1139 matches found
Citrix Endpoint Management (aka XenMobile Server) 10.16.0 Rolling Patch 5
Package name: xms10.16.0.10551.bin For: XenMobile Server 10.16.0 Deployment type: On-premises only Replaces: xms10.16.0.10427.bin, xms10.16.0.10318.bin, xms10.16.0.10205.bin, xms10.16.0.10108.bin Date: April 2025 Languages supported: English US Important notes about this update As a best practice...
The vulnerability of Zyxel CPE series network device microprogramming software lies in the use of rigidly encrypted login credentials, which allows attackers to execute arbitrary codes.
The vulnerability of Zyxel network device software of the CPE series is related to the use of rigidly encrypted login credentials. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely, using the default login credentials...
Daas unable to create host connection with error: "URL invalid"
Unable to create a host connection to AWS EC2 and on-premises hypervisors XenServer, VMWare, etc. with invalid URL or authentication failure when a proxy has been configured for the Network Service account...
TRIPLESTRENGTH Hits Cloud for Cryptojacking, On-Premises Systems for Ransomware
Google on Wednesday shed light on a financially motivated threat actor named TRIPLESTRENGTH for its opportunistic targeting of cloud environments for cryptojacking and on-premise ransomware attacks. "This actor engaged in a variety of threat activity, including cryptocurrency mining operations on...
The vulnerability of Microsoft On-Premises Data Gateway local servers, related to incorrect authentication, allows attackers to disclose protected information.
The vulnerability of the Microsoft On-Premises Data Gateway local database is related to incorrect authentication. Exploiting this vulnerability could allow a malicious actor, operating remotely, to disclose protected information...
CVE-2025-21403
On-Premises Data Gateway Information Disclosure Vulnerability...
CVE-2025-21403
On-Premises Data Gateway Information Disclosure Vulnerability...
CVE-2025-21403
Technical details about CVE-2025-21403 are not provided in the connected documents. Public sources reference an information disclosure vulnerability in the On-Premises Data Gateway with a CVSS v3.1 base score of 6.4, but no specifics on affected versions or fixes are included here.
CVE-2025-21403 On-Premises Data Gateway Information Disclosure Vulnerability
...
CVE-2025-21403 On-Premises Data Gateway Information Disclosure Vulnerability
...
On-Premises Data Gateway Information Disclosure Vulnerability
...
Arcadyan Meteor 2 CPE 安全漏洞
Arcadyan Meteor 2 CPE is a high-end home integrated access device from China Smart Arcadyan. A security vulnerability exists in the Arcadyan Meteor 2 CPE FG360 Firmware ETV version 2.10. An attacker can exploit the vulnerability to execute arbitrary code via a specially crafted request...
Citrix Endpoint Management (aka XenMobile Server) 10.16.0 Rolling Patch 4
Package name: xms10.16.0.10427.bin For: XenMobile Server 10.16.0 Deployment type: On-premises only Replaces: xms10.16.0.10318.bin, xms10.16.0.10205.bin, xms10.16.0.10108.bin Date: December 2024 Languages supported: English US Important notes about this update As a best practice, Citrix recommends...
Citrix Endpoint Management (aka XenMobile Server) 10.15.0 Rolling Patch 9
Package name: xms10.15.0.10915.bin For: XenMobile Server 10.15.0 Deployment type: On-premises only Replaces: xms10.15.0.10808.bin, xms10.15.0.10731.bin, xms10.15.0.10624.bin, xms10.15.0.10517.bin, xms10.15.0.10417.bin, xms10.15.0.10327.bin, xms10.15.0.10220.bin, and xms10.15.0.10125.bin Date:...
The vulnerabilities of microprogrammed software in Wi-Fi transceivers, Wi-Fi amplifiers, Fiber ONTs, DSL/Ethernet CPE routers allow attackers to cause service interruptions.
The vulnerability of microprogrammed software in Wi-Fi transceivers, Wi-Fi amplifiers, Fiber ONTs, and DSL/Ethernet CPE routers lies in the fact that the operation data is exposed beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures...
CVE-2024-38324
IBM Storage Defender 2.0.0 through 2.0.7 on-prem defender-sensor-cmd CLI does not validate server name during registration and unregistration operations which could expose sensitive information to an attacker with access to the system...
Security Updates for Microsoft Dynamics 365 (on-premises) (September 2024)
The Microsoft Dynamics 365 on-premises is missing security updates. It is, therefore, affected by a cross-site scripting XSS vulnerability. The vulnerability exists due to improper validation of user-supplied input before returning it to users. An authenticated, remote attacker can exploit this, ...
CVE-2024-43476
Microsoft Dynamics 365 on-premises Cross-site Scripting Vulnerability...
