150 matches found
How to Configure RDP Load Balancing by Using Remote Desktop Gateway Server on NetScaler Appliance
This article describes how to configure the Remote Desktop Protocol RDP server load balancing by using a Remote Desktop Gateway server on a NetScaler appliance. Background A Remote Desktop Gateway server is a gateway that enables authorized users to connect to remote computers on a corporate...
Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
Overview phpmyadmin/phpmyadmin is a web interface for MySQL and MariaDB. Affected versions of this package are vulnerable to Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' through the index.inc.php in setup/frames file. An attacker can inject BBCo...
SAP Cloud Connector Path Traversal Vulnerability
SAP Cloud Connector is used to establish a secure connection between a computer and the SAP cloud platform. A path traversal vulnerability exists in SAP Cloud Connector version 2.0, which arises by allowing the upload of zip files as backups. Such backup files can be spoofed by injecting special...
OpenGrok 安全漏洞
OpenGrok is open source a fast and usable source code search and cross-reference engine . It helps users to search, cross-reference and navigate the user's source code tree. A security vulnerability exists in OpenGrok that allows a low-privileged attacker to access the Web over HTTPS...
plugin.yaml file allows for duplicate entries in helm
Impact During a security audit of Helm's code base, Helm maintainers identified a bug in which a Helm plugin can contain duplicates of the same entry, with the last one always used. If a plugin is compromised, this lowers the level of access that an attacker needs to modify a plugin's install...
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
In Helm before versions 2.16.11 and 3.3.2, a Helm plugin can contain duplicates of the same entry, with the last one always used. If a plugin is compromised, this lowers the level of access that an attacker needs to modify a plugin's install hooks, causing a local execution attack. To perform thi...
OPENSUSE-SU-2021:0728-1 Security update for prosody
This update for prosody fixes the following issues: prosody was updated to 0.11.9: Security: modlimits, prosody.cfg.lua: Enable rate limits by default certmanager: Disable renegotiation by default modproxy65: Restrict access to local c2s connections by default util.startup: Set more aggressive...
OPENSUSE-SU-2021:0695-1 Security update for alpine
This update for alpine fixes the following issues: Update to release 2.24 A few crash fixes Implementation of XOAUTH2 for Yahoo! Mail. Update to release 2.23.2 Expansion of the configuration screen for XOAUTH2 to include username, and tenant. Alpine uses the domain in the From: header of a messag...
Secure Browser : How to use secure connection between Storefront and Cloud Connector for Secure Browser Service
How to use secure connection between Storefront and Cloud Connector for Secure Browser Service...
Privilege Escalation
OPC UA Clients and Servers built with the OPC UA .NET Standard stack is vulnerable to privilege escalation. The vulnerability exists because that it allows a rogue application to establish a secure connection using invalid certificates...
CVE-2020-29457
A Privilege Elevation vulnerability in OPC UA .NET Standard Stack 1.4.363.107 could allow a rogue application to establish a secure connection...
CVE-2020-29457
A Privilege Elevation vulnerability in OPC UA .NET Standard Stack 1.4.363.107 could allow a rogue application to establish a secure connection...
Privilege escalation
A Privilege Elevation vulnerability in OPC UA .NET Standard Stack 1.4.363.107 could allow a rogue application to establish a secure connection...
CVE-2020-29457
A Privilege Elevation vulnerability in OPC UA .NET Standard Stack 1.4.363.107 could allow a rogue application to establish a secure connection...
What is the TLS padlock saying?
Security What is the TLS padlock saying? Share November 20th, 2020 Alice and Bob use TLS to keep their long distance relationship hot and private. TL;DR: skip to the conclusions to see what Alice learned. The Privacy Problem Alice and Bob had to turn their relationship into a long distance one...
Django: Incorrect HTTP detection with reverse-proxy connecting via HTTPS
An HTTP detection flaw was discovered in Django. If deployed behind a reverse-proxy connecting to Django via HTTPS, django.http.HttpRequest.scheme incorrectly detected client requests made using HTTP as using HTTPS. This resulted in incorrect results for issecure and buildabsoluteuri, and HTTP...
CVE-2020-15187
In Helm before versions 2.16.11 and 3.3.2, a Helm plugin can contain duplicates of the same entry, with the last one always used. If a plugin is compromised, this lowers the level of access that an attacker needs to modify a plugin's install hooks, causing a local execution attack. To perform thi...
PT-2020-14258 · Helm +2 · Helm +2
Name of the Vulnerable Software and Affected Versions: Helm versions prior to 2.16.11 Helm versions prior to 3.3.2 Description: A Helm plugin can contain duplicates of the same entry, with the last one always used. If a plugin is compromised, this lowers the level of access that an attacker needs...