Ubuntu 20.04 LTS : Linux kernel (OEM) vulnerabilities (USN-4752-1)

The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4752-1 advisory. Daniele Antonioli, Nils Ole Tippenhauer, and Kasper Rasmussen discovered that legacy pairing and secure- connections pairing authentication in the...

Updates to Citrix VM Tools for Linux - For Citrix Hypervisor 8.2 CU 1

Who Should Read This Article? This information is for customers using Citrix Hypervisor 8.2 Cumulative Update 1 who have the Citrix VM Tools for Linux installed on their Linux VMs. The following table lists the latest version of the Citrix VM Tools for Linux for Citrix Hypervisor 8.2 Cumulative...

CloudBees Jenkins Libvirt Agents Plugin Cross-Site Request Forgery Vulnerability

Jenkins Libvirt Agents is Jenkins open source an application plugin . The plug-in is used to add libvirt hypervisor agent support. A cross-site request forgery vulnerability exists in Jenkins Libvirt Agents Plugin 1.9.0 and earlier versions. An attacker could exploit this vulnerability to stop th...

Hypervisor - Slave host gets disconnected from the pool

XS host gets disconnected from the pool and shows red dot XS4 is showing disconnected from the pool...

CVE-2021-21627

A cross-site request forgery CSRF vulnerability in Jenkins Libvirt Agents Plugin 1.9.0 and earlier allows attackers to stop hypervisor domains...

CVE-2021-21627

A cross-site request forgery CSRF vulnerability in Jenkins Libvirt Agents Plugin 1.9.0 and earlier allows attackers to stop hypervisor domains...

CVE-2021-21627

A cross-site request forgery CSRF vulnerability in Jenkins Libvirt Agents Plugin 1.9.0 and earlier allows attackers to stop hypervisor domains...

Cross site request forgery (csrf)

A cross-site request forgery CSRF vulnerability in Jenkins Libvirt Agents Plugin 1.9.0 and earlier allows attackers to stop hypervisor domains...

CVE-2021-21627

CVE-2021-21627 is a CSRF vulnerability in Jenkins Libvirt Agents Plugin (versions

CVE-2021-21627

A cross-site request forgery CSRF vulnerability in Jenkins Libvirt Agents Plugin 1.9.0 and earlier allows attackers to stop hypervisor domains...

Xen 安全漏洞

Xen is an open source virtual machine monitor product from the University of Cambridge, UK. The product enables different and incompatible operating systems to run on the same computer and supports runtime migration to ensure uptime and avoid downtime. Xen has a security vulnerability that can be...

PT-2021-3505 · Xen +2 · Xen +2

Name of the Vulnerable Software and Affected Versions: Xen affected versions not specified Description: The issue is related to the implementation of paravirtualization PV mode in the Xen hypervisor, specifically with the use of the Indirect Branch Restricted Speculation IBRS mechanism. This coul...

Driver Disk for Intel ixgbe 5.9.4 - For Citrix Hypervisor 8.2 LTSR

Who Should Install this Driver Disk? Customers running a Citrix Hypervisor 8.2 LTSRrelease who use Intel's ixgbe driver and wish to use the latest version of the following: Driver Module| Version ---|--- ixgbe| 5.9.4 Issues Resolved In this Driver Disk Addresses a memory leak in the control domai...

CSRF vulnerability in libvirt-slave

libvirt-slave 1.9.0 and earlier does not require POST requests for a form submission endpoint, resulting in a cross-site request forgery CSRF vulnerability. This vulnerability allows attackers to stop hypervisor domains. libvirt-slave 1.9.1 requires POST requests for the affected HTTP endpoint...

Jenkins Libvirt Agents 跨站请求伪造漏洞

Jenkins Libvirt Agents is Jenkins open source an application plugin . The plug-in is used to add libvirt hypervisor agent support. A cross-site request forgery vulnerability exists in Jenkins Libvirt Agents Plugin 1.9.0 and earlier versions. An attacker could exploit this vulnerability to stop th...

PT-2021-14670 · Jenkins · Jenkins Libvirt Agents Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Libvirt Agents Plugin versions 1.9.0 and earlier Description: A cross-site request forgery CSRF vulnerability allows attackers to stop hypervisor domains. This issue arises because the plugin does not require POST requests for a form...

Security Bulletin: Multiple Vulnerabilities in IBM® Java SDK affect WebSphere Application Server January 2021 CPU

Summary There are multiple vulnerabilities in the IBM® SDK, Java™ Technology Edition that is shipped with IBM WebSphere Application Server. These might affect some configurations of IBM WebSphere Application Server Traditional, IBM WebSphere Application Server Liberty and IBM WebSphere Applicatio...

UBUNTU-CVE-2021-28039

An issue was discovered in the Linux kernel 5.9.x through 5.11.3, as used with Xen. In some less-common configurations, an x86 PV guest OS user can crash a Dom0 or driver domain via a large amount of I/O activity. The issue relates to misuse of guest physical addresses when a configuration has...

Parallels Desktop Toolgate Out-of-Bounds Access Elevation of Privilege Vulnerability

Parallels Desktop is a virtual machine software that runs on Mac computers. A security vulnerability exists in Parallels Desktop Toolgate that stems from a lack of proper validation of user-supplied data, which could lead to memory corruption. An attacker can exploit the vulnerability to execute...

Parallels Desktop Toolgate Integer Overflow Elevation of Privilege Vulnerability

Parallels Desktop is a virtual machine software that runs on Mac computers. A vulnerability in Parallels Desktop Toolgate, which lacks proper validation of user-supplied data, can be exploited by an attacker to escalate privileges and execute arbitrary code in the context of the hypervisor...