10504 matches found
Design/Logic Flaw
An information exposure through log file vulnerability exists in Cortex XSOAR software where the secrets configured for the SAML single sign-on SSO integration can be logged to the '/var/log/demisto/' server logs when testing the integration during setup. This logged information includes the...
CVE-2021-3034
An information exposure through log file vulnerability exists in Cortex XSOAR software where the secrets configured for the SAML single sign-on SSO integration can be logged to the '/var/log/demisto/' server logs when testing the integration during setup. This logged information includes the...
Information Disclosure
productsgenericsetup is vulnerable to information disclosure. The vulnerability exists because the function ensureSnapshotsFolder does not tighten the permissions for access control on setup tool log files and snapshot files and folders, allowing anonymous visitors to view log and snapshot files...
GHSA-JFF3-MWP3-F8CW Exposure of Sensitive Information to an Unauthorized Actor in Products.GenericSetup
Impact What kind of vulnerability is it? Who is impacted? Information disclosure vulnerability - anonymous visitors may view log and snapshot files generated by the Generic Setup Tool. Patches Has the problem been patched? What versions should users upgrade to? The problem has been fixed in versi...
How to Configure a Citrix Gateway Appliance with Unlimited ICA Connections
This article contains information about configuring a Citrix Gateway appliance with unlimited Independent Computing Architecture ICA connections...
PT-2021-2339
Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to an elevation-of-privilege vulnerability in the Windows Update Stack Setup, which is caused by insecure privilege management. This vulnerability can be exploited to all...
Multi-forest consideration for published resources in Citrix Cloud
How to configure multi forest user can access the published resource in Citrix Cloud...
KB5000751: Setup Dynamic Update for Windows 10, version 2004 and 20H2: February 23, 2021
KB5000751: Setup Dynamic Update for Windows 10, version 2004 and 20H2: February 23, 2021 Applies To Windows 10 Enterprise, version 2004 Windows 10 Home and Pro, version 2004 Windows 10 Pro, version 2004 Windows 10 Enterprise and Education, version 2004 Windows 10 Pro Education, version 2004 Windo...
Apport 2.20 - Local Privilege Escalation
Exploit Title: Apport 2.20 - Local Privilege Escalation Date: 18/02/21 Exploit Author: Gr33nh4t Vendor Homepage: https://ubuntu.com/ Version: Apport: Ubuntu 20.10 - Before 2.20.11-0ubuntu50.5 Apport: Ubuntu 20.04 - Before 2.20.11-0ubuntu27.16 Apport: Ubuntu 18.04 - Before 2.20.9-0ubuntu7.23 Appor...
openSUSE Security Update : opera (openSUSE-2021-296)
This update for opera fixes the following issues : - Update to version 74.0.3911.107 - CHR-8311 Update chromium on desktop-stable-88-3911 to 88.0.4324.150 - DNA-90329 Implement clientcapabilities negotiation for Flow / Sync - DNA-90560 Search Tabs Open Tabs On Top - DNA-90620 Add opauto tests for...
OPENSUSE-SU-2021:0296-1 Security update for opera
This update for opera fixes the following issues: - Update to version 74.0.3911.107 - CHR-8311 Update chromium on desktop-stable-88-3911 to 88.0.4324.150 - DNA-90329 Implement clientcapabilities negotiation for Flow / Sync - DNA-90560 Search Tabs Open Tabs On Top - DNA-90620 Add opauto tests for...
CVE-2021-20644
ELECOM WRC-1467GHBK-A allows arbitrary scripts to be executed on the user's web browser by displaying a specially crafted SSID on the web setup page...
CVE-2021-20644
ELECOM WRC-1467GHBK-A allows arbitrary scripts to be executed on the user's web browser by displaying a specially crafted SSID on the web setup page...
CVE-2021-20644
ELECOM WRC-1467GHBK-A allows arbitrary scripts to be executed on the user's web browser by displaying a specially crafted SSID on the web setup page...
CVE-2021-20644: Improper Neutralization of Special Elements in Output Used by a Downstream Component
ELECOM WRC-1467GHBK-A allows arbitrary scripts to be executed on the user's web browser by displaying a specially crafted SSID on the web setup page...
PT-2021-14105
Name of the Vulnerable Software and Affected Versions: ELECOM WRC-1467GHBK-A affected versions not specified Description: The issue allows arbitrary scripts to be executed on the user's web browser by displaying a specially crafted SSID on the web setup page. Recommendations: At the moment, there...
SAP NetWeaver Master Data Management Access Control Vulnerability
SAP NetWeaver Master Data Management SAP MDM is a software from SAP Germany for managing inter-enterprise collaboration. A security vulnerability exists in SAP Software Provisioning Manager that stems from the failure to set a password option during installation, which can be exploited by an...
libusb:libusb_fuzzer: Heap-buffer-overflow in libusb_fill_control_setup
Project: https://github.com/libusb/libusb.git Detailed Report: https://oss-fuzz.com/testcase?key=6049849147523072 Project: libusb Fuzzing Engine: libFuzzer Fuzz Target: libusbfuzzer Job Type: libfuzzerasanlibusb Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address:...
nbd_add_socket in drivers/block/nbd.c in the Linux kernel through 5.10.12 has an ndb_queue_rq use-after-free that could be triggered by local attackers (with access to the nbd device) via an I/O request at a certain point during device setup aka CID-b98e762e3d71.
...