iOS Receiver disconnects from session after one minute of activity

Citrix users using Receiver for iOS are disconnected from their Citrix session after working on the session by typing or clicking for around20-30 seconds. The users get the following error: "Cannot Connect. Check your network connection and try again. OK." If the users are not working on the...

Teams - Error "Your Admin has restricted Access to the New Teams" in ICA session

When launching New Teams within Remote PC / ICA session, it seems to logon fine the first time. But when the user logs out and logs back in again to Teams the second time and any subsequent attempt, they see the following error message: "Your Admin has restricted Access to the New Teams"...

CVE-2023-42219

Exim MTA vulnerability CVE-2023-42219 is described in the connected Malwarebytes entry as allowing network-adjacent attackers to disclose sensitive information on affected installations of Exim. The article also notes that Exim is not likely to fix CVE-2023-42219 and suggests mitigations such as ...

PT-2023-31782 · WordPress · Tcd Google Maps Plugin

Name of the Vulnerable Software and Affected Versions: TCD Google Maps plugin for WordPress versions up to, and including, 1.8 Description: The issue arises from insufficient input sanitization and output escaping on user-supplied attributes in the 'map' shortcode, allowing authenticated attacker...

Oracle Linux 7 : Unbreakable Enterprise kernel-container (ELSA-2023-13001)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-13001 advisory. - Bluetooth: btsdio: fix use after free bug in btsdioremove due to race condition Zheng Wang CVE-2023-1989 - netfilter: ipset: add the missing IPSETHASHWITHNET...

CVE-2023-6209

Relative URLs starting with three slashes were incorrectly parsed, and a path-traversal "/../" part in the path could be used to override the specified host. This could contribute to security problems in web sites. This vulnerability affects Firefox 120, Firefox ESR 115.5.0, and Thunderbird 115.5...

CVE-2023-6209

Relative URLs starting with three slashes were incorrectly parsed, and a path-traversal "/../" part in the path could be used to override the specified host. This could contribute to security problems in web sites. This vulnerability affects Firefox 120, Firefox ESR 115.5.0, and Thunderbird 115.5...

CVE-2023-6209

Relative URLs starting with three slashes were incorrectly parsed, and a path-traversal "/../" part in the path could be used to override the specified host. This could contribute to security problems in web sites. This vulnerability affects Firefox 120, Firefox ESR 115.5.0, and Thunderbird 115.5...

CVE-2018-10818

Connected document details confirm CVE-2018-10818 affects LG NAS devices, via a pre-auth remote command injection in the password parameter exposed through the /system/sharedir.php endpoint. The attack vector is unauthenticated and could enable arbitrary code execution on affected devices. Concre...

YubiKey authentication is working on published desktop but not published app

YubiKey does not work from a published app browser e.g., Microsoft Edge, but it works on the same browser inside a published desktop. The published app and desktop are both hosted on the same server...

SUSE-SU-2023:4463-1 Security update for libnbd

This update for libnbd fixes the following issues: - CVE-2023-5871: Fixed an assertion problem in ext-mode BLOCKSTATUS bsc1216769...

CVE-2023-40118

CVE-2023-40118 is addressed in ChromeOS updates as part of the Android Runtime Container security fixes. The connected ChromeOS release notes indicate CVE-2023-40118 was fixed as a Medium severity issue on impacted platforms within the Android Runtime Container, in the context of the ChromeOS Sta...

PT-2024-14744

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to an iteration problem in the usb get bos descriptor function when skipping the USB DT DEVICE CAPABILITY descriptor type. This results in the same descriptor being...

Apache Airflow Authorization Problem Vulnerability (CNVD-2023-93318)

Apache HTTP Server Buffer Overflow Vulnerability CNVD-2023-93320...

WEM Admin Console hangs while refreshing Agent Cache for some Agents via Console

When refreshing agent cache from Citrix WEM Console, the console freezes and have to kill and re-connect to get it working again. The issue happens only if specific agent machines are selected for the refresh cache action...

CVE-2023-35678

CVE-2023-35678 is listed in Android 14 vulnerability details under Framework with Type: Elevation of Privilege (EoP) and Severity: High. The Android 14 release notes do not provide public exploit details for this CVE. Mitigation guidance from the bulletin indicates that Android 14 devices with a ...

PT-2025-18867

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved, related to the bonding driver. When a non-ethernet device is enslaved to a bond device that is itself a slave, the bond device's IF...

SUSE CVE-2015-1870

The event scripts in Automatic Bug Reporting Tool ABRT uses world-readable permission on a copy of sosreport file in problem directories, which allows local users to obtain sensitive information from /var/log/messages via unspecified vectors...

Virtual Machines Do Not Start After the Upgrade of XenServer

After an upgrade of XenServer, Virtual Machines VMs will not start with the following error: Error: Starting VM 'Name-of-VM - This operation cannot be performed because the specified VDI could not be found on the storage substrate...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: kubeflow, metrics-server-fips, src, kubevela, velero-plugin-for-alicloud, vault-csi-provider, conftest-fips, kiam, plutono-fips, kubescape, smarter-device-manager-fips, dynamic-localpv-provisioner-fips, scorecard, k3d, kubeflow-fips, velero-plugin-for-alicloud-fips,...