Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Uncanny Owl Tin Canny LearnDash Reporting before 3.4.4 allows authenticated remote attackers to inject arbitrary web script or HTML via the searchkey GET Parameter in TinCanContentListTable.php, message GET Parameter in licensing.php,...

The vulnerability of Cisco Firepower Management Center’s network interface card licensing service allows a hacker to trigger a service failure.

The vulnerability of the Cisco Firepower Management Center’s network interface licensing service is related to errors in resource management. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

GLPI 权限许可和访问控制问题漏洞

GLPI is an open source IT and asset management software for individual developers. The software provides a full-featured IT resource management interface that you can use to build databases to fully manage IT computers, monitors, servers, printers, network devices, phones, and even toner and ink...

Citrix Security Advisory for TCP/IP Reassembly Resource Exhaustion

Description of Problem Several vulnerabilities in TCP/IP reassembly commonly known as SegmentSmack and FragmentSmack have recently been disclosed. SegmentSmack is CVE-2018-5390 for Linux and CVE-2018-6922 for FreeBSD. FragmentSmack is CVE-2018-5391 for Linux and CVE-2018-6923 for FreeBSD. These...

Stack overflow

Visual Components owned by KUKA is a robotic simulator that allows simulating factories and robots in order toimprove planning and decision-making processes. Visual Components software requires a special license which can beobtained from a network license server. The network license server binds ...

Design/Logic Flaw

Visual Components owned by KUKA is a robotic simulator that allows simulating factories and robots in order toimprove planning and decision-making processes. Visual Components software requires a special license which can beobtained from a network license server. The network license server binds ...

Cisco Firepower Management Center DoS (cisco-sa-ftdfmc-dos-NjYvDcLA)

According to its self-reported version, Cisco Firepower Management Center is affected by a denial of service DoS vulnerability in its licensing service component due to improper handling of system resource values. An unauthenticated, remote attacker can exploit this issue, by sending specially...

Extended Security Updates (ESU) Licensing Preparation Package for Windows 7 SP1 and Windows Server 2008 R2 SP1

Extended Security Updates ESU Licensing Preparation Package for Windows 7 SP1 and Windows Server 2008 R2 SP1 Important: WSUS scan cab files will continue to be available for Windows 7 SP1 and Windows Server 2008 R2 SP1. If you have a subset of devices running these operating systems without ESU,...

Error: Citrix Licensing Manager could not complete the operation. If you are trying to allocate a license, go to My Account.

The error "Citrix Licensing Manager could not complete the operation. If you are trying to allocate a license, go toMy Account. For assistance, contact Citrix Customer Care" is returned after allocating a license using Citrix Licensing Manger...

Update for the Extended Security Updates (ESU) Licensing Preparation Package for Windows Server 2008 SP2

Update for the Extended Security Updates ESU Licensing Preparation Package for Windows Server 2008 SP2 WSUS scan cab files will continue to be available for Windows 7 SP1 and Windows Server 2008 R2 SP1. If you have a subset of devices running these operating systems without ESU, they might show a...

Extended Security Updates (ESU) Licensing Preparation Package for Windows Server 2008 SP2

Extended Security Updates ESU Licensing Preparation Package for Windows Server 2008 SP2 WSUS scan cab files will continue to be available for Windows 7 SP1 and Windows Server 2008 R2 SP1. If you have a subset of devices running these operating systems without ESU, they might show as non-compliant...

Release Information for Veeam ONE 10a

Challenge Release Information for Veeam ONE 10a build 10.0.2.1094. Cause Please make sure you are running version 9.5.0.3801 9.5 Update 3 or later prior to installing this update. You can check this under Windows Programs and Features. After upgrade, your build will be version 10.0.2.1094. Soluti...

Hello open source security! Managing risk with software composition analysis

When first learning to code many people start with a rudimentary “Hello World” program. Building the program teaches developers the basics of a language as they write the code required to display “Hello World” on a screen. As developers get more skilled, the complexity of the programs they build...

Multiple MobileIron Products Licensing Issues Vulnerabilities

MobileIron Core is a management console component of the MobileIron platform from MobileIron, Inc. The product supports the definition of security and management policies for devices, applications and content. A security vulnerability exists in MobileIron Core 10.6 and earlier and Connector 10.6...

Veeam Backup & Replication — Cannot find any supported licenses for current product version.

Challenge When attempting to install a license into Veeam Backup & Replication, the following error occurs: Cannot find any supported licenses for current product version. Cause This error most often occurs when the license file being installed is for an older version of Veeam Backup & Replicatio...

CVE-2020-3218

A vulnerability in the web UI of Cisco IOS XE Software could allow an authenticated, remote attacker with administrative privileges to execute arbitrary code with root privileges on the underlying Linux shell. The vulnerability is due to improper validation of user-supplied input. An attacker cou...

CVE-2020-3218

A vulnerability in the web UI of Cisco IOS XE Software could allow an authenticated, remote attacker with administrative privileges to execute arbitrary code with root privileges on the underlying Linux shell. The vulnerability is due to improper validation of user-supplied input. An attacker cou...

CVE-2020-3218 Cisco IOS XE Software Web UI Remote Code Execution Vulnerability

A vulnerability in the web UI of Cisco IOS XE Software could allow an authenticated, remote attacker with administrative privileges to execute arbitrary code with root privileges on the underlying Linux shell. The vulnerability is due to improper validation of user-supplied input. An attacker cou...

CVE-2020-3218 Cisco IOS XE Software Web UI Remote Code Execution Vulnerability

A vulnerability in the web UI of Cisco IOS XE Software could allow an authenticated, remote attacker with administrative privileges to execute arbitrary code with root privileges on the underlying Linux shell. The vulnerability is due to improper validation of user-supplied input. An attacker cou...

ABB Central Licensing System

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: ABB Equipment: Central Licensing System CLS Vulnerabilities: Information Exposure; Improper Restriction of XML External Entity Reference; Uncontrolled Resource Consumption; Permissions, Privilege,...