Product update: Virtuozzo 6.0 Update 12 Hotfix 5 (6.0.12-3672)

The new packages for Virtuozzo 6.0.12 introducing a usability bug fix. Vulnerability id: PSBM-60976 Lack of VNC client capabilities check on host could result in unsupported data being sent to VNC client leading to a disconnection from host with error...

Product security update: Virtuozzo Automator 6.1 Update 2 Hotfix 3

The new packages for Virtuozzo Automator 6.1 introducing a new feature, a security fix, and usability bug fixes for VA Agent for Linux. Vulnerability id: PVA-27270 In cases when multiple containers were processed in a single task by external tools like 'vzabackup', Power Panel of any container...

Citrix XenServer Multiple Vulnerabilities (CTX220771)

The version of Citrix XenServer running on the remote host is missing a security hotfix. It is, therefore, affected by the following vulnerabilities : - A flaw exists in the blitregionisunsafe function within file hw/display/cirrusvga.c when handling a backward mode bitblt copy. A guest attacker...

Plone CMS < 5.0.5 Information Disclosure Vulnerability

Plone CMS is prone to an information disclosure vulnerability. Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software...

Product security update: Virtuozzo 6.0 Update 12 Hotfix 4

The new packages for Virtuozzo 6.0.12 introducing security fixes as well as stability bug fixes. Vulnerability id: PSBM-60778 Possible crash in memcpyfromiovecend triggered from inside container. Vulnerability id: PSBM-59962 Improved isolation for neighbor table settings...

Plone CMS < 5.0.5 Privilege Escalation Vulnerability

Plone CMS is prone to a privilege escalation vulnerability in WebDAV requests. Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program ...

Plone 5.0.5 Cross Site Scripting

Security Advisory - Curesec Research Team 1. Introduction Affected Product: Plone 5.0.5 Fixed in: Hotfix 20170117 Fixed Version Link: https://plone.org/security/hotfix/20170117 Vendor Contact: [email protected] Vulnerability Type: XSS Remote Exploitable: Yes Reported to vendor: 09/05/2016...

PT-2017-16333 · Sendquick +1 · Sendquick Entera +1

Name of the Vulnerable Software and Affected Versions: SendQuick Entera versions prior to 2HF16 Avera versions prior to 2HF16 Description: An issue was discovered where the application failed to check the access control of the request, which could result in an attacker being able to shutdown the...

EMC Avamar ADS / AVE 7.3.0.x < 7.3.0 Hotfix 268253 / 7.3.1.x < 7.3.1 Hotfix 272363 Incorrect File Ownership Local Privilege Escalation (ESA-2016-146)

According to its self-reported version number, the EMC Avamar Data Store ADS or Avamar Virtual Edition AVE software running on the remote host is a version prior to 7.3.0 Hotfix 268253 7.3.0.233 or prior to 7.3.1 Hotfix 272363 7.3.1.125. It is, therefore, affected by a local privilege escalation...

Product security update: Virtuozzo 6.0 Update 12 Hotfix 2 (6.0.12-3658)

The new packages for Virtuozzo 6.0 introducing a security fix. Vulnerability id: PSBM-58425 A vulnerability within vzpkg could allow a malicious user to perform a basic symlink attack resulting in files being moved outside of the container and onto the host file system. The issue only affected...

EMC Avamar Data Store / Virtual Edition 7.3.1 / 7.3.0 Privilege Escalation Vulnerability

Exploit for windows platform in category web applications ESA-2016-146: EMC Avamar Data Store and Avamar Virtual Edition Privilege Escalation Vulnerability EMC Identifier: ESA-2016-146 CVE Identifier: CVE-2016-8214 Severity Rating: CVSSv3 Base Score: 6.7 AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H Affect...

R77.30, R77.20 Security hotfix for DLP and Threat Extraction blades

...

Description of the cumulative update for Office Communications Server 2007 R2, Unified Communications Managed API 2.0 Core Redist 64-bit: January, 2012

Describes the cumulative update for Microsoft Office Communications Server 2007 R2, Unified Communications Managed API 2.0 Core Redist 64-bit that is dated January 2012.SummaryThis article describes the cumulative update for Microsoft Office Communications Server 2007 R2, Unified Communications...

Description of the cumulative update for Office Communications Server 2007 R2, Core Components: September 2011

Describes the cumulative update for Office Communications Server 2007 R2, Core Component that is dated September 2011.SummaryThis article describes the cumulative update for Microsoft Office Communications Server 2007 R2, Core Component that is dated September 2011. ResolutionUpdate package...

MS12-025: Description of the security update for the .NET Framework 2.0 Service Pack 2 on Windows Vista Service Pack 2 and Windows Server 2008 Service Pack 2: April 10, 2012

MS12-025: Description of the security update for the .NET Framework 2.0 Service Pack 2 on Windows Vista Service Pack 2 and Windows Server 2008 Service Pack 2: April 10, 2012 Important In response to customer feedback that we received after the original release of this update on April 10, 2012, th...

FIX: Visual Studio 2010 crashes when you try to open a build report in Build Explorer

FIX: Visual Studio 2010 crashes when you try to open a build report in Build Explorer Symptoms Consider the following scenario: You connect to a Microsoft Team Foundation Server TFS 2008 server in Visual Studio 2010 Service Pack 1 SP1. You double-click a build in Build Explorer to try to open a...

A hotfix rollup package (build 4.1.3419.0) is available for Forefront Identity Manager 2010 R2

A hotfix rollup package build 4.1.3419.0 is available for Forefront Identity Manager 2010 R2 Introduction A hotfix rollup package build 4.1.3419.0 is available for Microsoft Forefront Identity Manager FIM 2010 R2. This hotfix rollup package resolves some issues that are described in the "More...

"STOP: 0x0000007E" error occurs when you write some data onto a CD or DVD in Windows Server 2008 R2 or in Windows 7

"STOP: 0x0000007E" error occurs when you write some data onto a CD or DVD in Windows Server 2008 R2 or in Windows 7 Not sure if this is the right fix? We've added this issue to our memory dump diagnostic which can confirm. Symptoms When you try to write some data onto a CD or DVD on a computer th...

Autodesk Design Review < 2013 Hotfix 3 Multiple RCE

The version of Autodesk Design Review installed on the remote Windows host is prior to 2013 Hotfix 3. It is, therefore, affected by the following vulnerabilities : - A buffer overflow condition exists when handling FLI files due to improper validation of user-supplied input. An unauthenticated,...

F5 Networks BIG-IP : OpenSSH vulnerability (K14845276)

When SSHD tries to authenticate a non-existing user, it will pick up a fake password structure hard-coded in the SSHD source code. An attacker can measure timing information to determine if a user exists when verifying a password. CVE-2016-6210 C Tenable Network Security, Inc. The descriptive tex...