Citrix XenServer Multiple Security Updates (CTX230138)

A number of security vulnerabilities have been identified in Citrix XenServer that may allow a malicious administrator of an HVM guest VM to compromise the host. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by t...

Product update: Virtuozzo 7.0 Update 6 Hotfix 1 (7.0.6-678)

The Hotfix 1 for Virtuozzo 7.0 Update 6 provides stability and usability bug fixes. Vulnerability id: PSBM-72443 Migration of a VM with two HDDs from Virtuozzo 6 to 7 could fail due to a libvirt conversion failure. Vulnerability id: PSBM-77096 vstorage-mount could crash under certain conditions d...

Check Point Gaia Operating Bash Code Injection (sk102673)(SHELLSHOCK)

The remote host is running a version of Gaia OS which is affected by issues related to the SHELLSHOCK set of vulnerabilities in bash. An error in the bash functionality that evaluates specially formatted environment variables passed to it from another environment, which may result in remote code...

Check Point Gaia Operating Security and Stability Update (sk100431)

The remote host is running a version of Gaia OS which is affected by an issue where system stability may be affected by certain traffic conditions. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid104996; scriptversion"$Revision: 1.1 $"; scriptcvsdate"$Date: 2017/12/04...

SolarWinds Orion NPM 12.0.15300.90 Multiple Vulnerabilities

SolarWinds Orion NPM is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Product update: Virtuozzo PowerPanel RTM Hotfix 4 (7.0.1-422)

The new packages for Virtuozzo PowerPanel introduce a new feature as well as usability fixes. Vulnerability id: PP-336 Unable to select key combinations from the "Send Key Combination" list when using Mozilla Firefox. Vulnerability id: PP-506 Update could fail due to a package repository conflict...

Philips IntelliSpace Cardiovascular System and Xcelera System Vulnerability

OVERVIEW Philips reported a vulnerability in the Philips’ IntelliSpace Cardiovascular and Xcelera cardiac image and information management systems. Philips has produced updates that mitigate this vulnerability in the affected products. This vulnerability could be exploited remotely. AFFECTED...

Intel Unite® App denial of service and information disclosure vulnerability

Summary: Vulnerability in Admin portal for Intel Unite ® App allows a remote attacker to cause information disclosure and/or denial of service. Description: A privilege escalation vulnerability was found, which allows an attacker with network access to gain access to the admin portal, which could...

Fedora 26 : kernel (2017-31d7720d7e)

The 4.13.12 update contains a number of important fixes across the tree. It contains security fixes for CVE-2017-16532 and CVE-2017-16538. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to...

HackerOne: Additional bypass allows SSRF for internal netblocks

It turns out there is another bypass in the privateaddresscheck gem. The gem does not include 0.0.0.0 in the exclusion list in the first place. irbmain:001:0 require 'privateaddresscheck' = true irbmain:002:0 PrivateAddressCheck.privateaddress?"0.0.0.0" = false I was able to bypass your filter by...

F5 Networks BIG-IP : Vim vulnerability (K22183127)

vim before patch 8.0.0056 does not properly validate values for the 'filetype', 'syntax' and 'keymap' options, which may result in the execution of arbitrary code if a file with a specially crafted modeline is opened. CVE-2016-1248 C Tenable Network Security, Inc. The descriptive text and package...

Bomgar Remote Support Local Privilege Escalation Vulnerability

Bomgar Remote Support suffers from a local privilege escalation vulnerability. Versions affected include 15.2.x before 15.2.3, 16.1.x before 16.1.5, and 16.2.x before 16.2.4. =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Advisory Name: Bomgar Remote Support - Loc...

Citrix XenServer Pin Count / Page Reference Grant Table Code Guest-to-Host Memory Corruption Vulnerability (CTX229057)

The version of Citrix XenServer installed on the remote host is missing a security hotfix. It is, therefore, affected by a memory corruption vulnerability as noted in the CTX229057 advisory. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid104174; scriptversion"1.8";...

Citrix XenServer Security Update (CTX229057)

A security vulnerability has been identified in Citrix XenServer that may allow a malicious administrator of a guest VM to compromise the host. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective righ...

Citrix XenServer Multiple Vulnerabilities (CTX228867)

The version of Citrix XenServer installed on the remote host is missing a security hotfix. It is, therefore, affected by multiple vulnerabilities as noted in the CTX228867 advisory. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid103927; scriptversion"1.7";...

Citrix XenServer Multiple Security Updates (CTX228867)

A number of security vulnerabilities have been identified in Citrix XenServer that may allow a malicious administrator of a guest VM to compromise the host. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

NXP Semiconductors MQX RTOS contains multiple vulnerabilities

Overview The NXP Semiconductors MQX RTOS prior to version 5.1 contains a buffer overflow in the DHCP client, which may lead to memory corruption allowing an attacker to execute arbitrary code, as well as an out of bounds read in the DNS client which may lead to a denial of service. Description Th...

Product update: Virtuozzo Automator 7.0 Update 2 Hotfix 3 (VA MN: 7.0.2-510, VA Agent: 7.0.2-258)

This hotfix for Virtuozzo Automator 7.0.2 provides new features as well as stability and usability bug fixes. Vulnerability id: PVA-34527 Alert reason would not be shown on clicking the alert icon on the virtual environment or hardware node summary page if the corresponding event had already been...

Product update: Virtuozzo 7.0 Update 5 Hotfix 4 (7.0.5-656)

The Hotfix 4 for Virtuozzo 7.0 Update 5 provides stability bug fixes. Vulnerability id: PSBM-70646 Actual grace period was shorter than the declared 259200 seconds. Vulnerability id: PSBM-73164 Increased yum lock timeout in vz-qemu-engine-updater to provide for future major updates. Vulnerability...

SolarWinds Network Performance Monitor 12.0.15300.90 Cross Site Scripting Vulnerability

Exploit for windows platform in category dos / poc ------------------------------------------------------------- Vulnerability type: Persistent Cross-Site Scripting ------------------------------------------------------------- Credit: Andy Tan CVE ID: CVE-2017-9537...