5671 matches found
CVE-2023-5828: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in Nanning Ontall Longxing Industrial Development Zone Project Construction and Installation Management System up to 20231026. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file login.aspx. The manipulation of the...
Error: "There are no apps or desktops available for you at this time" after logon StoreFront
Multiple zones are configured within a single site. Primary zone and Satellite zone both contain one Delivery Controller and one Storefront for redundancy. If the Delivery Controller in Satellite zone fails, the whole environment is still working well. But if the Delivery Controller in Primary zo...
SUSE-SU-2023:3563-2 Security update for icu73_2
This update for icu732 fixes the following issues: - Update to release 73.2 CLDR extends the support for “short” Chinese sort orders to cover some additional, required characters for Level 2. This is carried over into ICU collation. ICU has a modified character conversion table, mapping some...
Ubuntu 20.04 ESM / 22.04 ESM : ldns vulnerabilities (USN-5257-2)
The remote Ubuntu 20.04 ESM / 22.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5257-2 advisory. USN-5257-1 fixed several vulnerabilities in ldns. This update provides the corresponding update for Ubuntu 20.04 ESM and Ubuntu 22.04 ESM...
CWP dns_zone_editor Code Execution
The vulnerability of the dnszoneeditor module of the Control Web Panel formerly CentOS Web Panel relates to the failure to take measures to neutralize special elements. Exploiting this vulnerability may allow a malicious actor to execute arbitrary code remotely...
How To: Update time zone on NetScaler
Change the default time zone of the NetScaler...
Pure Storage FlashBlade Security Vulnerability
Pure Storage FlashBlade is a consolidated storage platform for file and object workloads from U.S.-based Pure Storage. A security vulnerability exists in FlashBlade Purity that arises from a user with access to an administrative account on a FlashBlade that is configured with a snapshot schedule...
CVE-2023-43731
Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "zonename" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...
PT-2023-28952 · Unknown · Oscommerce
Name of the Vulnerable Software and Affected Versions: Os Commerce affected versions not specified Description: The issue is a Cross-Site Scripting XSS vulnerability that allows attackers to inject JavaScript through the zone name parameter, potentially leading to unauthorized execution of script...
CVE-2023-3767
An OS command injection vulnerability has been found on EasyPHP Webserver affecting version 14.1. This vulnerability could allow an attacker to get full access to the system by sending a specially crafted exploit to the /index.php?zone=settings parameter...
PT-2023-29069 · Tenda · Tenda Ac10
Name of the Vulnerable Software and Affected Versions: Tenda AC10U version 1.0 US AC10UV1.0RTL V15.03.06.49 multi TDE01 Description: A stack overflow issue was discovered via the timeZone parameter in the fromSetSysTime function. This issue can be exploited, potentially leading to unauthorized...
CVE-2023-3767: Improper Neutralization of Special Elements used in an OS Command
An OS command injection vulnerability has been found on EasyPHP Webserver affecting version 14.1. This vulnerability could allow an attacker to get full access to the system by sending a specially crafted exploit to the /index.php?zone=settings parameter...
Important: ansible
Issue Overview: A flaw was found in the solariszone module from the Ansible Community modules. When setting the name for the zone on the Solaris host, the zone name is checked by listing the process with the 'ps' bare command on the remote machine. An attacker could take advantage of this flaw by...
Security Bulletin: Multiple vulnerabilities in hadoop-mapreduce-client-core-2.7.3.jar affect IBM Application Performance Management products
Summary There are multiple vulnerabilities in hadoop-mapreduce-client-core-2.7.3.jar used by IBM Application Performance Management. IBM Applicatoon Performance Management has addressed the applicable CVEs. Vulnerability Details CVEID:CVE-2017-3166 DESCRIPTION: Apache Hadoop could allow a remote...
Oracle Linux 8 : bind (ELSA-2019-3552)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-3552 advisory. - Fix CVE-2018-5745 - Fix CVE-2019-6465 - Fix CVE-2019-6471 Tenable has extracted the preceding description block directly from the Oracle Linux securi...
Oracle Linux 7 : bind (ELSA-2020-1061)
The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-1061 advisory. - Limit number of queries per TCP connection CVE-2019-6477 - Fix mkeys test validating CVE-2018-5745 fix - Fix CVE-2018-5745 Tenable has extracted the...
Tenda AC7 timeZone Parameter Stack Buffer Overflow Vulnerability
The Tenda AC7 is a dual-band wireless router with a strong signal and stable performance for large, multi-bedroom users. The Tenda AC7 suffers from a stack buffer overflow vulnerability that originates from the timeZone parameter of /goform/SetSysTimeCfg failing to correctly validate the length a...
CVE-2023-41558
Tenda AC7 V1.0 V15.03.06.44 was discovered to contain a stack overflow via parameter timeZone at url /goform/SetSysTimeCfg...
