Siemens LOGO! Soft Comfort

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...

Siemens LOGO! Soft Comfort 路径遍历漏洞

Siemens LOGO! Soft Comfort is a set of automation logic programming software from Siemens Germany. A path traversal vulnerability exists in Siemens LOGO! An attacker could exploit the vulnerability to cause the system to be taken over by the attacker...

Siemens LOGO! Soft Comfort Uncontrolled Search Path Element Vulnerability

Siemens LOGO! Soft Comfort is a set of automation logic programming software from Siemens Germany. A security vulnerability exists in Siemens LOGO! A local attacker could exploit this vulnerability to cause a takeover of the system on which the software is installed...

openSUSE Security Update : xen (openSUSE-2021-514)

This update for xen fixes the following issues : - CVE-2021-3308: VUL-0: xen: IRQ vector leak on x86 bsc1181254, XSA-360 - CVE-2021-28687: HVM soft-reset crashes toolstack bsc1183072, XSA-368 - L3: conring size for XEN HV's with huge memory to small. Inital Xen logs cut bsc1177204 - L3: XEN domU...

CVE-2020-36311

An issue was discovered in the Linux kernel before 5.9. arch/x86/kvm/svm/sev.c allows attackers to cause a denial of service soft lockup by triggering destruction of a large SEV VM which requires unregistering many encrypted regions, aka CID-7be74942f184...

CVE-2020-36311

An issue was discovered in the Linux kernel before 5.9. arch/x86/kvm/svm/sev.c allows attackers to cause a denial of service soft lockup by triggering destruction of a large SEV VM which requires unregistering many encrypted regions, aka CID-7be74942f184...

SUSE SLES12 Security Update : xen (SUSE-SU-2021:1023-1)

This update for xen fixes the following issues : CVE-2021-3308: VUL-0: xen: IRQ vector leak on x86 bsc1181254, XSA-360 CVE-2021-28687: VUL-0: xen: HVM soft-reset crashes toolstack bsc1183072, XSA-368 CVE-2021-20257: VUL-0: xen: infinite loop issue in the e1000 NIC emulator bsc1182846...

SUSE SLED15 / SLES15 Security Update : xen (SUSE-SU-2021:1028-1)

This update for xen fixes the following issues : CVE-2021-3308: VUL-0: xen: IRQ vector leak on x86 bsc1181254, XSA-360 CVE-2021-28687: HVM soft-reset crashes toolstack bsc1183072, XSA-368 L3: conring size for XEN HV's with huge memory to small. Inital Xen logs cut bsc1177204 L3: XEN domU crashed ...

CVE-2020-36311

CVE-2020-36311 affects the Linux kernel prior to 5.9. In arch/x86/kvm/svm/sev.c, destroying a large SEV VM (unregistering many encrypted regions) can trigger a denial of service (soft lockup). The connected advisories confirm the issue and point to a fix in kernel 5.9 (and changelog indicating th...

SUSE-SU-2021:1028-1 Security update for xen

This update for xen fixes the following issues: - CVE-2021-3308: VUL-0: xen: IRQ vector leak on x86 bsc1181254, XSA-360 - CVE-2021-28687: HVM soft-reset crashes toolstack bsc1183072, XSA-368 - L3: conring size for XEN HV's with huge memory to small. Inital Xen logs cut bsc1177204 - L3: XEN domU...

Denial Of Service(DoS)

Xen is vulnerable to a denial of service, caused by the failure to call the initialization function by the "soft reset" feature. By initializing a "soft reboot", a local attacker could exploit this vulnerability to crash the process monitoring the guest...

How to Install and Configure RSA Soft Token on iOS Receiver

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. A recent update to the Citrix Receiver for iOS, adds integration of the RSA token to allow access to...

Fedora 32 : xen (2021-a468f36bbe)

The remote Fedora 32 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-a468f36bbe advisory. - HVM soft-reset crashes toolstack XSA-368 CVE-2021-28687 - HVM soft-reset crashes toolstack XSA-368 fedora-all CVE-2021-28687 Note that Nessus has...

Fedora 33 : xen (2021-0b784a4d02)

The remote Fedora 33 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-0b784a4d02 advisory. - HVM soft-reset crashes toolstack XSA-368 CVE-2021-28687 - HVM soft-reset crashes toolstack XSA-368 fedora-all CVE-2021-28687 Note that Nessus has...

MuleSoft Mule 代码问题漏洞

Mulesoft MuleSoft Mule is a lightweight integration platform from the US company MuleSoft Mulesoft. The platform supports management of message routing between nodes, data mapping, and more. A code issue vulnerability exists in MuleSoft Mule, which originates in the Mule runtime component. The...

HVM soft-reset crashes toolstack

ISSUE DESCRIPTION libxl requires all data structures passed across its public interface to be initialized before use and disposed of afterwards by calling a specific set of functions. Many internal data structures also require this initialize / dispose discipline, but not all of them. When the...

Xen 安全漏洞

Xen is an open source virtual machine monitor product from the University of Cambridge, UK. The product enables different and incompatible operating systems to run on the same computer and supports runtime migration to ensure uptime and avoid downtime. Xen has a security vulnerability that can be...

NewStart CGSL MAIN 6.02 : nss Multiple Vulnerabilities (NS-SA-2021-0053)

The remote NewStart CGSL host, running version MAIN 6.02, has nss packages installed that are affected by multiple vulnerabilities: - Improper refcounting of soft token session objects could cause a use-after-free and crash likely limited to a denial of service. This vulnerability affects Firefox...

Virtuozzo Hybrid Infrastructure 4.5 Hotfix 1 (4.5.0-289)

This update provides stability fixes for storage services. Vulnerability id: VSTOR-41460 Detaching a LUN from an SCST target may lead to soft lockup under certain circumstances. Vulnerability id: VSTOR-41301, VSTOR-41172, VSTOR-41272 Stability improvements for the storage service...

CVE-2021-21308

PrestaShop is a fully scalable open source e-commerce solution. In PrestaShop before version 1.7.2 the soft logout system is not complete and an attacker is able to foreign request and executes customer commands. The problem is fixed in 1.7.7.2...