Veeam Availability Console U1 Cumulative Patch 1817

Challenge Veeam Availability Console U1 Cumulative Patch 1817. This update supersedes Veeam Availability Console U1 Cumulative Patch 1807. Cause Please confirm you are running version 2.0.2.1750 or later prior to installing this cumulative patch 1817. You can check this under Windows Programs and...

VMware vCenter Server Appliance 6.5 < 6.5 U1 Multiple Vulnerabilities (VMSA-2017-0013)

The version of VMware vCenter Server Appliance installed on the remote host is 6.5 prior to 6.5 Update 1 6.5 U1. It is, therefore, affected by multiple vulnerabilities : - An insecure library loading issue exists due to the use of the LDLIBRARYPATH variable to look for specific files or libraries...

Watchguard Firebox / XTM XXE Injection

Watchguardas Firebox and XTM are a series of enterprise grade network security appliances providing advanced security services like next generation firewall, intrusion prevention, malware detection and blockage and others. Two vulnerabilities were discovered affecting the XML-RPC interface of the...

Product update: Virtuozzo Automator 7 Update 1 Hotfix 2 (7.0.1-740)

The new packages for Virtuozzo Automator 7 introducing a usability bug fix for the management node. Vulnerability id: PVA-36686 The 'vzlicmon' service now automatically starts on VA Management Node update, start, or restart to make sure that the Virtuozzo Automator license will be updated when...

Product update: Virtuozzo Automator 7 Update 1

The new packages for Virtuozzo Automator 7 introducing new features as well as usability and stability bug fixes. Vulnerability id: PVA-36535 Fixed collection of CPU statistics in VA MN. Vulnerability id: PVA-36516 Changing container's private area in the host settings in VA MN resulted in deleti...

VMware vSphere 6.5 - Citrix Known Issues

Citrix is committed to ensuring compatibility with the latest VMware hypervisor releases. VMware released vSphere 6.5 in Nov 2016and vSphere 6.5 Update 1 in Aug 2017. Basic compatibility testing has been performed between already released Citrix products and vSphere 6.5 / 6.5 update 1.As always, ...

Veeam Backup for Microsoft 365 1.0 Update 1 Release Notes

Challenge Veeam Backup for Microsoft 365 1.0 Update 1 Release Notes Cause Note: After installing Update 1, please install the latest update. The package contains two files: Veeam.Backup365.msi and VeeamExplorerForExchange.msi. Prior to installing this update please reboot the Veeam Backup for...

Release Notes for Veeam Backup & Replication 9.5 Update 1

More Recent Version Available Please find the latest version of Veeam Backup & Replication here: Veeam Downloads - Latest Version Challenge Release Notes for Veeam Backup & Replication 9.5 Update 1 Cause Please note that this is an incremental update of the Veeam Backup & Replication version 9.5...

Microsoft Exchange Server Information Disclosure Vulnerability (3160339)

This host is missing an important security update according to Microsoft Bulletin MS16-079. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE...

Description of Update 1 for Microsoft Advanced Threat Analytics v1.6

Describes update 1 for Microsoft Advanced Threat Analytics ATA v1.6.SymptomsAfter you run Microsoft Advanced Threat Analytics ATA v1.6 for several weeks, the ATA console may display many unexpected suspicious activities of type "Suspicion of identity theft based on abnormal behavior". If...

CVE-2016-1113

Cross-site scripting XSS vulnerability in Adobe ColdFusion 10 before Update 19, 11 before Update 8, and 2016 before Update 1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Code injection

Adobe ColdFusion 10 before Update 19, 11 before Update 8, and 2016 before Update 1 mishandles wildcards in name fields of X.509 certificates, which might allow man-in-the-middle attackers to spoof servers via a crafted certificate...

Release Notes for Veeam Backup & Replication 9.0 Update 1

More Recent Version Available Please find the latest version of Veeam Backup & Replication here: Veeam Downloads - Latest Version Challenge Release Notes for Veeam Backup & Replication 9.0 Update 1 Cause Please confirm you are running version 9.0.0.902 prior to installing this update. You can che...

Synology DiskStation Manager 5.2-5565 Cross Site Scripting

------------------------------------------------------------------------ Reflected Cross-Site Scripting in Synology DiskStation Manager ------------------------------------------------------------------------ Han Sahin, May 2015...

VMware Remote Console e.x.p build-158248 - format string vulnerability

No description provided by source. DSECRG-09-053 VMware Remote Console - format string vulnerability http://www.dsecrg.com/pages/vul/show.php?id=153 VMrc vulnerable to format string attacks. Exploitation of this issue may lead to arbitrary code execution on the system where VMrc is installed...

CVE-2014-3138

SQL injection vulnerability in Xerox DocuShare before 6.53 Patch 6 Hotfix 2, 6.6.1 Update 1 before Hotfix 24, and 6.6.1 Update 2 before Hotfix 3 allows remote authenticated users to execute arbitrary SQL commands via the PATHINFO to /docushare/dsweb/ResultBackgroundJobMultiple/. NOTE: some of the...

Watchguard Fireware XTM OpenSSL TLS心跳信息泄漏漏洞

CVE ID:CVE-2014-0160 WatchGuard Fireware XTM是一款防火墙设备。 WatchGuard Fireware XTM所绑定的OpenSSL存在安全漏洞，OpenSSL处理TLS”心跳“扩展存在一个边界错误，允许攻击者利用漏洞获取64k大小的已链接客户端或服务器的内存内容。内存信息可包括私钥，用户名密码等。 0 WatchGuard Fireware XTM 11.x WatchGuard Fireware XTM 11.8.3 Update 1版本已修复该漏洞，建议用户下载使用： http://watchguardsecuritycenter.com...

Sun Java Runtime Environment 1.6 - Web Start JNLP File Stack Buffer Overflow

Exploit for linux platform in category remote exploits source: http://www.securityfocus.com/bid/24832/info Sun Java Runtime Environment is prone to a stack-based buffer-overflow vulnerability because it fails to adequately bounds-check user-supplied input before copying it to an insufficiently...

Synology DiskStation Manager arbitrary file modification

Overview Synology DiskStation Manager versions 4.3-3776-3 and below contain a vulnerability that allows a remote unauthenticated user to append arbitrary data to an arbitrary file under root privileges. Description CWE-284: Improper Access Control - CVE-2013-6955Synology DiskStation Manager...

BitZipper 2013 < 2013 Update 1 Memory Corruption Vulnerability

The version of BitZipper is 2013 prior to update 1 2013.13.4.16. As such, it is affected by a memory corruption vulnerability triggered when handling a crafted ZIP file. An attacker could exploit this issue by tricking a user into opening a specially crafted ZIP file, resulting in arbitrary code...