PT-2025-8439

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A kernel panic issue was encountered due to a timing problem between mtk disp ovl irq handler and mtk ovl disable vblank functions. This issue occurred when callback data was NULL in the...

Denial Of Service (DoS)

RESERVED This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided...

Unable to launch desktop via Gateway in invoked mode ( Client Detection done and selected workspace to Always Open ICA file )

Unable to launch desktop via Gateway in invoked mode. ICA launch works downloading the file, non invoked mode and clicking on it works In the non-working response for ICA file download, we see Riverbed headers highlighted and the "Connection: close" header being stripped...

CVE-2020-17639

The IBM SDK, Java Technology Edition Security Bulletin documents CVE-2020-17639 as part of a set of Java SE issues disclosed in the July 2020 CP Update. Affected IBM releases are: 7.0.0.0–7.0.10.65, 7.1.0.0–7.1.4.65, and 8.0.0.0–8.0.6.11. Remediation is provided through newer builds: 7.0.10.70, 7...

CVE-2010-0474

CVE-2010-0474 is listed as part of Debian WebKit vulnerabilities in DSA-2188-1. The affected package is webkit (GTK+ WebKit), with multiple CVEs including CVE-2010-0474. Debian states these problems were fixed in the stable distribution (squeeze) with version 1.2.7-0+squeeze1 (and 1.2.7-1 for whe...

CVE-2021-22099

Cloud Foundry CVE-2021-22099 is a Server-Side Request Forgery (SSRF) in the Cloud Controller. Malicious users can trigger HTTP GET requests to internal CF components and read responses. Affected products and versions: CAPI all versions before 1.114.0; CF Deployment all versions before 16.23.0. Mi...

updateSignValidity() May Break registerSelf() Due to Lack of Input Validation

Lines of code Vulnerability details Impact requireblock.timestamp Recommended Mitigation Steps requiresignValidity != 0, "signValidity Can't Be Zero" --- The text was updated successfully, but these errors were encountered: All reactions...

Data Loss/Denial of Service in SWHKD

SWHKD 1.1.5 unsafely uses the /tmp/swhks.pid pathname. There can be data loss or a denial of service. A patch is available on the 1.1.0 branch of the repository...

CWA for Chrome: Unable to copy-paste cells from Published Excel App to Google sheets opened locally

When you copy multiple cell values from Excel App via ICA to Google Sheets accessed from Local PC the values fail to get pasted to Google Sheets...

PT-2022-17745

Name of the Vulnerable Software and Affected Versions WoWonder The Ultimate PHP Social Network Platform version 4.0.0 Description The issue allows unauthenticated attackers to arbitrarily change group ID names due to an access control problem. Recommendations For WoWonder The Ultimate PHP Social...

CVE-2021-4148

A vulnerability was found in the Linux kernel's blockinvalidatepage in fs/buffer.c in the filesystem. A missing sanity check may allow a local attacker with user privilege to cause a denial of service DOS problem...

Citrix Xenserver 7.1CU2 to Citrix Hypervisor 8.2 upgrade gets stuck at Boot Screen for servers with HPE Smart Array

After the Host is booted into the installer kernel it gets stuck at following screen...

FIDO: Here’s Another Knife to Help Murder Passwords

We all hate passwords, but none of us want to make logging into our accounts a hassle with extra time, steps and devices. That’s why the Fast Identity Online Alliance FIDO published a white paper PDF on Thursday, outlining different use cases for the adoption of their FIDO2 set of specifications...

Gateway 12.1 55.247- after reboot/restart the Gateway is not working need to Enable/Disabled MBF for get access to the Gateway page

After ADC reboot/restart Customer unable to access Citrix Gateway page. Customer had to toggle MBF mode on ADC for restore access to Citrix Gateway Page...

PT-2022-10058

Name of the Vulnerable Software and Affected Versions Secomea GateManager versions prior to 9.6.621421014 Description The issue is related to permission problems in the LinkManager web portal of Secomea GateManager, allowing a logged-in LinkManager user to access stored SiteManager backup files...

Denial Of Service (DoS)

RESERVED This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided...

Secure Hub fails to authenticate with Citrix Gateway 13.0 83.27 when using an Advanced Authentication policy for LDAP

Secure Hub shows the following error when trying to connect to Citrix Gateway: "You may need to contact your administrator to verify your sign-on credentials". Closer inspection of network traffic through Citrix Gateway shows that there is no 'Set-Cookie' response found in the reply to "GET...

MvpnExcludeDomains fails to take effect on iOS when using Citrix WebSSO micro VPN with Microsoft Endpoint Manager MAM (Intune)

Microsoft Edge or Citrix Secure Mail for iOS is configured with 'MvpnExcludeDomains'. When a user browses to a website that is listed under'MvpnExcludeDomains', the traffic is still sent through Citrix Gateway. This traffic is instead expected to be sent directly to the website not through Citrix...

PT-2022-28889

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.13 through v5.16.4 Description The issue affects the USB gadget functionality, specifically the f sourcesink component, where an isoc transfer problem occurs at USB SPEED SUPER PLUS. The actual impact and potential for...

CVE-2017-1095

CVE-2017-1095 affects IBM Jazz Reporting Service’s Lifecycle Query Engine (LQE). The IBM Security Bulletin reports a cross-site scripting vulnerability in JRS, enabling a user to embed arbitrary JavaScript in the Web UI and potentially disclose credentials within a trusted session. Affected produ...