Apple macOS 权限许可和访问控制问题漏洞

Apple macOS is a proprietary operating system developed by Apple Inc. for Mac computers. A vulnerability exists in macOS due to a permissions licensing and access control issue, which arises from the Tailspin component not properly applying security restrictions. 10.14.4 18E226, 10.14.4 18E227,...

VulnCheck KEV: CVE-2021-22893

Ivanti Pulse Connect Secure contains a use-after-free vulnerability that allow a remote, unauthenticated attacker to execute code via license services...

ADC Fails To Connect To ADM for Pooled Licensing

When trying to add the ADC to the ADM for Pooled Licensing, or CPU based licensing, or anything that uses ADM as the license server, you receive an errror. Error might be "Unable to connect to licenseserver" or "Registration of device failed"...

AM Live Vulnerability Management Conference Part 1: Full video in Russian + Timecodes in English

Hello all! 2 weeks ago I participated in the best online event fully dedicated to Vulnerability Management in Russia. It was super fun and exciting. Thanks to all the colleagues and especially to Lev Paley for the great moderation! I have talked out completely. Everything I wanted and the way I...

Citrix license files shows a warning symbol on the SA date in the Licensing tab on Studio

The Subscription advantage date for a license shows a warning symbol-...

Vulners Linux Audit API for Host Vulnerability Detection: Manual Auditing, Python Scripting and Licensing

Hello everyone! This episode will be about Vulners Linux Audit API, which allows you to detect vulnerabilities on a Linux host knowing only the OS version and installed packages. I had a similar post about this 4 years ago, but some details have changed, so I came back to this topic. Manual Audit...

Linux kernel code issue vulnerability

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A code issue vulnerability exists in the Linux kernel that arises from a lack of effective privilege licensing and access control measures in a networked system or product...

Huawei Smartphone Licensing Issues Vulnerabilities

Huawei Emui is an Android-based mobile operating system from China's Huawei.Honor Magic Ui is an Android-based mobile operating system from China's Honor. Huawei smartphones have a security vulnerability that can be exploited by attackers to gain access to low-sensitive information...

Microsoft Windows Licensing Issues Vulnerabilities

Microsoft Windows is an operating system for personal devices from Microsoft Corporation. There is a license issue vulnerability in Microsoft Windows, no information about this vulnerability is available at this time, please stay tuned to CNNVD or vendor announcements. The following products and...

Security Bulletin: NVIDIA GPU Display Driver - January 2021

NVIDIA has released a software security update for NVIDIA® GPU Display Driver. This update addresses issues that may lead to denial of service, escalation of privileges, data tampering, or information disclosure. To protect your system, download and install this software update from the NVIDIA...

Security update for privoxy (moderate)

openSUSE Security Update: Security update for privoxy Announcement ID: openSUSE-SU-2021:0006-1 Rating: moderate References: 1157449 Affected Products: openSUSE Leap 15.2 openSUSE Leap 15.1 An update that contains security fixes can now be installed. Description: This update for privoxy fixes the...

Microsoft Warns CrowdStrike of Hackers Targeting Azure Cloud Customers

New evidence amidst the ongoing probe into the espionage campaign targeting SolarWinds has uncovered an unsuccessful attempt to compromise cybersecurity firm Crowdstrike and access the company's email. The hacking endeavor was reported to the company by Microsoft's Threat Intelligence Center on...

CVE-2020-9439

Multiple cross-site scripting XSS vulnerabilities in Uncanny Owl Tin Canny LearnDash Reporting before 3.4.4 allows authenticated remote attackers to inject arbitrary web script or HTML via the searchkey GET Parameter in TinCanContentListTable.php, message GET Parameter in licensing.php,...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Uncanny Owl Tin Canny LearnDash Reporting before 3.4.4 allows authenticated remote attackers to inject arbitrary web script or HTML via the searchkey GET Parameter in TinCanContentListTable.php, message GET Parameter in licensing.php,...

The vulnerability of Cisco Firepower Management Center’s network interface card licensing service allows a hacker to trigger a service failure.

The vulnerability of the Cisco Firepower Management Center’s network interface licensing service is related to errors in resource management. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

GLPI 权限许可和访问控制问题漏洞

GLPI is an open source IT and asset management software for individual developers. The software provides a full-featured IT resource management interface that you can use to build databases to fully manage IT computers, monitors, servers, printers, network devices, phones, and even toner and ink...

Citrix Security Advisory for TCP/IP Reassembly Resource Exhaustion

Description of Problem Several vulnerabilities in TCP/IP reassembly commonly known as SegmentSmack and FragmentSmack have recently been disclosed. SegmentSmack is CVE-2018-5390 for Linux and CVE-2018-6922 for FreeBSD. FragmentSmack is CVE-2018-5391 for Linux and CVE-2018-6923 for FreeBSD. These...

Stack overflow

Visual Components owned by KUKA is a robotic simulator that allows simulating factories and robots in order toimprove planning and decision-making processes. Visual Components software requires a special license which can beobtained from a network license server. The network license server binds ...

Design/Logic Flaw

Visual Components owned by KUKA is a robotic simulator that allows simulating factories and robots in order toimprove planning and decision-making processes. Visual Components software requires a special license which can beobtained from a network license server. The network license server binds ...

Cisco Firepower Management Center DoS (cisco-sa-ftdfmc-dos-NjYvDcLA)

According to its self-reported version, Cisco Firepower Management Center is affected by a denial of service DoS vulnerability in its licensing service component due to improper handling of system resource values. An unauthenticated, remote attacker can exploit this issue, by sending specially...