CVE-2020-2858

CVE-2020-2858 affects Oracle E-Business Suite Marketing Administration (Marketing component) versions 12.1.1–12.1.3. An unauthenticated attacker with network access over HTTP can compromise Oracle Marketing; attacks require user interaction. Consequences include unauthorized access to critical da...

Huawei EulerOS: Security Advisory for qemu-kvm (EulerOS-SA-2020-1367)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2019-2858

CVE-2019-2858 affects the Oracle Identity Manager component of Oracle Fusion Middleware (subcomponent: Advanced Console). Affected versions are 11.1.2.3.0 and 12.2.1.3.0. The vulnerability allows a low-privileged, network-accessing attacker over HTTP to compromise Oracle Identity Manager, potenti...

Information Disclosure

Red Hat Gluster Storage is vulnerable to information disclosure attacks. A remote authenticated user could exploit a flaw in the erratum RHSA-2017:2858 to obtain potentially sensitive information on the target system...

Natus Xltek NeuroWorks

1. EXECUTIVE SUMMARY CVSS v3 10.0 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Natus Medical, Inc. Natus Equipment: Natus Xltek NeuroWorks software Vulnerabilities: Stack-Based Buffer Overflow, Out-of-Bounds Read 2. RISK EVALUATION Successful exploitation of these...

CVE-2017-2858

CVE-2017-2858 affects Natus Xltek NeuroWorks 8. The TALOS advisory TALOS-2017-0362 describes an out-of-bounds read vulnerability in the ItemList traversal during network data handling in NeuroWorks 8, which can be triggered by a specially crafted network packet to cause a denial-of-service via an...

CVE-2018-2858

CVE-2018-2858 affects the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite. The vulnerability is in the HTTP data path subsystem and impacts versions prior to 8.7.17. An unauthenticated attacker with network access over HTTP can read data from a subset of the Sun ...

CVE-2017-15087

It was discovered that the fix for CVE-2017-12163 was not properly shipped in erratum RHSA-2017:2858 for Red Hat Gluster Storage 3.3 for RHEL 6...

Code injection

It was discovered that the fix for CVE-2017-12151 was not properly shipped in erratum RHSA-2017:2858 for Red Hat Gluster Storage 3.3 for RHEL 6...

Code injection

It was discovered that the fix for CVE-2017-12150 was not properly shipped in erratum RHSA-2017:2858 for Red Hat Gluster Storage 3.3 for RHEL 6...

CVE-2017-15085

It was discovered that the fix for CVE-2017-12150 was not properly shipped in erratum RHSA-2017:2858 for Red Hat Gluster Storage 3.3 for RHEL 6...

CVE-2017-15086

It was discovered that the fix for CVE-2017-12151 was not properly shipped in erratum RHSA-2017:2858 for Red Hat Gluster Storage 3.3 for RHEL 6...

CVE-2017-15085

It was discovered that the fix for CVE-2017-12150 was not properly shipped in erratum RHSA-2017:2858 for Red Hat Gluster Storage 3.3 for RHEL 6...

CVE-2017-15087

CVE-2017-15087 is a descriptor indicating that the fix for CVE-2017-12163 was not properly shipped in the erratum RHSA-2017:3110 for Red Hat Gluster Storage 3.3 on RHEL 6. Connected records show CVE-2017-12163 concerns an SMB1 information-leak in Samba, but there are no additional technical detai...

CVE-2017-15086

It was discovered that the fix for CVE-2017-12151 was not properly shipped in erratum RHSA-2017:2858 for Red Hat Gluster Storage 3.3 for RHEL 6...

CVE-2017-15087

It was discovered that the fix for CVE-2017-12163 was not properly shipped in erratum RHSA-2017:2858 for Red Hat Gluster Storage 3.3 for RHEL 6...

CVE-2017-15087

It was discovered that the fix for CVE-2017-12163 was not properly shipped in erratum RHSA-2017:2858 for Red Hat Gluster Storage 3.3 for RHEL 6...

CVE-2017-15085

CVE-2017-15085 notes that the fix for CVE-2017-12150 was not properly shipped in RHSA-2017:3110 for Red Hat Gluster Storage 3.3 on RHEL 6. The connected advisories confirm CVE-2017-12150, CVE-2017-12151, and CVE-2017-12163 relate to Samba security fixes (SMB signing, DFS/SMB2 encryption handling,...

CVE-2017-15086

It was discovered that the fix for CVE-2017-12151 was not properly shipped in erratum RHSA-2017:2858 for Red Hat Gluster Storage 3.3 for RHEL 6...

CVE-2017-15085

It was discovered that the fix for CVE-2017-12150 was not properly shipped in erratum RHSA-2017:2858 for Red Hat Gluster Storage 3.3 for RHEL 6...