21209 matches found
Security Bulletin: Multiple vulnerabilities in IBM WebSphere Application Server Liberty, OpenSSL, libcurl, and IBM Java may affect IBM Storage Protect for Virtual Environments: Data Protection for Microsoft Hyper-V
Summary IBM Storage Protect for Virtual Environments: Data Protection for Microsoft Hyper-V can be affected by security flaws in IBM WebSphere Application Server Liberty, OpenSSL, libcurl, and IBM Java. The flaws can lead to denial of service, sensitive information exposure, memory resource...
RHEL 6 : qemu-kvm-rhev (RHSA-2015:0891)
The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2015:0891 advisory. KVM Kernel-based Virtual Machine is a full virtualization solution for Linux on AMD64 and Intel 64 systems. The qemu-kvm-rhev package provides the...
Oracle Database Server 安全漏洞
Oracle Database Server is a relational database management system from Oracle Corporation USA. This database management system provides data management, distributed processing, and other functions. A security vulnerability exists in Oracle Database Server's Java VM versions 19.3 to 19.26, 21.3 to...
RHEL 6 / 7 : qemu-kvm-rhev (RHSA-2015:1683)
The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2015:1683 advisory. KVM Kernel-based Virtual Machine is a full virtualization solution for Linux on AMD64 and Intel 64 systems. The qemu-kvm-rhev package provides th...
RHEL 6 : openstack-nova (RHSA-2014:0366)
The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2014:0366 advisory. OpenStack Compute nova launches and schedules large networks of virtual machines, creating a redundant and scalable cloud computing platform...
RHEL 6 / 7 : thermostat1 (RHSA-2015:1052)
The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2015:1052 advisory. Thermostat is a monitoring and instrumentation tool for the OpenJDK HotSpot Java Virtual Machine JVM with support for monitoring multiple JVM...
Important: Red Hat Security Advisory: gvisor-tap-vsock security update
An update for gvisor-tap-vsock is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerabili...
The vulnerability of the VPN service and the system for protecting end devices of GlobalProtect’s PAN-OS allows a perpetrator to trigger a service failure.
The vulnerability of the VPN service and the GlobalProtect endpoint protection system’s management system is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
Citrix Virtual Apps and Desktops - Unable to launch APP-V application from the VDA
When user tries to launch published app-v application there is an error displayed: The application failed to launch. This may be due to a network failure...
The vulnerability of the virtual server “1C-Bitrix: Virtual Machine” involves deficiencies in access control, allowing attackers to elevate their privileges to the root level.
The vulnerability of the virtual server “1C-Bitrix: Virtual Machine” is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to elevate their privileges to the root level...
PT-2025-22218
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to the fixed version Description A vulnerability in the Linux kernel has been resolved, related to KVM Kernel-based Virtual Machine and SVM Secure Virtual Machine. The issue occurs when a triple fault happens in...
Vulnerability of the ifcvf_probe() function in the drivers/vdpa/ifcvf/ifcvf_main.c file – This function is a driver for vDPA devices in the Linux kernel. It allows a hacker to cause a service failure.
Vulnerability of the ifcvfprobe function in the drivers/vdpa/ifcvf/ifcvfmain.c file – The drivers for vDPA devices in the Linux operating system are vulnerable to a vulnerability where memory is not properly released before the last reference is deleted memory leak. Exploiting this vulnerability...
CVAD LVDA - How to update list of Controllers on a Linux VDA
Instructions to update the list of Controllers on a Linux VDA...
Palo Alto Networks Cortex XDR Broker VM 操作系统命令注入漏洞
Palo Alto Networks Cortex XDR Broker VM is a secure virtual machine from Palo Alto Networks, Inc. that integrates with Cortex XDR to bridge the network and Cortex XDR. A security vulnerability exists in the Palo Alto Networks Cortex XDR Broker VM, which stems from command injection and could lead...
Citrix Virtual Apps and Desktops 2407 : Sophos Endpoint Agent gets loaded into ICA user session
Published app sessions are getting loaded with Sophos Endpoint Agent. This is seen under Workspace app Connection Center. Sophos Endpoint agent is getting loaded into all the Citrix ICA sessions. Citrix Workspace app Connection Center shows the "Sophos Endpoint Agent - Notification Icon". Sophos...
The vulnerability of programs for managing and monitoring IT services such as Microsoft System Center Operations Manager, System Center Service Manager, System Center Orchestrator, System Center Data Protection Manager, and System Center Virtual Machine Manager lies in the use of an insecure search path, which allows an attacker to escalate their privileges.
The vulnerabilities of programs for managing and monitoring IT services such as Microsoft System Center Operations Manager, System Center Service Manager, System Center Orchestrator, System Center Data Protection Manager, and System Center Virtual Machine Manager are related to the use of an...
Microsoft Security Update Validation Report April 2025
Microsoft’s April 2025 security updates have passed Citrix testing the updates are listed below. The testing is not all-inclusive; all tests are executed against English only environments and issues may still be found upon implementation. Follow best practices for testing and installing software...
CVE-2025-26688
Stack-based buffer overflow in Microsoft Virtual Hard Drive allows an authorized attacker to elevate privileges locally...
The vulnerability of the Windows Virtual Hard Disk component of the Microsoft Windows operating system, which allows a hacker to exploit their privileges.
The vulnerability of the Windows Virtual Hard Disk component of the Microsoft Windows operating system involves a buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to gain increased privileges...