.1.1 HF1...

CVE-2017-8992

HPE has identified a remote privilege escalation vulnerability in HPE CentralView Fraud Risk Management earlier than version CV 6.1. This issue is resolved in HF16 for HPE CV 6.1 or subsequent version...

CVE-2017-8991

HPE has identified a cross site scripting XSS vulnerability in HPE CentralView Fraud Risk Management earlier than version CV 6.1. This issue is resolved in HF16 for HPE CV 6.1 or subsequent version...

Citrix XenServer Multiple Vulnerabilities (CTX235748)

The version of Citrix XenServer running on the remote host is missing a security hotfix. It is, therefore, affected by multiple vulnerabilities. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid111378; scriptversion"1.6";...

Description of the security update for the remote code execution vulnerability in Visual Studio 2015 Update 3: July 10, 2018

None None...

Product update: Virtuozzo 7.0 Update 7 Hotfix 4 (7.0.7-474)

The Hotfix 4 for Virtuozzo 7.0 Update 7 provides a new feature...

Citrix XenServer Information Disclosure Vulnerability (CTX235225)

The version of Citrix XenServer running on the remote host is missing a security hotfix. It is, therefore, affected by an information disclosure vulnerability. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid110779; scriptversion"1.3"; scriptcvsdate"Date: 2019/11/04";...

Unpatched WordPress Flaw Gives Attackers Full Control Over Your Site

UPDATE—WordPress has released version 4.9.7 to finally patch this vulnerability that could allow remote attackers to gain full control over affected websites. You are recommended to install the latest available version of WordPress as soon as possible. Last week we received a tip about an unpatch...

Security Bulletin: IBM Prospect is affected by Expat XML Parser vulnerability (CVE-2013-0340)

Summary Prospect Core 8.0.7 Server is impacted by a denial of service vulnerability in Expat caused by the improper handling of internal entity expansion. Vulnerability Details CVEID: CVE-2013-0340 DESCRIPTION: Expat is vulnerable to a denial of service, caused by the improper handling of interna...

Security Bulletin: GNU C library (glibc) vulnerability affects IBM Security Network Protection (CVE-2015-0235)

Summary GNU C library glibc vulnerability that has been referred to as GHOST affects IBM Security Network Protection. Vulnerability Details CVEID: CVE-2015-0235 DESCRIPTION: The gethostbyname functions of the GNU C Library glibc are vulnerable to a buffer overflow. By sending a specially crafted,...

Security Bulletin: ClassLoader manipulation with Apache Struts affecting InfoSphere Identity Insight (CVE-2014-0114)

Summary There is a ClassLoader manipulation vulnerability in Apache Struts that is used by InfoSphere Identity Insight. Vulnerability Details CVEID: CVE-2014-0114 Apache Struts 1.X could allow a remote attacker to execute arbitrary code on the system, caused by the failure to restrict the setting...

CVE-2018-3665 - Citrix XenServer Security Update

Description of Problem An issue has been identified in certain CPUs that may allow code running in a guest VM to read data from another process in the same VM or another VM running on the same host. The data that can be read is limited to specific CPU registers rather than memory or disk storage;...

Product update: Virtuozzo 6.0 Update 12 Hotfix 27 (6.0.12-3708)

This hotfix provides stability and usability fixes. Vulnerability id: PSBM-80032 prlvzvncserverapp did not honor the --listen parameter that forced VNC server to listen on a specific IP address. Vulnerability id: PSBM-84831 Unable to install Virtuozzo 6 guest tools in a VM running Centos 7 with...

Zip Slip Vulnerability

Challenge Veeam is aware of the Zip Slip Vulnerability, which affects jobs with the guest file system indexing option enabled. Zip Slip is an arbitrary file overwrite vulnerability in multiple ZIP decompression algorithm implementations that affects thousands of software products across many...

Citrix XenServer Local Memory Disclosure Vulnerability (CTX235225)

The version of Citrix XenServer running on the remote host is missing a security hotfix. It is, therefore, affected by a local memory disclosure vulnerability. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid110265; scriptversion"1.7";...

Important product update: Virtuozzo 7.0 Update 7 Hotfix 3 (7.0.7-461)

The Hotfix 3 for Virtuozzo 7.0 Update 7 provides security and stability fixes. Vulnerability id: CVE-2018-1087 A flaw was found in the way the Linux kernel's KVM hypervisor handled exceptions delivered after a stack switch operation via Mov SS or Pop SS instructions. During the stack switch...

Important product update: Fixes for CVE-2018-3639 and CVE-2018-1087 in virtual machines; Virtuozzo 6.0 Update 12 Hotfix 26 (6.0.12-3707)

This hotfix provides security fixes for the hypervisor part of Virtuozzo 6.0 Update 12. Vulnerability id: CVE-2018-1087 A flaw was found in the way the Linux kernel's KVM hypervisor handled exceptions delivered after a stack switch operation via Mov SS or Pop SS instructions. During the stack...

Tools update: Virtuozzo 6.0 Update 12 Hotfix 24 (6.0.12-3704)

This update provides new packages with a stability fix for Virtuozzo 6.0. Vulnerability id: PSBM-84570 After upgrading guest OS to CentOS 7.5, ploop-based containers with enabled second-level quotas could fail to start due to the failure of the 'quotacheck' binary from the updated 'quota' package...

Citrix XenServer Multiple Vulnerabilities (CTX234679)

The version of Citrix XenServer running on the remote host is missing a security hotfix. It is, therefore, affected by multiple vulnerabilities. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid109725; scriptversion"1.9";...