Intermittently Users Are Unable to Access Start Menu After Citrix Workspace Environment Management Application Security Rules Are Applied

Start menu is intermittently inaccessible after applying default/custom rules...

DEBIAN-CVE-2021-28951

An issue was discovered in fs/iouring.c in the Linux kernel through 5.11.8. It allows attackers to cause a denial of service deadlock because exit may be waiting to park a SQPOLL thread, but concurrently that SQPOLL thread is waiting for a signal to start, aka CID-3ebba796fa25...

Linux Kernel Security Vulnerabilities

The Linux kernel is a computer operating system kernel written in C and assembly language, compliant with the POSIX standard, and distributed under the GNU General Public License. A denial of service vulnerability exists in fs/iouring.c in Linux kernel 5.11.8 and earlier. The vulnerability stems...

wpDataTables < 3.4.2 - Blind SQL Injection via start Parameter

The plugin allows a low privilege authenticated user to perform Boolean-based blind SQL Injection in the table list page on the endpoint /wp-admin/admin-ajax.php?action=getwdtableid=1, on the 'start' HTTP POST parameter. This allows an attacker to access all the data in the database and obtain...

libjpeg-turbo Heap Buffer Overflow DoS

The vulnerability of the startinputppm function in the rdppm.c library used for working with images in libjpeg-turbo is related to reading data beyond the buffer’s acceptable limits. Exploiting this vulnerability could allow a remote attacker to gain access to confidential data and also cause...

JVN#68418039: The installers of E START products may insecurely load Dynamic Link Libraries

The installers of E START products by GMO INSIGHT Inc. contain an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries in the folder specified by the TEMP environment variable or where the installer resides CWE-427, CVE-2015-9267, and CVE-2015-9268. Impact...

CVE-2021-20650

Cross-site request forgery CSRF vulnerability in ELECOM NCC-EWF100RMWH2 allows remote attackers to hijack the authentication of administrators and execute an arbitrary request via unspecified vector. As a result, the device settings may be altered and/or telnet daemon may be started...

PT-2021-14111

Name of the Vulnerable Software and Affected Versions: ELECOM NCC-EWF100RMWH2 affected versions not specified Description: A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of administrators and execute an arbitrary request via an unspecified vector. Thi...

PT-2021-28056

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type of UNKNOWN READ. The crash state includes cpu arm exec armeb, resume all vcpus armeb, and vm start armeb. No informati...

docpress (>=0.1.0, <=0.5.5), metalsmith-start (>=0.6.0, <=1.3.4) +1 more potentially affected by CVE-2021-3189 via slashify (1.0.0)

slashify NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on slashify and may be impacted: - docpress =0.1.0, =0.6.0, =1.2.1, =1.2.3 Source cves: CVE-2021-3189 Source advisory: GHSA-F4HQ-453J-P95F...

docpress (>=0.1.0, <=0.5.5), metalsmith-start (>=0.6.0, <=1.3.4) +1 more potentially affected by CVE-2021-3189 via slashify (1.0.0)

slashify NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on slashify and may be impacted: - docpress =0.1.0, =0.6.0, =1.2.1, =1.2.3 Source cves: CVE-2021-3189 Source advisory: OSV:GHSA-F4HQ-453J-P95F...

Mozilla: IMAP Response Injection when using STARTTLS

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes that during the plaintext phase of the STARTTLS connection setup, protocol commands could have been injected and evaluated within the encrypted session...

Mozilla: IMAP Response Injection when using STARTTLS

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes that during the plaintext phase of the STARTTLS connection setup, protocol commands could have been injected and evaluated within the encrypted session...

EulerOS 2.0 SP3 : java-1.8.0-openjdk (EulerOS-SA-2021-1078)

According to the versions of the java-1.8.0-openjdk packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Serialization. Supported versions that are...

CWA for Windows does not dynamically update icons in start menu (published applications) | works fine if refresh apps in CWA is done

This articles describes how we can force an update on start menu applications coming from Citrix workspace app on the endpoint when there is a chance made, i.e.- application name changed from Citrix studio etc...

PT-2021-27386

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to an index-out-of-bounds crash. The crash occurs in the following functions: fuzz send next response, fuzz handle transfer, and...

Linux kernel arbitrary code execution vulnerability

The Linux kernel is a computer operating system kernel written in C and assembly language, compliant with the POSIX standard, and distributed under the GNU General Public License. An arbitrary code execution vulnerability exists in mwifiexcmd80211adhocstart in...

CVE-2020-36158

mwifiexcmd80211adhocstart in drivers/net/wireless/marvell/mwifiex/join.c in the Linux kernel through 5.10.4 might allow remote attackers to execute arbitrary code via a long SSID value, aka CID-5c455c5ab332...

GNU Binutils code-related vulnerabilities

GNU Binutils is a set of programming tools for creating and managing binary programs, object files, libraries, profile data and assembly source code. A null pointer dereference vulnerability exists in bfdpefscanstartaddress in bfd/pef.c in GNU Binutils versions prior to 2.34. An attacker could...

USVN Operating System Command Injection Vulnerability

USVN is a Php-based software for configuring Subversion by the USVN team. A security vulnerability exists in versions prior to USVN 1.0.9 that allows remote code execution via shell metacharacters in the start-of-number or end-of-number parameter to lastthunderdredrequest aka...