CVE-2020-2809

CVE-2020-2809 affects Oracle E-Business Intelligence (DBI Setups) in Oracle E-Business Suite, versions 12.1.1–12.1.3. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise Oracle E-Business Intelligence, with exploitation requiring user interaction. Impac...

SUSE SLES12 Security Update : php7 (SUSE-SU-2019:2809-1)

This update for php7 fixes the following issues : Security issue fixed : CVE-2019-11043: Fixed possible remote code execution via envpathinfo underflow in fpmmain.c bsc1154999. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisor...

RHEL 7 : kernel-alt (RHSA-2019:2809)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:2809 advisory. The kernel-alt packages provide the Linux kernel version 4.x. Security Fixes: Kernel: page cache side channel attacks CVE-2019-5489 Kernel:...

CVE-2019-2809

Vulnerability in the Oracle iRecruitment component of Oracle E-Business Suite subcomponent: Password Reset. Supported versions that are affected are 12.1.1 - 12.1.3 and 12.2.3 - 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2019-2809

Vulnerability in the Oracle iRecruitment component of Oracle E-Business Suite subcomponent: Password Reset. Supported versions that are affected are 12.1.1 - 12.1.3 and 12.2.3 - 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2019-2809

CVE-2019-2809 affects Oracle E-Business Suite (iRecruitment) Password Reset subcomponent. Affected versions: 12.1.1–12.1.3 and 12.2.3–12.2.8. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise Oracle iRecruitment, potentially causing partial denial of ...

CVE-2018-2809

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Fluid Homepage & Navigation. Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2018-2809

CVE-2018-2809 affects Oracle PeopleSoft Enterprise PeopleTools Fluid Homepage & Navigation. Affected versions: 8.54, 8.55, 8.56. An unauthenticated, network-accessible attacker via HTTP can compromise PeopleTools; exploitation requires user interaction. Impact: potential unauthorized updates, ins...

RHEL 6 : Red Hat JBoss Enterprise Application Platform (RHSA-2017:2809)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2017:2809 advisory. Red Hat JBoss Enterprise Application Platform is a platform for Java applications based on the JBoss Application Server. This release of Red...

CVE-2017-2809

An exploitable vulnerability exists in the yaml loading functionality of ansible-vault before 1.0.5. A specially crafted vault can execute arbitrary python commands resulting in command execution. An attacker can insert python into the vault to trigger this vulnerability...

CVE-2017-2809

CVE-2017-2809 describes a YAML loading vulnerability in Ansible Vault prior to 1.0.5. A specially crafted vault can trigger arbitrary Python command execution, enabling code execution on affected systems. The issue affects the yaml loading functionality in ansible-vault, with the root cause tied ...

Vulnerability Spotlight: YAML Parsing Remote Code Execution Vulnerabilities in Ansible Vault and Tablib

Vulnerabilities discovered by Cory Duplantis of Talos.Talos is disclosing the presences of remote code execution vulnerabilities in the processing of Yet Another Markup Language YAML content in Ansible Vault and Tablib. Attackers can exploit these vulnerabilities through supplying malicious YAML...

RedHat Update for ipsilon RHSA-2016:2809-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Linux 7 : ipsilon (ELSA-2016-2809)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-2809 advisory. 1.0.0-13 - Backport patch for CVE-2016-8638 RHBZ1394116 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...

CVE-2016-2809

The Mozilla Maintenance Service updater in Mozilla Firefox before 46.0 on Windows allows user-assisted remote attackers to delete arbitrary files by leveraging certain local file execution...

CVE-2016-2809

CVE-2016-2809 : Affects Mozilla Firefox on Windows; the Mozilla Maintenance Service updater can be abused to delete arbitrary files via certain local file execution. Root cause is a local file-execution pathway in the maintenance updater. Impact is high for file deletion; exploitation details are...

Ubuntu 15.10 : lxd vulnerability (USN-2809-1)

Jeroen Simonetti discovered that LXD incorrectly set socket permissions. A local attacker could use this issue to escalate privileges. Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automaticall...

CVE-2015-2809

Summary: Multiple connected advisories confirm a vulnerability related to the Avahi daemon (unrelated to DSM CVE-2015-2809) where Avahi through 0.6.x/0.7.x replies to IPv6 unicast queries with non on-link source addresses, enabling remote DoS (traffic amplification) and potentially information le...

CVE-2014-2807

Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-2800 and CVE-2014-2809...

CVE-2014-2809

CVE-2014-2809 affects Microsoft Internet Explorer 6–11 and is described as a memory corruption vulnerability in a crafted web site that can enable remote code execution or memory-based denial of service. The issue is one of several IE memory corruption vulnerabilities disclosed in MS14-037; the c...