753 matches found
Code injection
The WP Maintenance Mode plugin before 2.0.7 for WordPress allows remote authenticated "site administrator" users to execute arbitrary PHP code throughout a multisite network...
Design/Logic Flaw
The WP Maintenance Mode plugin before 2.0.7 for WordPress allows remote authenticated subscriber users to bypass intended access restrictions on changes to plugin settings...
CVE-2018-20155
CVE-2018-20155 affects the WordPress WP Maintenance Mode plugin prior to version 2.0.7. The vulnerability allows remote authenticated subscriber users to bypass intended access restrictions on changes to plugin settings, exposing a flaw in authorization for configuration changes. The issue is doc...
CVE-2018-20154
CVE-2018-20154 affects the WordPress WP Maintenance Mode plugin prior to 2.0.7. The vulnerability allows remote authenticated users to disclose all subscriber email addresses, constituting an information-disclosure flaw in the plugin’s handling of subscriber data. The impact is confined to partia...
CVE-2018-20156
CVE-2018-20156 affects the WordPress WP Maintenance Mode plugin (before 2.0.7). A remote authenticated site administrator can execute arbitrary PHP code across a multisite network. Public sources confirm this plugin version before 2.0.7 is vulnerable; exploitation status is not detailed in the pr...
CVE-2018-20154
The WP Maintenance Mode plugin before 2.0.7 for WordPress allows remote authenticated users to discover all subscriber e-mail addresses...
CVE-2018-20155
The WP Maintenance Mode plugin before 2.0.7 for WordPress allows remote authenticated subscriber users to bypass intended access restrictions on changes to plugin settings...
CVE-2018-20156
The WP Maintenance Mode plugin before 2.0.7 for WordPress allows remote authenticated "site administrator" users to execute arbitrary PHP code throughout a multisite network...
Online upgrade of Spectrum Scale security update packages for a Db2 pureScale cluster
Summary While the best practice for upgrading Spectrum Scale package level is through the Db2 fixpack, updating Spectrum Scale security update packages outlined in Db2 Security bulletins requires a manual installation procedure. This document contains instructions on how to apply Spectrum Scale...
How to Delete Hosting Connection configured in Citrix Studio
Deleting a connection can result in the deletion of large numbers of machines and loss of data. Ensure that user data on affected machines is backed up or no longer required. Before deleting a connection, ensure that: All users are logged off from the machines stored on the connection. No...
Magento Backups Cross Site Request Forgery
DefenseCode Security Advisory Magento Backups Cross-Site Request Forgery Advisory ID: DC-2018-03-001 Advisory Title: Magento Backups Cross-Site Request Forgery Advisory URL: http://www.defensecode.com/advisories.php Software: Magento Version: Magento Open Source prior to 1.9.3.8, Magento Commerce...
[SECURITY] [DLA 1119-1] otrs2 security update
Package : otrs2 Version : 3.3.18-1deb7u1 CVE ID : CVE-2014-1695 CVE-2014-2553 CVE-2014-2554 CVE-2017-14635 Debian Bug : 876462 An attacker who is logged into OTRS, a Ticket Request System, as an agent with write permissions for statistics can inject arbitrary code into the system. This can lead t...
Moderate: Red Hat Enhancement Advisory: Red Hat Virtualization Manager (ovirt-engine) 4.1.4
An update is now available for Red Hat Virtualization Manager. The Red Hat Virtualization Manager is a centralized management platform that allows system administrators to view and manage virtual machines. The Manager provides a comprehensive range of features including search capabilities,...
XenServer- Server are in maintenance mode
XenServer are not able to connect to XenCenter...
The remote server returned an error: (500) Internal Server Error
If you see "The remote server returned an error: 500 Internal Server Error" in any of the Unidesk failure messages, it means there is a problem with an ESX host. Keep in mind that vSphere will route filesystem requests to any available ESX host that has the requested VMFS mounted, including ones...
XAPI Keeps Maintenance Mode For A Long Time After Restarting XenServer
XAPI keeps maintenance mode long time after restarting XenServer every time. This issue is happening from XenServer env was configured first. XAPI can't create network connection to other pool member and xenbr0 raise a network error. Sep 10 19:36:08 XXXX fe: 5481 /sbin/ip addr add...
Update Rollup 4 for System Center 2012 R2 Virtual Machine Manager
Update Rollup 4 for System Center 2012 R2 Virtual Machine Manager Introduction This article describes the issues that are fixed in Update Rollup 4 for Microsoft System Center 2012 R2 Virtual Machine Manager VMM. There are two updates available for System Center 2012 R2 Virtual Machine Manager. On...
RHEL 6 : Virtualization Manager (RHSA-2016:1929)
An update for org.ovirt.engine-root is now available for RHEV Manager version 3.6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
Error: "Server Still Booting" and XenServer not exiting maintenance mode after unexpected shutdown
After an unexpected shutdown or restart, your XenServer host might experience of the following issues: Hostswith more than 100 days uptime and local storage attached when rebooted can't connect to the local storage. The host doesnot come out ofmaintenance mode. When you try to exit the server fro...
